# AgenShield

> Production developer documentation for AgenShield, an endpoint security and policy enforcement platform for AI coding agents.

## Docs

- [AgenShield](https://docs.agen.co/index.md): Endpoint security for AI coding agents on macOS — see what your agents actually do, then govern it with centrally managed policy, without changing how developers work.
- [How AgenShield Works](https://docs.agen.co/how-it-works.md): The model behind AgenShield — agents governed by centrally managed policy, the execution tree behind every decision, the three enforcement modes, and the boundaries the product deliberately never crosses.
- [What Gets Installed](https://docs.agen.co/components.md): Every AgenShield component that lands on a Mac, what each one is responsible for, where it lives, the approvals macOS requires, and how to confirm it is healthy.
- [Quickstart](https://docs.agen.co/getting-started/quickstart.md): Take one Mac from nothing to a governed AI agent — install, grant the macOS approvals, confirm the Mac is healthy, and sign in.
- [Install Campaigns](https://docs.agen.co/deployment/campaigns.md): Create an install campaign in the Frontegg Portal — the enrollment token, the install command, and the ready-made MDM artifacts every rollout starts from.
- [Installing and Uninstalling AgenShield](https://docs.agen.co/getting-started/install-and-uninstall.md): How AgenShield is installed, enrolled, laid out on disk, started at boot, and fully removed.
- [MDM Enrollment](https://docs.agen.co/deployment/mdm/overview.md): Deploy AgenShield to a managed Mac fleet with two pushes — a ready-made configuration profile and a signed installer package — with no prompts and no manual steps on any device.
- [Microsoft Intune](https://docs.agen.co/deployment/mdm/intune.md): Connect your Microsoft Entra tenant to AgenShield and push install campaigns to Intune device groups from the Frontegg Portal — group creation, profile assignment, installer app, rollout progress, and clean offboarding.
- [Jamf](https://docs.agen.co/deployment/mdm/jamf.md): Deploy AgenShield with Jamf Pro or Jamf Now — uploading the campaign configuration profile, packaging the installer, scoping to smart groups, and verifying a managed Mac.
- [Kandji, JumpCloud, and other MDMs](https://docs.agen.co/deployment/mdm/other.md): Deploy AgenShield from Kandji, JumpCloud, Mosyle, or any MDM that accepts a custom macOS configuration profile and a signed installer package.
- [Enrolled Devices](https://docs.agen.co/deployment/devices.md): Read fleet health in the Frontegg Portal — what each device state means, what a device detail view tells you, and the difference between revoking a device and offboarding it.
- [Rollout Playbook](https://docs.agen.co/deployment/rollout-playbook.md): The recommended path from a pilot Mac to enforced policy across a fleet — what to do in each phase, what evidence to look for, and how to promote rules without breaking developer workflows.
- [The AgenShield App](https://docs.agen.co/using/the-app.md): The menubar icon and the AgenShield dashboard — where to see system status, which agents were detected, what they have been doing, and how to sign in and get support.
- [Working With Your Agents](https://docs.agen.co/using/working-with-agents.md): For developers — what changes when your AI coding agents are governed by AgenShield policy, how to check the system status, and what to do when something is blocked.
- [Enforcement Modes](https://docs.agen.co/configuration/enforcement-modes.md): What monitor, audit, and enforce mean on a managed Mac, how a per-rule mode overrides the fleet default, and what a developer sees when a rule blocks an agent.
- [Rules and Policy](https://docs.agen.co/configuration/policies.md): Author policy in the Frontegg Portal — how a rule is built from grants, where an agent is allowed to run, how priority and scope resolve, and how a change reaches the fleet.
- [Agent Resources and MCP Servers](https://docs.agen.co/configuration/agent-resources.md): Govern what your AI agents load — skills, rules files, subagents, commands, hooks, plugins, and MCP connectors — with automated risk analysis, a review queue, and fleet-wide approve or deny.
- [Restricting MCP Servers](https://docs.agen.co/configuration/mcp-restrictions.md): Decide which MCP servers your agents may use — approve individual servers, block specific tools, or allow only the servers you have approved — and have it hold even when an agent connects without declaring the server in its config.
