Tools & agents
Tools and agents
Installed AI tools, CLIs and coding agents.
ai_toolingDiscovery / the 21 signals
Know what the agent reads.
Twenty-one published signals connect AI tools and their access to the security posture of the device. See what each signal measures, with collection boundaries made explicit.
Bounded collection / one connected snapshot
Tools & agents
2
Apps & web
2
MCP & access
2
Accounts & spend
2
Projects & data
1
The device
4
Security posture
8
21 signals · 7 groups
Signal directory
Every signal. A clear purpose.
Search by name or browse a group. Availability varies by operating system, tool and enabled collection settings.
21 signals
Tools & agents
Agent autonomy
Configured autonomy and pre-approved operation.
ai_autonomyApps & web
AI web usage
Known AI-domain visits, by category and count.
ai_web_usageApps & web
Installed software
The wider application inventory on the device.
installed_softwareMCP & access
MCP servers
Declared server transport, host and capability.
mcp_serversMCP & access
Credential presence
Provider-key presence, variable name and git-ignore context; no secret value.
ai_credentialsAccounts & spend
Account context
Corporate, personal or unknown; organisation and email-domain context.
ai_accountsAccounts & spend
Usage and spend
Token and usage records already written by supported tools.
ai_usageProjects & data
Projects and data
Repository owner/name and a bounded inventory of data files; no source-code content.
ai_projectsThe device
Device facts
Device make, model, operating system and version.
device_factsThe device
Management enrolment
Whether the device is enrolled in device management.
mdm_enrollmentThe device
Automatic updates
Whether OS updates are configured to install automatically.
auto_updatesThe device
OS patch level
How far the operating system is behind on patches.
os_patch_levelSecurity posture
Disk encryption
Whether the volume is encrypted.
disk_encryptionSecurity posture
Screen lock
Whether the screen locks and the configured timeout.
screen_lockSecurity posture
Firewall
Whether the host firewall is enabled.
firewallSecurity posture
Endpoint protection
Whether an endpoint detection and response agent is present.
edr_presentSecurity posture
Network posture
Device network configuration.
network_postureSecurity posture
Browser policy
Verify configured policy without modifying it.
browser_policySecurity posture
Password policy
Whether password policy is enforced.
password_policySecurity posture
Administrator accounts
Which device accounts have administrator rights.
admin_accountsNo matching signals. Try a different term or choose All 21.
From collection to evidence
Read. Redact. Record.
Discovery reads supported local evidence without running discovered AI tools. Sensitive values are removed before the evidence is built.
Collect
Read approved device and AI configuration signals.
Build evidence
Keep the source and relevant context. Remove sensitive values.
Save locally
Write evidence before attempting delivery.
Report
Send through an encrypted outbound route to the platform.
Collection boundaries
The fact, without the secret.
Discovery and request enforcement are separate capabilities. Supported enforcement may inspect a request locally; this directory describes discovery signals.
Credential presence
Report that a key exists and the relevant configuration context, without reporting its secret value.
Repository context
Identify supported project and repository metadata. Source-code contents are not required for this discovery.
Content off by default
Prompts, responses and transcripts require an explicit administrator-controlled collection choice.
Missing evidence stays unknown.
A failed check does not become a pass. A rule that is off stays ungraded; a control that does not apply remains distinct.
Explore policy results ↗See the signals on your devices.
Validate your tools and operating systems with a representative pilot.