Search Results

Devices & logs Device registry Every machine running the Sentilai Endpoint registers with its own credential (public-key identity). The Devices screen lists them with first/last seen, reported hostname, and compliance state. A device credential can be revoked ...

Support & tickets Sentilai has a built-in, closed-loop support system — no third-party helpdesk holds your data. Opening a ticket In the Admin Console's Support area: subject, description, attachments. You'll see the full ticket history and status there. Email...

Compliance & SIEM Evidence pack The Compliance screen assembles an auditor-ready evidence pack for any period: the policies in force (MCP default + rules, detector actions), risk sensitivity, capture settings, top models/tools/MCP servers, and activity summari...

Billing Plans Free trial — 30 days, up to 2 seats, no card required. Every governance feature included. Team — up to 25 seats, self-service subscription. Enterprise — custom seats, SSO-enforced enrollment, contract terms; contact sales. Seats A seat is an admi...

API Everything the Admin Console does is an API — the console is just a client. Authentication Create an API credential in the console (Users & Teams → API credentials): you get a client ID/secret for the OAuth 2.0 client_credentials grant. Each credential car...

Admins manage the organization: policy, providers, people, billing. They do not need the Endpoint Suite — that's for developers. How Go to Users & Teams → Admins. Click Invite Admin, enter their name and work email. They receive an email with a passkey setup l...

Developers are the people whose AI tools you're governing. A developer invite grants no console access — it exists so their machine can enrol and their name can appear against their AI activity. How Go to Users & Teams → Developers. Click Invite Developer, ent...

Use this when someone can't sign in because their passkey is gone — a lost or wiped laptop, a replaced phone, or a passkey that was never finished. How Users & Teams → find the person in the Admins or Developers table → Resend passkey. They get a fresh setup l...

One action for "this person has left". Classic offboarding checklists cover email and VPN but never reach AI tooling — API keys sitting in tool configs, live logged-in assistants, MCP credentials, gateway tokens. How Users & Teams → Developers → Offboard on th...

SSO lets your wider developer team sign in with the identity provider you already run — Google Workspace, Microsoft Entra, or any generic OIDC or SAML provider. Your own admin login is unaffected: admins keep signing in with passkeys. The wizard Organization S...

This is the rule the Gateway applies to an MCP server that has no explicit rule of its own. Set it under Policy → MCP default action. Action What developers experience When to use it Allow Nothing changes You want visibility first, controls later Warn A warnin...

Turn on Require approval for new MCP servers when you want unknown servers held back until someone has looked at them. How it behaves A server nobody has reviewed — meaning it has no explicit per-server rule on MCP Inventory — is enforced at the pending action...