- [Telemetry](https://docs.agen.co/configuration/telemetry.md): Read what your AI agents actually do — event categories, verdicts, traces, and the filters that turn a fleet-wide feed into the evidence a policy rule is built from.
- [Privacy and Data Handling](https://docs.agen.co/configuration/privacy-and-data.md): What AgenShield observes on a managed Mac, what leaves the device, how secrets are removed before anything is sent, and what your administrator can and cannot see.
- [Common Issues](https://docs.agen.co/troubleshoot/common-issues.md): Diagnose the problems that actually happen — the service not running, a degraded system report, blocked work, stale policy, and what to do about each.
- [Extension Approval Never Appears](https://docs.agen.co/troubleshoot/extension-approval-never-appears.md): What it means when the installer asks you to approve the AgenShield extensions but nothing ever shows up in System Settings, how to confirm the device-management policy is blocking them, and how to fix it.
- [Enforcement Paused](https://docs.agen.co/troubleshoot/extension-self-disabled.md): What it means when AgenShield reports that enforcement is paused or that the Endpoint Security extension stood itself down, how to confirm it, and how to restore protection.
- [Network Stops After an Update](https://docs.agen.co/troubleshoot/network-stops-after-update.md): What to do when every application loses network access immediately after an AgenShield update — including AI tools reporting certificate or connection errors — and how to restore connectivity in seconds.
- [Network Feels Slower](https://docs.agen.co/troubleshoot/network-performance.md): What AgenShield does and does not add to network performance, how to tell whether a slowdown comes from AgenShield or from your network, and what to send support if it is us.
- [Asked for your password to modify the system certificate after an update](https://docs.agen.co/troubleshoot/certificate-prompt-after-upgrade.md): macOS asks for an administrator password to change certificate trust settings after AgenShield updates, even though nothing about your certificate changed.
- [Agent connections fail with "certificate has expired"](https://docs.agen.co/troubleshoot/certificate-expired-connections.md): An AI agent fails to connect to inspected sites with a certificate-expired error (for example CERT_HAS_EXPIRED), even though the sites themselves are fine. This is a fixed defect in how the per-site certificate was renewed.
- [Claude Code shows a Settings Warning and MCP servers stop loading](https://docs.agen.co/troubleshoot/claude-code-settings-warning.md): Claude Code warns "allowedMcpServers[]: Invalid entry was ignored: failed validation" on launch, and MCP servers may stop loading. This is a fixed defect in how the MCP allowlist was written.
- [AgenShield appears more than once under Filters & Proxies](https://docs.agen.co/troubleshoot/duplicate-filter-entries.md): System Settings → Network → Filters & Proxies shows two or more AgenShield "Content Filter" rows. The extra row is a stale configuration entry, not a second installation.
- [A "Background Items Added" notification names another product](https://docs.agen.co/troubleshoot/background-items-notification.md): After installing or updating AgenShield, macOS shows a "Background Items Added" notification naming a different product — and it may reappear later. AgenShield did not add that item; the notification comes from macOS re-announcing its own records.
- [An agent fails with "Token has expired"](https://docs.agen.co/troubleshoot/token-has-expired.md): An AI agent stops working with a "Token has expired" message roughly half an hour after the machine or AgenShield starts, and recovers when a component is restarted.
- [A Windows install did not enroll, or shows a publisher warning](https://docs.agen.co/troubleshoot/windows-install-warnings.md): An unattended Windows install completes but the device never enrolls, or Windows warns about an unrecognized publisher when the installer runs.
- [Collecting Diagnostics](https://docs.agen.co/troubleshoot/collecting-diagnostics.md): Download a diagnostics bundle from the AgenShield app in two clicks — what it contains, what it never contains, and how to send it safely.
- [CLI Reference](https://docs.agen.co/reference/cli.md): The agenshield command — setup, system status, diagnostics, and lifecycle.
- [The AgenShield Certificate on Your Mac](https://docs.agen.co/reference/mitm-ca-for-end-users.md): End-user explanation of the AgenShield CA — why it appears, the one-time trust prompt, what it can inspect, how key custody works, and how to verify or remove it.