# Endpoint Shield Details

## Overview

The Endpoint Shield page shows you every protected endpoint and gives you a clear view of agent activity, deployment status, and shielded MCP servers.

## Accessing Endpoint Shield

Navigate to **Agentic Discovery ->** **Endpoint Shield** in the left sidebar to view your complete agent inventory across all employee devices.

## Agent List

The Agent List displays all endpoints where the shield is active. Each row contains:

| Column             | Description                                                          |
| ------------------ | -------------------------------------------------------------------- |
| **Agent ID**       | Unique identifier of the shielded agent running on the endpoint.     |
| **Device ID**      | Device identifier of the machine where the agent is deployed.        |
| **Username**       | User associated with the device on which the agent is installed.     |
| **Last Heartbeat** | Timestamp of the most recent health check sent by the agent.         |
| **Last Deployed**  | Timestamp showing when the latest shield configuration was deployed. |

<figure><img src="/files/qpFzkFdkiOjjEtTnUBCJ" alt="" width="563"><figcaption></figcaption></figure>

You can select any Agent ID to view deeper information.

## Agent Details Drilldown

When you click an **Agent ID**, you see two tabs that help you understand what is running on that endpoint.

### User Analysis

The **User Analysis** helps you understand how a specific user is interacting with an AI agent on their endpoint. It gives you deeper visibility into user behaviour so you can quickly identify unusual activity and assess potential risks.

Here, you can:

* **View User Analysis Summary**\
  Get a high-level, AI-generated summary of how the user is leveraging the agent. This includes the tools being used (e.g., MCP servers), the nature of tasks performed, and an inferred user profile based on activity patterns.
* **Track Token Usage**\
  See the total **Input Tokens** and **Output Tokens**, helping you understand the scale and intensity of agent usage.
* **Identify Dominant Topics**\
  View key areas the user is working on (e.g., automation, scraping, testing). This helps you quickly understand the primary use cases of the agent.
* **Monitor Emerging Risk Signals**\
  The **Queries Flagged** section (when available) highlights potentially risky or policy-violating interactions for further investigation.

<div data-with-frame="true"><figure><img src="/files/e6apwIn2CO7SeeM547TB" alt="" width="563"><figcaption></figcaption></figure></div>

### MCP Servers

This tab shows you the MCP servers associated with the selected agent. You can review server details and the specific endpoints or commands that are shielded on that device.

<div data-with-frame="true"><figure><img src="/files/RRmzjrzcQQ7DyqhGGgIV" alt="" width="563"><figcaption></figcaption></figure></div>

### Agent Logs

This tab provides a chronological log of the agent’s activity. You can track what the agent executed, when it checked in, and how enforcement behaved on that endpoint.

<div data-with-frame="true"><figure><img src="/files/6gO86ZSE0yBjcW1QOSiC" alt="" width="563"><figcaption></figcaption></figure></div>

## Learn More

To understand how Endpoint Shield works at a conceptual level, including architecture, workflow, and protection mechanics, refer to the [**AI Endpoint Shield**](https://docs.akto.io/ai-endpoint-shield)**.**


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://ai-security-docs.akto.io/akto-atlas-agentic-ai-security-for-employee-endpoints/ai-agent-activity/view-endpoint-shield-details.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.