Question
How does the Contrast agent authenticate with the Contrast server?
Answer
Each Organisation within the Contrast UI has a dedicated agent user tied to it. This agent user’s username and API keys are included in the agent configuration. This agent user isn’t allowed to consume any of the endpoints defined in the Contrast server other than the endpoints used to send data from the agent to the Contrast server.
As an Admin user, you can find the API keys for the agent user in the Contrast UI. Simply head to Organisation Settings -> Agent.
You can find more information on finding the agent keys in our official Contrast Documentation: Find the agent keys