> For the complete documentation index, see [llms.txt](https://ai-security-docs.akto.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ai-security-docs.akto.io/akto-atlas-agentic-ai-security-for-employee-endpoints/ai-agent-activity/users-and-devices.md).

# Users and Devices

## Overview

The User and Devices page gives you a complete inventory of all users and devices discovered by Akto Atlas in your organisation. It shows who is using AI agents, which MCP servers they connect to, and what agentic assets are associated with each user.

From here, you can:

* See all discovered users and devices across your environment
* Tag users and devices for better context and filtering
* Click into any user to inspect the endpoints their agents are accessing

Navigate to: **Akto Atlas → Agentic AI Discovery →Endpoints**

## Explore the List

The page opens on the **Users** tab by default. Switch to the **Devices** tab to see the device-level inventory.

### Users Tab

Each row in the Users table represents a discovered user.

<table><thead><tr><th width="200">Column</th><th>What it tells you</th></tr></thead><tbody><tr><td><strong>User</strong></td><td>The username discovered from agent traffic</td></tr><tr><td><strong>Tags</strong></td><td>Tags associated with this user, either detected automatically (e.g. Malicious Skills, Contains personal account) or assigned manually / synced from Okta</td></tr><tr><td><strong>Type</strong></td><td>The type of AI component the user interacts with (e.g. MCP Server, LLM)</td></tr><tr><td><strong>Agentic assets</strong></td><td>The number of agentic assets associated with this user</td></tr><tr><td><strong>Risk score</strong></td><td>A risk indicator based on the user's agent activity and exposure</td></tr><tr><td><strong>Sensitive data</strong></td><td>Whether sensitive data types have been detected in this user's traffic</td></tr><tr><td><strong>Last traffic seen</strong></td><td>When Akto last observed activity for this user</td></tr></tbody></table>

### Devices Tab

The Devices tab shows the same inventory organized by device instead of user. Each discovered device is listed with its associated agents and agentic assets.

## View User Details

Click on any user to open a detailed view listing all endpoints and agentic assets associated with that user.

The detail view shows:

<table><thead><tr><th width="200">Column</th><th>What it tells you</th></tr></thead><tbody><tr><td><strong>Endpoint ID</strong></td><td>The unique identifier for the discovered endpoint</td></tr><tr><td><strong>Type</strong></td><td>The component type (e.g. MCP Server)</td></tr><tr><td><strong>Username</strong></td><td>The username associated with this endpoint</td></tr><tr><td><strong>Risk score</strong></td><td>Risk level for this specific endpoint</td></tr><tr><td><strong>Sensitive data</strong></td><td>Sensitive data types detected on this endpoint</td></tr><tr><td><strong>Last traffic seen</strong></td><td>When this endpoint was last active</td></tr><tr><td><strong>Discovered</strong></td><td>When Akto first detected this endpoint</td></tr></tbody></table>

Expand any endpoint row to see the individual agentic assets (e.g. MCP servers) nested under it.

## Tag Users and Devices

You can add custom tags (key-value pairs) to users and devices to attach organizational context, such as department, team, or environment. This makes it easier to filter and investigate activity later.

{% stepper %}
{% step %}
Select one or more users using the checkboxes in the Users table.
{% endstep %}

{% step %}
Click **Edit device tags** from the action bar that appears at the bottom of the screen.
{% endstep %}

{% step %}
In the **Add a tag** section, enter a **Key** (e.g. `department`) and a **Value**, then click **Add**.

{% hint style="info" %}
When editing multiple users at once, their existing tags may differ and aren't shown in the modal. A tag you add is applied to all of the selected users. Use **Clear all manually-set device tags** instead if you want to remove every manually-set tag from all of them.
{% endhint %}
{% endstep %}

{% step %}
Click **Save**.
{% endstep %}
{% endstepper %}

{% hint style="info" %}
You can select multiple users at once and apply the same tags to all of them in a single action.
{% endhint %}

## Import Tags from Okta

If you use Okta SSO, you don't have to tag users manually, you can sync your Okta groups in as device tags instead. Once enabled, every Okta group is kept in sync as a tag on each discovered user, refreshing automatically in the background.

Learn how to turn this on in the [Okta SSO integration guide](/account-management/sso/okta-oidc.md).

## Filter by Tags

Once tags are assigned, either manually or synced from Okta, use the filters at the top of the Users table to narrow down the list by tag. This helps you focus on a specific group when investigating activity or reviewing risk.