Users and Devices

Overview

The User and Devices page gives you a complete inventory of all users and devices discovered by Akto Atlas in your organisation. It shows who is using AI agents, which MCP servers they connect to, and what agentic assets are associated with each user.

From here, you can:

• See all discovered users and devices across your environment

• Tag users and devices for better context and filtering

• Click into any user to inspect the endpoints their agents are accessing

Navigate to: Akto Atlas → Agentic AI Discovery →Endpoints

Explore the List

The page opens on the Users tab by default. Switch to the Devices tab to see the device-level inventory.

Users Tab

Each row in the Users table represents a discovered user.

Column	What it tells you
User	The username discovered from agent traffic
Tags	Tags associated with this user, either detected automatically (e.g. Malicious Skills, Contains personal account) or assigned manually / synced from Okta
Type	The type of AI component the user interacts with (e.g. MCP Server, LLM)
Agentic assets	The number of agentic assets associated with this user
Risk score	A risk indicator based on the user's agent activity and exposure
Sensitive data	Whether sensitive data types have been detected in this user's traffic
Last traffic seen	When Akto last observed activity for this user

Devices Tab

The Devices tab shows the same inventory organized by device instead of user. Each discovered device is listed with its associated agents and agentic assets.

View User Details

Click on any user to open a detailed view listing all endpoints and agentic assets associated with that user.

The detail view shows:

Column	What it tells you
Endpoint ID	The unique identifier for the discovered endpoint
Type	The component type (e.g. MCP Server)
Username	The username associated with this endpoint
Risk score	Risk level for this specific endpoint
Sensitive data	Sensitive data types detected on this endpoint
Last traffic seen	When this endpoint was last active
Discovered	When Akto first detected this endpoint

Expand any endpoint row to see the individual agentic assets (e.g. MCP servers) nested under it.

Tag Users and Devices

You can add custom tags (key-value pairs) to users and devices to attach organizational context, such as department, team, or environment. This makes it easier to filter and investigate activity later.

1

Select one or more users using the checkboxes in the Users table.

2

Click Edit device tags from the action bar that appears at the bottom of the screen.

3

In the Add a tag section, enter a Key (e.g. department) and a Value, then click Add.

When editing multiple users at once, their existing tags may differ and aren't shown in the modal. A tag you add is applied to all of the selected users. Use Clear all manually-set device tags instead if you want to remove every manually-set tag from all of them.

4

Click Save.

You can select multiple users at once and apply the same tags to all of them in a single action.

Import Tags from Okta

If you use Okta SSO, you don't have to tag users manually, you can sync your Okta groups in as device tags instead. Once enabled, every Okta group is kept in sync as a tag on each discovered user, refreshing automatically in the background.

Learn how to turn this on in the Okta SSO integration guide.

Filter by Tags

Once tags are assigned, either manually or synced from Okta, use the filters at the top of the Users table to narrow down the list by tag. This helps you focus on a specific group when investigating activity or reviewing risk.