Skip to main content
Before Vijil can evaluate or protect an agent, you need to register it. Registration tells Vijil how to communicate with your agent and how much visibility you are granting for analysis.

The Agent Registry

Navigate to Agents in the sidebar to open the Agent Registry. The registry displays all agents in your workspace with key information:

Access Levels

Vijil supports three access levels, each enabling progressively deeper evaluation. The access level you choose determines what Vijil can analyze and what vulnerabilities it can detect.

Black Box

Black Box registration requires minimal information: your agent’s API endpoint and authentication. Vijil treats the agent as an opaque system, testing only its observable behavior. This approach works well for:
  • Third-party agents you do not control
  • Initial evaluations before deeper analysis
  • Agents where you want to test the API contract
Required fields:
  • Agent Name: A descriptive identifier
  • Status: Start with Draft for initial setup
  • Agent URL: Where your agent accepts requests
  • API Key: Authentication credentials (you can add multiple keys)
  • Rate Limit Per Minute: Matches your provider’s limits to avoid throttling

Grey Box

Grey Box expands visibility into your agent’s composition. This enables Vijil to trace vulnerabilities to specific components whether a prompt injection succeeded because of the model choice, MCP tool exposure, or delegated agent behavior. Additional fields: The Hub dropdown supports major providers:
If your agent uses MCP tools or delegates to sub-agents, Grey Box registration enables Vijil to test the full execution graph—not just the top-level API.

White Box

White Box provides full source code access for static analysis (SAST) combined with dynamic testing (DAST). This is the most thorough evaluation path. Additional fields:
  • Source Code: Paste code directly, or leave empty to pull from repository
  • GitHub Repository: URL, username, and access token for private repos
White Box evaluation can identify vulnerabilities that Black Box testing would miss—hardcoded secrets, unsafe deserialization, SQL injection in tool implementations, and similar code-level issues.

Registering an Agent

  1. Click + Register Agent to open the registration modal
  2. Choose Manual for direct entry or Import to load from a file
  3. Fill in the Black Box fields (required for all agents)
  4. Expand Grey Box if you want compositional analysis
  5. Expand White Box if you want source code analysis
  6. Click Register Agent
Your agent appears in the registry with status Draft. Change to Active when ready for evaluation.

Managing Agents

Click the More Actions menu (three dots) on any agent row to access management options.

Editing an Agent

Select Edit to open the agent configuration modal with current values populated. Make your changes and click Save Changes.
Changing an agent’s configuration may affect ongoing evaluations. If you need to test different configurations, consider using Clone to create a variant instead.

Agent Status

Agents progress through lifecycle states: Set status to Active before running evaluations or configuring Dome protection.

Integration Guides

For provider-specific configuration details, use our dedicated UI walk-through guides.

OpenAI

Anthropic

Google Vertex

Mistral AI

AWS Bedrock

DigitalOcean

Groq

Together Web

OpenRouter

Fireworks AI

NVIDIA NIM

Custom Agents

OpenAI-compatible endpoints

Next Steps

Define Personas

Create user profiles for evaluation

Define Policies

Set organizational rules your agent must follow
Last modified on June 13, 2026