> For the complete documentation index, see [llms.txt](https://ai-security-docs.akto.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ai-security-docs.akto.io/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/macos-standalone-installation.md).

# macOS Standalone Installation

End-user walkthrough of the standalone AI Endpoint Shield installer on macOS, including the security prompts users are asked to approve.

## Overview

This page covers the **standalone installer** on macOS — the `.pkg` a user runs by hand, rather than a fleet-wide MDM rollout. It walks through the installation flow of **AI Endpoint Shield** and the permissions users may be prompted to approve, so you can share it with end users ahead of time.

{% hint style="info" %}
For fleet deployment, use [Jamf MDM Deployment](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/jamf-mdm-deployment.md), [Mosyle MDM Deployment](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/mosyle-deployment.md), or [NinjaOne Deployment (macOS)](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/ninjaone-macos-deployment.md) instead — those install silently, with no user prompts.

If the install completes but the agent does not appear in Akto, see [macOS Troubleshooting](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/macos-troubleshooting.md).
{% endhint %}

## Steps Guide

{% stepper %}
{% step %}
**Run the Installer**

Double-click the **AI Endpoint Shield** **.app** file to launch it. This opens the installer wizard.

<details>

<summary>If macOS shows a Gatekeeper warning</summary>

macOS may display a warning stating that the application could not be verified and was blocked to protect the system. This is expected behaviour for applications distributed outside the Mac App Store.

<figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-d0d32f593d087dd1cfa0806385ea881d05d8f6be%2Fimage.png?alt=media" alt="" width="375"><figcaption></figcaption></figure>

**User Action (Required):**

1. Open **System Settings**
2. Navigate to **Privacy & Security**
3. Scroll to the **Security** section
4. Click **Open Anyway** for **mcp-endpoint-shield**

This confirms that the user has explicitly approved the installer. Once approved, macOS allows the installer to run normally — no administrator privileges are required.

<figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-0379c7823829ed8ed08a285a09fe18fb133114f5%2Fimage.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>

</details>
{% endstep %}

{% step %}
**Installer Wizard – Introduction Screen**

The installer wizard launches.

<figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-85e4248ad72ab5bec4d5072c44e9eaa24746f597%2Fimage.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>

The introduction screen explains:

* What AI Endpoint Shield does
* The installation location (user directory)
* That no root or administrator permissions are required

Click **Continue** to proceed.
{% endstep %}

{% step %}
**Installation Type Confirmation**

<figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-387125f0cf024b902342c1fca6870269165a4f80%2Fimage.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>

Click **Install** to begin installation.

This screen confirms:

* Disk space required
* Installation scope (current user only)
* Target disk (e.g., Macintosh HD)
  {% endstep %}

{% step %}
**Folder Access Permissions (Optional)**

After installation, AI Endpoint Shield may request permission to access specific folders in the user’s home directory:

* Desktop
* Documents
* Downloads

<div><figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-a54ae20e31b48c8d2dee3bb05ff38e63979e1aee%2Fimage.png?alt=media" alt="" width="369"><figcaption></figcaption></figure> <figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-5b08aaebd6fbe829fa80da3d3c3888231f18c3ec%2Fimage.png?alt=media" alt="" width="375"><figcaption></figcaption></figure> <figure><img src="https://3128331180-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Ftog5ODwYfqPOf4eQhsOC%2Fuploads%2Fgit-blob-983c6d3a6904345ef06299eea9c2113a4b51dd7d%2Fimage.png?alt=media" alt="" width="351"><figcaption></figcaption></figure></div>

These permissions are used to:

* Scan MCP-related files
* Validate configurations
* Monitor relevant artifacts within the user environment

**User Choice:**

* **Allow** – Enables folder-level scanning
* **Don’t Allow** – Skips access to that folder

{% hint style="info" %}
These permissions are optional. The application will continue to function even if access is denied, but scanning coverage may be limited.
{% endhint %}
{% endstep %}
{% endstepper %}

## After installation

Confirm the agent is running:

```bash
/usr/local/bin/akto-endpoint-shield --version
/usr/local/bin/akto-endpoint-shield check-config --path ~/.akto-endpoint-shield/config
launchctl list | grep akto-endpoint-shield
```

`check-config` should print `provisioned`, and both LaunchAgents should show a PID rather than `-`. If either check fails, see [macOS Troubleshooting](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/macos-troubleshooting.md).

## Related documentation

* [macOS Troubleshooting](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/macos-troubleshooting.md)
* [Allowlist in Security Software](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/allowlist-in-security-software.md)
* [Jamf MDM Deployment](/akto-atlas-agentic-ai-security-for-employee-endpoints/endpoints-discovery-agents/ai-endpoint-shield/jamf-mdm-deployment.md)