Quickstart
This guide gets Discover AI (Shadow AI) reporting from a pilot device. For fleet rollout through MDM, see Deploying Agents & Extensions.
Before you start
- Your organization has an Enterprise plan. Without it, the Discover AI pages show a preview.
- You are an Owner or Department Admin in the project, or have a custom role with Configure (policy, registry, keys, directory) set to write. Downloading enrollment scripts needs this permission. See Members & Roles.
- You have a pilot device running macOS 13 or later, or Windows 10 22H2 or later or Windows 11, with admin rights on it, and Chrome, Edge or Firefox 140 or later.
Steps
Open Deployment & Keys
In ANTS Platform, open Settings > Deployment & Keys. The page has three numbered steps. Everything you download from it is already filled in for your project.
Step 1: keep API keys for the pilot
Authentication method defaults to API keys. Keep it for a pilot. Switch to Device certificates (mTLS) later if you need to revoke single devices; see Devices.
Step 2: run the enrollment script
In Enroll devices, choose This machine, pick the operating system and click Download enroll script. Then run it on the pilot device:
Open Terminal and run:
The script writes the device and user identity, your project credentials and your collector settings into managed settings that the agent and the browsers read. It also configures coding-agent telemetry for Claude Code, GitHub Copilot CLI and Codex CLI if they are installed.
Run the script as the person who uses the device, not as a different admin account. The browser extension sends usage only when the script (or your MDM) has written the device identity.
Step 3: install the clients
In Install clients:
Choose Self-serve install and download the installer: AntsAgent.pkg for
macOS or AntsAgent.msi for Windows. Run it. Installing needs admin rights.
On macOS, approve these in System Settings > Privacy & Security:
- Accessibility: turn on AntsAgent.
- Full Disk Access: turn on AntsAgent.
- Network Extension: approve the network prompt.
- Endpoint Security: approve the system extension prompt.
The menu bar icon (macOS) or tray icon (Windows) turns green when the agent is connected.
Generate some activity
On the pilot device, use an AI tool: send a prompt in ChatGPT or Claude in the browser, use the Claude or ChatGPT desktop app, or run Claude Code in a terminal.
Confirm it is reporting
Open Discover AI in ANTS Platform:
- Devices: the pilot device appears with a recent check-in and Healthy status.
- AI Tools, Users and AI Usage Intelligence: the tools you used appear within a few minutes.
Next steps
- Roll out to the fleet: Deploying Agents & Extensions.
- Add department data: Directory Integration.
- Classify tools: AI Tools, Registry & Policy.
- Read the data: Understanding the Dashboard.
- Review what is collected: Data & Privacy.