Agent discovery & inventory
Research-preview capability of Nudge Security that inventories AI agents employees create on platforms such as Copilot Studio, Agentforce, Gemini, OpenAI, n8n, ServiceNow, Databricks, Workato and Tines, surfacing creator, permissions, connected data and MCP connections. Nudge's discovery approach centres on corporate email signals and OAuth grants.
commercial · preview · Research snapshot 2026-09-06
Visit the official product source ↗Agent discovery & inventory · Agent identity & access · AI risk & compliance management
Useful conversation with: CISO, IT security manager, SaaS governance lead.
Demonstrate discovering an n8n or Copilot Studio agent an employee built last week, showing the creator, its OAuth grants, and any unauthenticated MCP connection.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Discovers AI agents as employees create them, including agents deployed without approval, showing who created each agent, what it is connected to, its permissions and capabilities, and what data it can access, across Copilot Studio, Agentforce, Gemini, OpenAI, n8n, ServiceNow, Databricks, Workato and Tines.
Limit: Explicitly labelled a research preview; the page does not document the technical connector used per platform.
Vendor claim
Surfaces AI connections created through OAuth grants and API tokens and answers what MCP activity exists in an environment, flagging MCP connections with no authentication.
Limit: No documentation reviewed on how MCP activity is observed or how complete that view is.
Vendor claim
Nudge describes four shadow AI detection methods - email-based discovery, browser-based discovery, network monitoring, and SaaS API connections used by SSPM tools - and states each has blind spots so comprehensive solutions combine several.
Limit: This is Nudge's own framing of the market; it does not state which combination Nudge itself implements for every platform.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction