← Back to Agent Chain
📡 AC-9 · Agent Tracker
Contact tracing for AI — rogue agent detection, fingerprinting, and correlation
Overview
Agent Tracker is contact tracing for AI agents. It ingests sightings from AC-2 (Scanner), AC-3 (Trust), AC-7 (Shadow Network), and AC-8 (Firewall), then correlates them to detect rogue agents across the network.
Auto-Response Actions
| Action | Trigger | Description |
|---|---|---|
| Alert | Reputation drop > 20 points | Webhook notification to your endpoint |
| Quarantine | Threat score > 70 | Isolate agent, block API access |
| Block | Confirmed malicious | Permanent block via AC-8 Firewall |
| Intel Feed | New TTP detected | Auto-submit to AC-4 Threat Intel |
API Endpoints
Free
| Method | Endpoint | Description | Auth |
|---|---|---|---|
| GET | /v1/tracker/sensors | List sensor types | 🔓 Free |
Billable
| Method | Endpoint | Description | Auth |
|---|---|---|---|
| POST | /v1/tracker/ingest | Ingest a sighting | 🔑 |
| GET | /v1/tracker/agents | List tracked agents | 🔑 |
| GET | /v1/tracker/agents/:id | Get tracked agent profile | 🔑 |
| PATCH | /v1/tracker/agents/:id | Update tracked agent | 🔑 |
| GET | /v1/tracker/agents/:id/sightings | Sighting history | 🔑 |
| POST | /v1/tracker/correlations | Link two tracked agents | 🔑 |
| GET | /v1/tracker/agents/:id/correlations | Get agent correlations | 🔑 |
| GET | /v1/tracker/alerts | Alert feed | 🔑 |
| POST | /v1/tracker/alerts/:id/acknowledge | Acknowledge an alert | 🔑 |
| GET | /v1/tracker/graph | Relationship graph | 🔑 |
| POST | /v1/tracker/agents/:id/auto-respond | Execute auto-response action | 🔑 |
| GET | /v1/tracker/stats | Tracker statistics | 🔑 |
Quick Start
// Ingest a sighting from your scanner
await ac.tracker.ingest({
agentDid: 'did:agent:ac:suspicious789',
sensor: 'scanner',
event: 'injection_attempt',
metadata: { ip: '1.2.3.4', pattern: 'system_prompt_override' }
});
// Get relationship graph
const graph = await ac.tracker.getGraph();
// Returns nodes (agents) + edges (correlations)