Read-only · least privilege · tenant-scoped
Discovery connectors
You cannot govern an agent you do not know about. These connectors find the agents and machine identities already running in your estate and add them to your inventory as discovered — never billed, never trusted, and never changed. A connector only ever updates or retires what it discovered itself, so it cannot overwrite an owner or status somebody set.
Microsoft Entra ID
- What it finds
- Service principals and app registrations: the machine identities agents run as, with their credentials, expiry and granted application permissions.
- Access
- Your Entra administrator grants admin consent to Agent Trust Cloud’s read-only application in your tenant. You can revoke it in Entra at any time.
- What is kept
- Your tenant id and the discovered inventory. No secret of yours is stored.
Slack
- What it finds
- Bot users and the apps behind them in a workspace, including apps nobody remembers installing. A bot deleted in Slack is retired in the inventory on the next sync, with the record kept.
- Access
- A bot token with one scope, users:read, pasted for a single sync. It calls auth.test, users.list and bots.info.
- What is kept
- The workspace id and the discovered bots. The token is used for that request and never stored or logged.
MCP configuration files
- What it finds
- Every MCP server in a Claude, Cursor or VS Code config, with its risk flags: unpinned packages, shell or filesystem access, secrets written into the file, and remote servers without authentication.
- Access
- You choose the file in your browser; it is parsed there.
- What is kept
- Only the server names, transports, sources and flags. Keys and environment values in the file never leave your browser.
After discovery
Discovered agents appear in your workspace with their risk factors, ready for an owner, a policy and, before release, Agent Safety Testing. Every sync is written to the audit trail, including the ones that found nothing new.
The wider connector plan is on the integrations page; only the three above are live.