Agent Configuration

/etc/monsys/agent.toml (Linux) / C:\ProgramData\Monsys\agent.toml (Windows):

hub_url               = "https://api.monsys.ai"
agent_token           = "ms_..."             # required
collect_interval_secs = 15
inventory_interval_secs = 21600              # 6h
max_buffer_bytes      = 104857600            # 100 MB
honeypot_paths        = []                   # empty = defaults

Environment variables override the file (prefix MONSYS_):

MONSYS_HUB_URL=https://api.monsys.ai
MONSYS_AGENT_TOKEN=ms_...
MONSYS_COLLECT_INTERVAL_SECS=10

Files created by the agent itself

Path	Purpose	Permissions
/var/lib/monsys/buffer.sqlite	Local staging buffer for offline tolerance	0644
/var/lib/monsys/agent-id	Stable UUID for this installation	0644
/var/lib/monsys/agent-signing.key	Ed25519 secret seed for payload signing (32 byte)	0600

The agent-signing.key is automatically generated on first start and must remain in /etc/-backups (otherwise you undermine the payload signing-security). Example backup_exclude for restic:

/var/lib/monsys/agent-signing.key
/var/lib/monsys/buffer.sqlite*

Rotation

agent_token and the signing-key can be rotated independently. See Token rotation.