Installing the Verax Endpoint Agent

This guide explains how to install the Verax Endpoint Agent on Windows, macOS, and Linux.

The Endpoint Agent installer supports two deployment modes:

Configuration – Configures the endpoint for Verax Protect.
Full – Configures the endpoint and enables local traffic interception using a lightweight local proxy.

For an overview of the Endpoint Agent architecture and deployment modes, see Verax Endpoint Agent Overview.

Prerequisites

Before installing the Endpoint Agent, you'll need:

Installation Token
Verax Server IP address or hostname
Administrator (Windows) or root (Linux/macOS) privileges

You can obtain the installation token from the Verax Protect console under:

Settings → Endpoint Agents

Installer Parameters

All installers support the following parameters.

Parameter	Description
`-t`, `--token`	Installation token.
`-s`, `--server`	Verax Protect server IP address or hostname.
`-m`, `--mode`	Deployment mode. Supported values: `configuration` or `full`.
`-h`, `--help`	Display installer help.

Deployment Modes

Mode	Description
`configuration`	Installs the Configuration Agent, which configures the endpoint only.
`full`	Installs the Full Agent, which configures the endpoint and enables local traffic interception.

macOS Installation

Step 1 – Download the installer

curl -k -o verax_mac_installer.sh https://<VERAX_SERVER>:3000/assets/verax_mac_installer.sh

Step 2 – Make the installer executable

chmod +x verax_mac_installer.sh

Step 3 – Run the installer

sudo ./verax_mac_installer.sh \
  -t <INSTALLATION_TOKEN> \
  -s <VERAX_SERVER> \
  -m <configuration|full>

Windows Installation

Step 1 – Download the installer

Using PowerShell:

curl.exe -k -o verax_windows_installer.bat https://<VERAX_SERVER>:3000/assets/verax_windows_installer.bat

Step 2 – Run the installer

Run the installer from an elevated Command Prompt or PowerShell window:

.\verax_windows_installer.bat ^
  -t <INSTALLATION_TOKEN> ^
  -s <VERAX_SERVER> ^
  -m <configuration|full>

Verifying the Installation

After installation:

The Endpoint Agent automatically registers with your Verax Protect server.
The endpoint appears under Settings → Endpoint Agents.
Verify that the agent status is Healthy.

For Full deployments, confirm that AI traffic is being intercepted and appears in the Verax Protect console.

Troubleshooting

If the Endpoint Agent does not appear in the Verax Protect console:

Verify that the installation token is valid.
Confirm that the Verax Protect server address is correct and reachable.
Ensure the endpoint can establish outbound connectivity to the Verax Protect server.
Verify that the selected deployment mode is supported in your environment.

If the issue persists, contact your Verax administrator or Verax Support.

Uninstalling the Verax Endpoint Agent

To remove the Verax Endpoint Agent from a device, use the appropriate command for your operating system.

Windows

Open Command Prompt or PowerShell as Administrator.
Run:

"C:\Program Files\Verax\uninstall.bat"

macOS

Open Terminal.
Run:

sudo /Library/Application\ Support/Verax/uninstall.sh

Enter your administrator password when prompted.

Note
Uninstalling the Verax Endpoint Agent removes all endpoint configuration and, disables local traffic interception and enforcement. The device will no longer be managed or protected by Verax until the agent is reinstalled.