AgentSight: System-wide AI agent tracing and monitoring with eBPF
AgentSight is a new tool designed for system-wide AI agent tracing and monitoring using eBPF technology. It allows users to observe the actions of AI agents on their machines without requiring SDKs or proxies. The tool captures critical interactions that traditional application-level observability tools often miss, providing insights into process execution, file access, and system activity.
- ▪AgentSight records a local trace of processes, shell commands, file activities, and network destinations contacted by AI agents.
- ▪The tool operates without the need for SDKs or vendor integrations, making it suitable for closed-source command-line interfaces.
- ▪AgentSight captures plaintext LLM payloads at SSL/TLS call boundaries and tracks subprocess executions that bypass instrumentation.
Opening excerpt (first ~120 words) tap to expand
AgentSight: System-wide AI agent tracing and monitoring with eBPF English | 中文 Your local first perf/top/strace/nsight-like tool for AI agents. See what agents actually do to your machine, and connect those actions back to the prompts, model calls, and tool decisions that triggered them. Run agentsight around Claude Code, Codex, Gemini CLI, OpenCode, OpenClaw, or any command. AgentSight records a local trace of: processes and child processes, shell commands, cwd, argv, exit status, and duration files created, written, truncated, renamed, or deleted network destinations contacted prompts, responses, tool intent, and LLM/model/token No SDK, no proxy, no vendor integration. AgentSight observes with eBPF and TLS traffic tracing, so it works even when the agent is a closed-source CLI.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at GitHub.