agentic_security/docs/configuration.md

Configuration

Scan settings live in agentic_security.toml in the working directory. Create one with:

agentic_security init

The file is versioned (general.version). The current schema version is 2.

Sections

• [general] — llmSpec (the HTTP request template), budget, failure threshold, optimizer flag, multi-step attack flag
• [modules.*] — datasets to run; AgenticBackend.opts.port is the local proxy port
• [detectors] — refusal and leak classifiers
• [thresholds] — low / medium / high failure-rate bands
• [secrets] — API keys referenced from the HTTP spec
• [caching], [network], [fuzzer] — runtime tuning

Replace the placeholder Bearer XXXXX in llmSpec with credentials for the target endpoint. See HTTP spec for the request template format.