Skip to content

New fleetd table: ai_tools #47641

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
noahtalerman merged 10 commits into from
Jun 16, 2026
Merged

New fleetd table: ai_tools #47641

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
3a2037b
Add ai_tools table schema from agentic-detector extension
kilo-code-bot[bot] Jun 15, 2026
d0cbe5d
Apply suggestion from @noahtalerman
noahtalerman Jun 15, 2026
b9a7d4f
Apply suggestion from @noahtalerman
noahtalerman Jun 15, 2026
4a58719
Apply suggestion from @noahtalerman
noahtalerman Jun 15, 2026
d4dd39c
Apply suggestion from @noahtalerman
noahtalerman Jun 15, 2026
55ccd80
Apply suggestion from @noahtalerman
noahtalerman Jun 15, 2026
e7d3096
Update ai_tools.yml
noahtalerman Jun 15, 2026
73f91a4
Add schema
noahtalerman Jun 15, 2026
655d737
Merge branch 'add-ai-tools-table' of github.com:fleetdm/fleet into ad…
noahtalerman Jun 15, 2026
25a3a15
New schema
noahtalerman Jun 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
118 changes: 118 additions & 0 deletions schema/osquery_fleet_schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,6 +228,124 @@
"url": "https://fleetdm.com/tables/adobe_plugins",
"fleetRepoUrl": "https://github.com/fleetdm/fleet/blob/main/schema/tables/adobe_plugins.yml"
},
{
"name": "ai_tools",
"description": "Surfaces AI tools on the host: MCP servers, AI agent CLIs, AI desktop apps, IDE plugins, live AI/MCP network sockets, and agent instruction files. Every row is an AI tool. Type-specific extras live in a compact JSON `detail` column.",
"platforms": [
"darwin",
"windows",
"linux"
],
"evented": false,
"examples": "Count AI tools per type on the host.\n\n```\nSELECT type, count(*) FROM ai_tools GROUP BY type;\n```\n\nList outbound AI/MCP connections to see where data is going.\n\n```\nSELECT name, endpoint FROM ai_tools WHERE type = 'sockets' AND location = 'remote';\n```\n\nList running MCP servers and their transport.\n\n```\nSELECT name, source AS client, location, running, pid FROM ai_tools WHERE type = 'mcp_server' AND running = 1;\n```\n\nFind anything carrying a security risk flag across every type.\n\n```\nSELECT type, name, risk_flags, path FROM ai_tools WHERE risk_flags != '';\n```\n\nList AI editor plugins with versions.\n\n```\nSELECT name, identifier, version, category FROM ai_tools WHERE type = 'ide_plugins';\n```",
"notes": "The extension enumerates all home directories on the host (`/Users/*`, `/home/*`, `/root`, `C:\\Users\\*`), not just the daemon account's. Running as root provides full visibility across all users.",
"columns": [
{
"name": "type",
"description": "Options are `mcp_server`, `ide_plugins`, `agents`, `apps`, `sockets`, or `agent_instruction`.",
"type": "text",
"required": false
},
{
"name": "name",
"description": "Server, plugin, agent, app, process, or instruction-file name.",
"type": "text",
"required": false
},
{
"name": "identifier",
"description": "Unique identifier varying by type: MCP server name, plugin ID (`publisher.name`), agent binary, bundle ID, socket service, or instruction tool.",
"type": "text",
"required": false
},
{
"name": "category",
"description": "Classification bucket (e.g. `coding-assistant`, `agent-runtime`, `inference-api-local`, `mcp-remote-egress`, `ai-api-egress`, `mcp-server`, `agent-instruction`).",
"type": "text",
"required": false
},
{
"name": "location",
"description": "`local` or `remote`.",
"type": "text",
"required": false
},
{
"name": "source",
"description": "Provenance: MCP client, editor, install method, platform source, socket direction, or instruction tool.",
"type": "text",
"required": false
},
{
"name": "version",
"description": "Version of the tool, if available.",
"type": "text",
"required": false
},
{
"name": "path",
"description": "Config, install, binary, app, process, or instruction-file path.",
"type": "text",
"required": false
},
{
"name": "endpoint",
"description": "Remote MCP URL or socket remote `addr:port`.",
"type": "text",
"required": false
},
{
"name": "running",
"description": "Whether the tool is currently running (1 = yes, 0 = no).",
"type": "integer",
"required": false
},
{
"name": "pid",
"description": "Process ID if the tool is running.",
"type": "integer",
"required": false
},
{
"name": "port",
"description": "Listening port, API port, or local port (varies by type).",
"type": "integer",
"required": false
},
{
"name": "risk_flags",
"description": "Comma-separated security risk tokens (empty string = none). Possible values:`remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`.",
"type": "text",
"required": false
},
{
"name": "sha256",
"description": "SHA-256 content hash of the primary artifact (config file, binary, or instruction file) for change detection and threat-intel matching.",
"type": "text",
"required": false
},
{
"name": "uid",
"description": "User ID of the owner.",
"type": "text",
"required": false
},
{
"name": "username",
"description": "Username of the owner.",
"type": "text",
"required": false
},
{
"name": "detail",
"description": "Compact JSON with type-specific extras (empty fields omitted). Examples: `transport`, `command`, `args`, `env_keys`, `capabilities`, `launch_hash`, `permission_mode`, `markers`, `scope`, `publisher`, `editor_family`, `runtime`, `protocol`, `remote_host`, `cmdline`.",
"type": "text",
"required": false
}
],
"url": "https://fleetdm.com/tables/ai_tools",
"fleetRepoUrl": "https://github.com/fleetdm/fleet/blob/main/schema/tables/ai_tools.yml"
},
{
"name": "alf",
"description": "Details about the status of the built-in firewall protection on this Mac.",
Expand Down
108 changes: 108 additions & 0 deletions schema/tables/ai_tools.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,108 @@
name: ai_tools
description: |-
Surfaces AI tools on the host: MCP servers, AI agent CLIs, AI desktop apps, IDE plugins, live AI/MCP network sockets, and agent instruction files. Every row is an AI tool. Type-specific extras live in a compact JSON `detail` column.
platforms:
- darwin
- windows
- linux
evented: false
examples: |-
Count AI tools per type on the host.

```
SELECT type, count(*) FROM ai_tools GROUP BY type;
```

