Search Results

Step 6 of the wizard, and the decision that determines who can walk in. Default role for new sign-ins Developer — the person is immediately a developer and can use the Endpoint Suite. Pending approval — they exist but can do nothing until an admin approves the...

Sentilai has no passwords. Not "passwords plus MFA" — no password field exists anywhere. This surprises people, so here is the reasoning and the practical consequence. Why A password can be phished, reused, guessed or leaked from somewhere else. A passkey is a...

The common cases, in the order they actually occur. "This account can't open the admin console" The identity is valid but has no admin record. Nearly always passkey autofill picked the wrong saved account — someone with both a personal and a work identity on t...

The tool works, the developer is using it, and the feed stays empty. Check the restart first This is the answer roughly four times out of five. Every one of these tools reads its configuration once, at startup. Closing the window is not enough — the applicatio...

It worked before governance and now returns an error. Almost always one of the things below. No provider key — error 424 The tool is in managed API key mode and there is no matching key. Claude Code needs an Anthropic key; Cursor and Copilot need OpenAI. Fix i...

"This account can't open the admin console" The identity is valid but has no admin record. Usually passkey autofill chose the wrong saved account — common for anyone with a work and a personal identity on the same machine. Sign out and sign in again, choosing ...

SmartScreen warns on Windows Expected today: the Windows build is not yet Authenticode-signed. More info → Run anyway. We will remove this step when the certificate is in place. The app cannot create a device identity On macOS, this is nearly always running it...

An MCP server is blocked that I allowed Check the precedence. A per-tool rule beats a per-server rule. If you allowed the server but blocked one of its tools, that tool stays blocked. Also: when a single request names several MCP servers, the most restrictive ...

Push delivery stopped SIEM Export shows delivered count, last success, last attempt and last error. Start there — it usually names the cause: an expired certificate, a moved collector, a closed port. The status badge reads Active or Paused. Push was never conf...

Sentilai is the control plane for the AI coding assistants your team already uses. Every request from Claude Code, Cursor, GitHub Copilot, Gemini CLI or Codex CLI routes through the Sentilai Gateway, where your policy is enforced in real time and everything is...

The full list of events Sentilai produces, what each one means, and which fields carry it. Everything below arrives through both delivery modes — the OCSF pull API and the CEF/syslog push. They are the same stream in two formats, not two different feeds. AI re...

The signals that can appear on an event, what each one means, and where you control it. In the request content Signal What it finds Secret scanning AWS keys, GitHub tokens, private keys, Anthropic/OpenAI keys, Slack tokens, Google API keys, JWTs Personal data ...

Most of this documentation is about AI tools Sentilai routes and enforces. This page is about the ones it cannot — and what we do instead. What an ungoverned agent is An ungoverned AI agent is an autonomous AI system running on a developer's machine that does ...

On Policy → Ungoverned AI agents you choose what happens when an autonomous AI agent Sentilai does not govern is found on one of your devices. Read Ungoverned AI agents under Devices and logs first — this page is only about the consequence. This is the one set...