Agent keys

Agent keys authenticate Windows and macOS agents with headers X-Tenant and X-Client-Key. Create keys as Owner/Admin under Settings → Agent keys.

Create a key

1. Open Settings → Agent keys.
2. Choose Create key (prompt default name: Agent key).
3. Copy the raw value immediately. Format: ct_ plus 48 hex characters.
4. Store it in your secret manager. NP4th will not show the full key again.

One-time reveal

After creation you see: Save this agent key now - it will not be shown again. If you lose it, create a new key and rotate endpoints; you cannot recover the old plaintext.

Download / bake into installer

Download agent builds a ZIP named like NP4th-{slug}-{keyPrefix}.zip containing:

• Prefilled client-config.json (apiBaseUrl, tenantSlug, clientKey)
• Install-NP4th.cmd
• NP4thSetup-<version>.exe when available on the server

Extract the ZIP, then run Install-NP4th.cmd from the extracted folder. Download is blocked for disabled keys.

Silent form used by the script:

NP4thSetup-<version>.exe /SILENT "/TENANT={slug}" "/KEY={key}" "/URL={apiBaseUrl}"

For Group Policy / msiexec, use the MSI from the same client build artifacts when published:

msiexec /i NP4th-<version>.msi /qn TENANT={slug} KEY={key} URL={apiBaseUrl}

See Getting started - Windows for GPO and MST notes. The baked ZIP still ships the EXE Setup by default.

Disable, enable, delete

Confirm prompts explain that disabled agents stop uploading and that delete is permanent.

Rotation

1. Create a new key and bake a new installer (or update client-config.json on endpoints).
2. Deploy the new key to agents.
3. Confirm new heartbeats/runs under Installed agents.
4. Disable the old key, wait until the fleet is migrated, then Delete.