List outbound AI/MCP connections to see where data is going.

```
SELECT name, endpoint FROM ai_tools WHERE type = 'sockets' AND location = 'remote';
```

List running MCP servers and their transport.

```
SELECT name, source AS client, location, running, pid FROM ai_tools WHERE type = 'mcp_server' AND running = 1;
```

Find anything carrying a security risk flag across every type.

```
SELECT type, name, risk_flags, path FROM ai_tools WHERE risk_flags != '';
```

List AI editor plugins with versions.

```
SELECT name, identifier, version, category FROM ai_tools WHERE type = 'ide_plugins';
```
notes: The extension enumerates all home directories on the host (`/Users/*`, `/home/*`, `/root`, `C:\Users\*`), not just the daemon account's. Running as root provides full visibility across all users.
columns:
- name: type
description: "Options are `mcp_server`, `ide_plugins`, `agents`, `apps`, `sockets`, or `agent_instruction`."
type: text
required: false
- name: name
description: Server, plugin, agent, app, process, or instruction-file name.
type: text
required: false
- name: identifier
description: "Unique identifier varying by type: MCP server name, plugin ID (`publisher.name`), agent binary, bundle ID, socket service, or instruction tool."
type: text
required: false
- name: category
description: "Classification bucket (e.g. `coding-assistant`, `agent-runtime`, `inference-api-local`, `mcp-remote-egress`, `ai-api-egress`, `mcp-server`, `agent-instruction`)."
type: text
required: false
- name: location
description: "`local` or `remote`."
type: text
required: false
- name: source
description: "Provenance: MCP client, editor, install method, platform source, socket direction, or instruction tool."
type: text
required: false
- name: version
description: Version of the tool, if available.
type: text
required: false
- name: path
description: Config, install, binary, app, process, or instruction-file path.
type: text
required: false
- name: endpoint
description: Remote MCP URL or socket remote `addr:port`.
type: text
required: false
- name: running
description: Whether the tool is currently running (1 = yes, 0 = no).
type: integer
required: false
- name: pid
description: Process ID if the tool is running.
type: integer
required: false
- name: port
description: "Listening port, API port, or local port (varies by type)."
type: integer
required: false
- name: risk_flags
description: "Comma-separated security risk tokens (empty string = none). Possible values:`remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`."
type: text
required: false
- name: sha256
description: SHA-256 content hash of the primary artifact (config file, binary, or instruction file) for change detection and threat-intel matching.
type: text
required: false
- name: uid
description: User ID of the owner.
type: text
required: false
- name: username
description: Username of the owner.
type: text
required: false
- name: detail
description: "Compact JSON with type-specific extras (empty fields omitted). Examples: `transport`, `command`, `args`, `env_keys`, `capabilities`, `launch_hash`, `permission_mode`, `markers`, `scope`, `publisher`, `editor_family`, `runtime`, `protocol`, `remote_host`, `cmdline`."
type: text
required: false
Loading