Unmanaged AI discovery
Unmanaged AI is the AI activity in your environment that engineering didn't onboard — a Workspace add-on a teammate installed, a third-party integration, a marketing-team agent with access to production data. Trefur surfaces them and gives you a way to triage.
What triggers an unmanaged-AI finding
- OAuth grant scanner — a user has granted an AI-classified third-party app access to org data.
- Widespread grant — the same third-party AI app has been granted by ≥5 users without ever appearing in your IT inventory.
- Anonymous client — an admin-API request from an unrecognised client id.
- Unattributed usage — telemetry arriving from an agent_name + framework combination Trefur hasn't seen before in your tenant.
What you see
- A dedicated Unmanaged AI rollup in the dashboard with per-agent counts.
- Per-finding row with the discovery source, the affected user list, and a one-click action (revoke OAuth grant, mark as expected, contact the owner).
Sources
- Google Workspace OAuth-grant scanner — Admin SDK
tokens.list. - Microsoft 365 service-principal inventory.
- Provider admin APIs (OpenAI, Anthropic) — anonymous-client + new-project discovery.