Practical overview
When it fits
Use Rogue when an agent can be exposed through a supported A2A, MCP or Python interface and you need policy-focused evaluation, red-team testing, or both.
Who it is for
- Developers and teams evaluating agent behavior against business rules and expected outcomes.
- Teams conducting adversarial tests for security weaknesses in AI agents.
- CI/CD users who need a non-interactive CLI for agent evaluation.
Documented uses
- Define evaluation scenarios and expected outcomes for an agent.
- Check whether agent conversations comply with business policies.
- Observe live conversations during evaluation.
- Run basic, full or custom red-team scans using adversarial techniques.
- Export evaluation reports in Markdown, CSV or JSON.
Requirements & limits
The GitHub repository is public. The README states that the software is under a proprietary license, free for personal and internal use, with commercial hosting requiring a license. Quick-start prerequisites include uvx, Python 3.10 or later, and an API key from OpenAI, Anthropic or Google.
- Choose an integration route: A2A over HTTP, MCP over SSE or Streamable HTTP, or direct Python function calls.
- The CLI requires an evaluated-agent URL and a judge LLM; business context and scenario files are additional configuration options.
- Basic, full and custom scans differ in scope; the README estimates about 2–3 minutes for basic and 30–45 minutes for full scans.
- The README lists several compliance frameworks as coverage references; scan coverage does not itself establish certification or compliance.
- The repository states a proprietary license, so commercial hosting requires licensing.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Run Rogue with a Python agent entry point
Connect a Python agent to Rogue using the documented function-based protocol.
Before you start
- uvx and Python 3.10 or later
- An LLM API key from OpenAI, Anthropic or Google
- A Python file containing a call_agent(messages) function that returns the agent response
Steps
Create a Python file with a call_agent function that accepts a list of role/content messages and returns a response string.
Run Rogue with the Python protocol, specifying the agent file and a judge LLM; the README example uses
uvx rogue-ai cli --protocol python --python-entrypoint-file ./my_agent.py --judge-llm openai/gpt-4o-mini.Use the documented TUI alternative by selecting Python as the protocol and entering the file path.
Expected outcome
Rogue is configured to call the agent through its Python function entry point for evaluation.
Guide limitations
- The example documents the connection and invocation setup, but does not specify a complete evaluation run or test result.
- The configured judge LLM requires an API key from a supported provider.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 16 October 2026
- Original website title
- rogue-security/rogue · Official homepage title · retained in its source language

