Discover agents running on a workstation

After the Endpoint Controller is installed and onboarded, enable discovery for personal agents in the PingOne Privilege admin console. Discovery then automatically finds the personal agents operating on the desktops where the Endpoint Controller is deployed, so you can see and govern them.

Before you begin

Ensure the following:

You’ve completed Starting a trial and setting up your environment.
You’ve created the necessary users, groups, and permissions.
You’ve installed the Endpoint Controller and it reports a Connected status. Learn more in Installing the Endpoint Controller and accessing the admin console.
You can access the PingOne Privilege admin console as an administrator.

Enable discovery for personal agents

One of the quickest use cases to implement for Agent Privilege is discovery for personal agents. The Endpoint Controller finds any personal agents running in your environment and provides an inventory that you can audit and govern.

In the PingOne Privilege admin console, go to Settings.
Click the Personal Agents tab.
Ensure that Discover personal agents is Enabled. If it’s Disabled:
1. Click Edit.
2. Toggle Discover personal agents to Enabled.
3. Click Save Changes.

Review your first discovery results

After discovery is enabled, give the Endpoint Controller time to scan the workstation, then review what it finds:

In the PingOne Privilege admin console, go to AI Security > Personal Agents.

Your Personal Agents dashboard provides an overview of all AI agents and local LLMs detected across managed devices.
Click the tabs to review different findings:
- Users: A list of users using agents.
- Agents: Discovered personal agents, including their users and associated device, and when the agent was last seen.
- LLMs: Discovered LLMs, including their users and associated device, and when the LLM was last seen.
- MCPs: Discovered MCP servers, including their type, the URL or command used, their users and associated device, and when the MCP was last seen.
- Graph: Select a discovered personal agent to view its graph.
Open a personal agent or MCP server on your test workstation and investigate the finding.

If no agents appear, confirm that the Endpoint Controller is running and connected, then run an agent on the workstation and wait for the next discovery cycle. Learn more in Discover and manage personal agents.

Next steps

Your evaluation environment is up and running with Agent Privilege. Continue with Configure Agent Privilege.