---
title: Discover and manage AI platform agents
description: AI discovery finds the AI Platform Agents operating in your environment, whether they run on user devices, in workloads, or under Federated Identities.
component: privilege
page_id: privilege:agent-privilege:use-cases/ai-platform-agents
canonical_url: https://docs.pingidentity.com/privilege/agent-privilege/use-cases/ai-platform-agents.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 21, 2026
page_aliases: ["agent-privilege:use-cases/workload-agents.adoc"]
section_ids:
  before-you-begin: Before you begin
  ai-platform-agents-discovery: AI platform agents discovery
  ai-platform-agents-management: AI platform agents management
---

# Discover and manage AI platform agents

AI discovery for AI platform agents finds the agents operating in your organization's cloud platforms, inventories them, and reviews each agent's configuration for risk. For each discovered agent, PingOne Privilege computes a risk score from the findings it collects, such as excessive permissions, missing owners, or unmonitored agents, and flags the agents that need review.

## Before you begin

In order for Agent Privilege to discover and manage AI platform agents, you need to add the platform applications for those agents. Learn more in [AI platform agent applications](../configuration/ai-platform-agent-apps/index.html).

## AI platform agents discovery

To review what discovery finds for AI platform agents:

1. In the PingOne Privilege admin console, go to **AI Security > AI Platform Agents**.

   Your **AI Platform Agents** dashboard provides an overview of all AI platform agents detected across managed devices.

   ![The AI Platform Agents dashboard showing a count of agents, an inventory of app connections, and charts for risk by severity and agents by state.](../_images/p1p_ai_platform_agents_dashboard.png)

2. Click the tabs to review different findings including:

   * **Agents**: Discovered AI platform agents, including their model, risk, custodian, and the dates they were added and synced.

   * **Agent Cards**: Agent cards are captured when a crawler finds an A2A-enabled agent. You can run a sync or wait for the nightly crawl.

   * **MCP Servers**: MCP servers expose tools, prompts, and resources that agents can call.

   * **Active Applications**: Your active AI platform applications, configured in the **Add Application** tab.

3. Investigate findings to decide what policies to enforce.

## AI platform agents management

1. In the PingOne Privilege admin console, go to **AI Security > AI Platform Agents**.

2. On the **Agent** tab, find the AI platform agent to manage in the list.

3. Click the agent to open its quick view.

   Under **Actions**, the quick view highlights the recommended actions at the top.

4. For the complete view of remediation actions, click **View full details**, then click the **Actions** tab.

|   |                                                                                                                                                                                                       |
| - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | The remediation actions available depend on the application tied to the agent. There are additional capabilities for each integration.Not all agents have remediation actions outside the quick view. |

The following table contains a list of possible actions:

| Action               | Result                                                                                                                                                                            |
| -------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Edit Config**      | Opens a window to edit the **Foundation model** and **Instruction**.                                                                                                              |
| **Assign custodian** | Opens a window to assign a custodian, either by selecting from the list of available custodians or searching for one by name.                                                     |
| **Restart agent**    | The agent is stopped and rebuilt. It is unavailable until the rebuild is complete.                                                                                                |
| **Edit tags**        | Opens a window to add key-value pairs for tags.                                                                                                                                   |
| **Quarantine**       | The agent is quarantined and cannot be invoked.                                                                                                                                   |
| **Fix IAM role**     | Detaches overprivileged IAM policies from the execution role.                                                                                                                     |
| **Delete agent**     | The agent is permanently removed. Any application, workflow, or user relying on it stops working immediately.	The action cannot be undone. If you're unsure, quarantine it first. |