Inventory
See supported local AI clients, MCP servers, skills, plugins, and agent harnesses with owner, version, and last-seen metadata.
Onterix Endpoint
See local AI tools. Govern the paths they use.
Onterix Endpoint inventories AI clients and tool connections on employee devices, shows where monitoring and enforcement are available, and makes uncovered paths explicit.
Device coverage
See what is observed, covered, and enforced.
Each client keeps a separate inventory, monitoring, and enforcement state, including an explicit uncovered state when a path cannot be governed.
Monitor
See which supported requests followed the governed path and which client paths remain outside coverage.
Enforce
Route supported client requests through the same Onterix controls used by agents, APIs, and workflows.
Three rollout paths, one client
Start directly. Add management certainty when you need it.
Use the same signed client for self-enrollment, administrator-led rollout, or MDM/UEM deployment.
Let a person enroll a device
Install Onterix Endpoint, complete a short device flow, and begin with metadata-only inventory. A device-held key authenticates the installation without becoming the person’s authority.
Standardize a team rollout
Publish an enrollment profile, assign owners and policy, stage updates, and review drift while people install through an approved company process.
Prove fleet coverage
Deploy signed packages, managed identity, locked configuration, update rings, and uninstall policy through the device-management system you already use.
Useful findings, reviewed changes
Turn proven local demand into a governed capability.
When a team is already using a useful MCP server, skill, or workflow, Onterix creates a cited draft for its owner to review, test, and publish.
See the capability runtimeCapture the useful pattern
Record type, version, ownership, supported client, prevalence, and risk context.
Inspect a cited draft
See where the finding came from, what the capability would do, and which checks remain.
Test and publish
Use the same capability lifecycle, current actor authority, and source permissions on every later run.
Minimum necessary metadata
Manage coverage with a focused endpoint record.
Onterix Endpoint reports allowlisted client, version, ownership, coverage, and policy-package metadata to the selected Onterix region or your own data plane.
- Client type, version, owner, and last-seen time
- Inventory, monitor, and enforce support shown separately
- Policy and package version with rollout health
- Prompts, results, secrets, and employee activity stay out of the endpoint record
Endpoint rollout
Start with one device or plan a managed fleet.
Choose the clients to cover, the rollout path, and where endpoint events stay.