---
title: Discover agents running on a workstation
description: Turn on personal agent discovery and review the first agents found on your onboarded workstation.
component: privilege
page_id: privilege:agent-privilege:getting-started/discover-agents
canonical_url: https://docs.pingidentity.com/privilege/agent-privilege/getting-started/discover-agents.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 22, 2026
section_ids:
  before-you-begin: Before you begin
  enable-discovery-for-personal-agents: Enable discovery for personal agents
  review-your-first-discovery-results: Review your first discovery results
  next-steps: Next steps
---

# Discover agents running on a workstation

After the Endpoint Controller is installed and onboarded, enable discovery for personal agents in the PingOne Privilege admin console. Discovery then automatically finds the personal agents operating on the desktops where the Endpoint Controller is deployed, so you can see and govern them.

## Before you begin

Ensure the following:

* You've completed [Starting a trial and setting up your environment](starting-a-trial.html).

* You've [created the necessary users, groups, and permissions](users-and-groups.html).

* You've installed the Endpoint Controller and it reports a `Connected` status. Learn more in [Installing the Endpoint Controller and accessing the admin console](onboarding-endpoint-controller.html).

* You can access the PingOne Privilege admin console as an administrator.

## Enable discovery for personal agents

One of the quickest use cases to implement for Agent Privilege is discovery for personal agents. The Endpoint Controller finds any personal agents running in your environment and provides an inventory that you can audit and govern.

1. In the PingOne Privilege admin console, go to **Settings**.

2. Click the **Personal Agents** tab.

3. Ensure that **Discover personal agents** is **Enabled**. If it's **Disabled**:

   1. Click **Edit**.

   2. Toggle **Discover personal agents** to **Enabled**.

   3. Click **Save Changes**.

## Review your first discovery results

After discovery is enabled, give the Endpoint Controller time to scan the workstation, then review what it finds:

1. In the PingOne Privilege admin console, go to **AI Security > Personal Agents**.

   Your **Personal Agents** dashboard provides an overview of all AI agents and local LLMs detected across managed devices.

2. Click the tabs to review different findings:

   * **Users**: A list of users using agents.

   * **Agents**: Discovered personal agents, including their users and associated device, and when the agent was last seen.

   * **LLMs**: Discovered LLMs, including their users and associated device, and when the LLM was last seen.

   * **MCPs**: Discovered MCP servers, including their type, the URL or command used, their users and associated device, and when the MCP was last seen.

   * **Graph**: Select a discovered personal agent to view its graph.

3. Open a personal agent or MCP server on your test workstation and investigate the finding.

If no agents appear, confirm that the Endpoint Controller is running and connected, then run an agent on the workstation and wait for the next discovery cycle. Learn more in [Discover and manage personal agents](../use-cases/personal-agents.html).

## Next steps

Your evaluation environment is up and running with Agent Privilege. Continue with [Configure Agent Privilege](configure-agent-privilege.html).