Discover and manage workload agents
AI Discovery for workload agents finds the workload agents operating in your organization’s cloud platforms, inventories them, and reviews each agent’s configuration for risk. For each discovered agent, PingOne Privilege computes a risk score from the findings it collects, such as excessive permissions, missing owners, or unmonitored agents, and flags the agents that need review.
Before you begin
In order for Agent Privilege to discover and manage workload agents, you need to add the applications for those workloads. Learn more in Configuring apps for workload agents.
Workload agents discovery
To review what discovery finds for workload agents:
-
In the PingOne Privilege admin console, go to AI Security > Workload Agents.
Your Workload Agents dashboard provides an overview of all workload agents detected across managed devices.
-
Click the tabs to review different findings including:
-
Agents: Discovered workload agents, including their model, risk, custodian, and the dates they were added and synced.
-
Agent Cards: Agent cards are captured when a crawler finds an A2A-enabled agent. You can run a sync or wait for the nightly crawl.
-
MCP Servers: MCP servers expose tools, prompts, and resources that agents can call.
-
Active Applications: Your active workload applications, configured in the Add Application tab.
-
-
Investigate findings to decide what policies to enforce.
