Local AI agent discovery with Microsoft Defender for Endpoint

Local AI agents run with user-level permissions and can access files, tools, and services on the devices where they operate. Without visibility into which agents are running and what they can reach, security teams can't assess exposure, enforce governance, or respond to agent-related incidents.

Microsoft Defender discovers local AI agents and their configured MCP servers on onboarded devices. It surfaces these agents in the Microsoft Defender portal. This gives security teams a centralized view of AI agents present in the organization.

Learn how local AI agent discovery works, review coverage for agents and MCP server configurations, and view discovered agents in the Microsoft Defender portal.

Local AI agent discovery on endpoints

Discovery depends on the agent type. For process-based discovery, Defender identifies an agent when it observes the agent's process running. The user doesn't need to submit a prompt or have permission to use the agent's service. An inventory entry isn't proof of active use or successful access to an AI service.

On Windows and macOS, the onboarded Defender for Endpoint client also periodically collects installed VS Code extension data on the endpoint. The client must be running and reporting. Agent inventory discovery through this collection doesn't require antivirus active mode or the extension to run. See the entries marked with footnote 1 and their preview status in the support matrix.

MCP server configuration discovery still requires antivirus active mode and real-time protection. For details and requirements, see the local AI agent discovery prerequisites.

Local AI agent discovery isn't a complete inventory of installed software. It provides security context for agents that Defender observes on endpoints, including the device and account associated with the agent. To review known software installed on devices, use Software inventory in Microsoft Defender Vulnerability Management.

When Defender identifies a local AI agent, the agent is displayed as a discoverable asset in the Microsoft Defender portal with visibility into:

• Local AI agent inventory: A centralized view of discovered local AI agents with device and user associations and discovery metadata.
• Exposure map: Visual relationships between local AI agents, devices, identities, and the resources those identities can access, to help assess potential impact.
• Advanced hunting: Hunting for discovery data using Kusto Query Language (KQL) to investigate local AI agents and the resources they can access based on the permissions of the user running them.

Supported local AI agents and MCP server configurations

Defender defines an agent as a combination of a user, a device, and an agent type. For example, if Claude Code runs in 15 different project folders on the same device for the same user, it appears as a single agent entry in the inventory.

Defender discovers local AI agents on Windows and macOS endpoints. This includes agents that run from the command line, desktop apps, agentic IDEs, VS Code extensions, and Claw-based local agent implementations. Microsoft Defender can also discover local and remote MCP server configurations associated with these agents.

For coverage by agent, operating system, and MCP server configuration, see Microsoft Defender for Endpoint AI agent support matrix.

Defender associates discovered MCP server configurations with the agent. The available configuration details can include the server name, type, endpoint, and the command used to start a local MCP server. An agent can have multiple configured MCP servers. To query these details, see Review the MCP servers and tools that local AI agents use.

To learn how to discover and view local AI agents, see Discover local AI agents.

Broader AI security capabilities

Microsoft Defender's discovery capabilities are part of a comprehensive AI security approach. Microsoft Defender provides other capabilities in your organization's AI ecosystem:

• Discover cloud and platform agents: Find agents built with Microsoft Copilot Studio, Microsoft Foundry, Amazon Web Services (AWS) Bedrock, and Google Cloud Platform (GCP) Vertex AI.
• Detect and investigate threats: Correlate alerts and investigate suspicious agent behavior in your security infrastructure.

For details on these capabilities and how to apply them, see Protect AI assets from emerging threats and vulnerabilities using Microsoft Defender.