Unmanaged AI discovery
Unmanaged AI is the AI activity in your environment that engineering didn't onboard — a Workspace add-on a teammate installed, a third-party integration, a marketing-team agent with access to production data. Trefur surfaces them and gives you a way to triage.
What Trefur surfaces
Third-party AI apps your people have connected, newly seen admin-API clients, and agents reporting in for the first time in your workspace.
What you see
- A dedicated Unmanaged AI rollup in the dashboard with per-agent counts.
- Per-finding row with the discovery source, the affected user list, and a one-click action (revoke OAuth grant, mark as expected, contact the owner).
Sources
- Google Workspace OAuth-grant scanner — Admin SDK
tokens.list. - Microsoft 365 service-principal inventory.
- Provider admin APIs (OpenAI, Anthropic) — anonymous-client + new-project discovery.