Unmanaged AI discovery

Unmanaged AI is the AI activity in your environment that engineering didn't onboard — a Workspace add-on a teammate installed, a third-party integration, a marketing-team agent with access to production data. Trefur surfaces them and gives you a way to triage.

What triggers an unmanaged-AI finding

  • OAuth grant scanner — a user has granted an AI-classified third-party app access to org data.
  • Widespread grant — the same third-party AI app has been granted by ≥5 users without ever appearing in your IT inventory.
  • Anonymous client — an admin-API request from an unrecognised client id.
  • Unattributed usage — telemetry arriving from an agent_name + framework combination Trefur hasn't seen before in your tenant.

What you see

  • A dedicated Unmanaged AI rollup in the dashboard with per-agent counts.
  • Per-finding row with the discovery source, the affected user list, and a one-click action (revoke OAuth grant, mark as expected, contact the owner).

Sources