Search Results

Account & Profile is where your own credentials live. Your profile Name and email, read-only. They come from the identity that signed you in, so they are changed where that identity lives rather than here. Add a second passkey The single most important thing o...

Small things, in the sidebar. Language The console is available in five languages, switched from the sidebar. The choice applies to your current session and is not stored on the server — switching machines starts from your browser's preference again. Only the ...

The honest version, for the security review that will ask. Tenant isolation Every query is scoped to your organization in the application layer, and that is the control the isolation rests on today. We are additionally rolling out database row-level security a...

Activity is a live feed — it refreshes every ten seconds, and the pulsing dot beside the title means what you are looking at is current. The tiles Over the selected window: Requests, Blocked, Top models (top three) and Top MCP servers (top three). Each shows "...

The densest column in the table, and the one that repays learning. MCP server badges Which MCP servers this request declared. This is how you find out that a request to summarize a pull request also had a database server and an HTTP client available. Risk find...

When Request time. The feed is newest-first. Developer Who sent it, and which tool. A dash with a tooltip means the request arrived with a device token issued before attribution was in place — the developer should reconnect the tool in the Endpoint Suite, afte...

Sentilai's API uses OAuth 2.0 client credentials. You create a credential in the console, exchange it for a token, and call the API with the token. Creating a credential API Credentials → Create Credential: Name — after the system that will use it, not the per...

Seven scopes, granted per credential. Scope What it allows audit:read Read audit events — the SIEM pull endpoint risk:read Read risk findings policy:read Read your policy configuration policy:write Change your policy configuration users:read Read admins and de...

What the Gateway exposes, for when you are integrating something yourself rather than using the Endpoint Suite. Chat endpoints Path Shape POST /v1/messages Anthropic — Claude Code POST /v1/chat/completions OpenAI — Cursor, Copilot POST /azure/openai/deployment...

What the Gateway returns when something is wrong, and what each one means for you. Code Meaning What to do 401 No token, or an invalid one The device may be revoked or its session expired — sign in again in the Endpoint Suite 403 The token lacks gateway:invok...

Billing & Plan shows your plan, its status, and how many seats you are using. Seats One pool, shared by admins and developers. The counter appears both here and on Users & Teams. Hitting the cap refuses new invitations with a dialog naming your limit. Two ways...

A common and reasonable question: does routing through Sentilai make AI usage cost more? Sentilai charges per seat band Your Sentilai subscription is a flat price for a band of seats — the shared pool of admins and developers. It does not vary with how many re...

Compliance produces a point-in-time record for a date range you choose, as a printable report and as JSON. The four parts Traffic — AI requests, how many were blocked by policy, how many developers were active, and the split between subscription and API-key us...

Some practical notes from what auditors actually ask. Generate it at the time, not afterwards Retention is finite. An evidence pack covering March, generated in March, keeps its detail; one generated in December may cover a window whose events have been purged...

The pull option: your SIEM asks Sentilai for events on its own schedule. The endpoint GET /api/siem/v1/events?cursor=&limit=1000 Events are in OCSF — the Open Cybersecurity Schema Framework — so they land in a shape Splunk, Microsoft Sentinel, Elastic and QRad...

The push option: Sentilai sends events to your collector as they happen. Configuring SIEM Export → push: Enable delivery Host and Port (6514 by default) Protocol — TLS encrypted, or TCP plaintext Sender hostname — how the events identify themselves in your SIE...

The Endpoint Suite is the desktop app that puts a developer's machine under governance. It signs them in, registers the device, and points their AI tools at the Gateway. macOS Download the .dmg from the link your admin gave you. Drag the app into Applications...

The fastest way to put a machine under governance: one button, every tool it can find. Doing it Open the Tools tab. The card at the top says how many AI tools were detected and how many are not yet routed through Sentilai. Press Govern all detected tools. The ...