Manual Installation of Code Guardian

Manual installation deploys Code Guardian directly to an endpoint machine. You authenticate Code Guardian to Agent Identity Security using an API key. This method is suited to individual machines, pilots, or controlled onboarding scenarios where MDM deployment is not needed.

Before You Begin

Verify hardware, software, and network prerequisites before installing Code Guardian manually.
Requirement Details
Agent Identity Security Platform access You need administrator access to generate an API key.
Tenant details Note your tenant ID or subdomain. For example, if your Agent Identity Security URL is https://acme.ais.appvx.com, your tenant subdomain is acme.
Network connectivity Each endpoint needs outbound HTTPS access to https://ais.appvx.com. Confirm that VPN, firewall, proxy, and TLS inspection policies permit this connection.
Code Guardian package Download the Code Guardian package for the target coding agent and operating system from the Agent Identity Security Platform.
Coding Assistant One supported coding assistant installed on the target workstation (such as Claude Code, Cursor, or GitHub Copilot CLI).

Generate an API Key

Generate an API key with the required permission scopes to authenticate manual Code Guardian installations.
  1. Sign in to the Agent Identity Security Platform using your organization URL.
  2. In Agent Identity Security, navigate to Settings > API Keys.
  3. Select Generate API Key.
  4. In the Key Name field, enter a descriptive label (for example, Manual-Dev-Guardian).
  5. Select the following three required permission scopes:
    • audit_logs:write Allows Code Guardian to transmit audit and activity events.
    • agent_discovery:write Allows Code Guardian to register discovered agent sessions.
    • policy:read Allows Code Guardian to retrieve runtime security policies.
  6. Select Generate.
  7. Copy the generated API key and save it in a secure password manager.
    Important:
    • The API key is displayed only once. You cannot retrieve it after you close the dialog box.
    • Create one API key per machine. Do not share a single key across multiple endpoints.

Install on Windows

Download and run the interactive Code Guardian setup script on Windows endpoints.

Ensure you have generated an API key and verified that Python 3.9+ is available.

  1. In the Agent Identity Security Platform, go to Secure > Integrations > Catalog.
  2. Download the build from the Integrations page.
  3. Unzip the downloaded <Build-file>.zip.
  4. Open a terminal, and navigate to the extracted folder: 
    cd ais-u-win
  5. Run the installer: 
    .\configure_ais_guardian_unified_windows.ps1
  6. When prompted: 
    Install Ais Guardian for all detected agents? (y/n) [y]:
    Enter y.
  7. For Credentials, enter: 
    Tenant ID: <Tenant Id>
API key: <API key shared separately>
  8. When prompted: 
    Apply this configuration to all selected agents? [Y/n]:
    Enter y.

    The Code Guardian installation is completed successfully, and all the coding agents are detected.

Install on Linux

Download and run the Code Guardian setup script on supported Linux distributions. Supported on Ubuntu 20.04+, RHEL/CentOS 8+, Debian 11+, or any modern distribution with Python 3.9+.
  1. In the Agent Identity Security Platform, go to Secure > Integrations > Catalog.
  2. Download the build from the Integrations page.
  3. Unzip the downloaded <Build-file>.zip.
  4. Open a terminal, and navigate to the extracted folder:
  5. Run the installer: 
    ./configure_ais_guardian_unified_linux.sh
  6. When prompted: 
    Install Ais Guardian for all detected agents? (y/n) [y]:
    Enter y.
  7. For Credentials, enter: 
    Tenant ID: <Tenant Id>
API key: <API key shared separately>
  8. When prompted: 
    Apply this configuration to all selected agents? [Y/n]:
    Enter y.

    The Code Guardian installation is completed successfully, and all the coding agents are detected.

Install on macOS

Download and run the Code Guardian setup script on macOS workstations. Ensure macOS 12 (Monterey) or later is running and Python 3.9+ is installed.
  1. In the Agent Identity Security Platform, go to Secure > Integrations > Catalog.
  2. Download the build from the Integrations page.
  3. Unzip the downloaded <Build-file>.zip.
  4. Open a terminal, and navigate to the extracted folder: 
    cd ais-unified-macos
  5. Run the installer: 
    ./configure_ais_guardian_unified_macos.sh
  6. When prompted: 
    Install Ais Guardian for all detected agents? (y/n) [y]:
    Enter y.
  7. For Credentials, enter: 
    Tenant ID: <Tenant Id>
API key: <API key shared separately>
  8. When prompted: 
    Apply this configuration to all selected agents? [Y/n]:
    Enter y.

    The Code Guardian installation is completed successfully, and all the coding agents are detected.

Verify Manual Installation

Verify the installation in the Agent Identity Security Platform:
  1. Open Activity Logs in Agent Identity Security and look for an event with action Device.Registration and an agent name matching the endpoint.
  2. Navigate to Registry > Managed Agents and confirm that the endpoint and expected coding agent are listed.
    Verify that the newly discovered coding agent appears in the list with its active status and host metadata.
  3. Run a test action in the assistant (such as reading a file or executing a command) to verify that configured runtime policies are enforced.
    Code Guardian is active on the endpoint and the discovered coding agent is populated in the Agent Identity Security Agent Registry and AIBOM.