Skip to content

Configuration

Scan settings live in agentic_security.toml in the working directory. Create one with:

agentic_security init

The file is versioned (general.version). The current schema version is 2.

Sections

  • [general] — llmSpec (the HTTP request template), budget, failure threshold, optimizer flag, multi-step attack flag
  • [modules.*] — datasets to run; AgenticBackend.opts.port is the local proxy port
  • [detectors] — refusal and leak classifiers
  • [thresholds] — low / medium / high failure-rate bands
  • [secrets] — API keys referenced from the HTTP spec
  • [caching], [network], [fuzzer] — runtime tuning

Replace the placeholder Bearer XXXXX in llmSpec with credentials for the target endpoint. See HTTP spec for the request template format.