How do I discover AI agents running in our company?
Look where agents get their power: identities, connectors and automation platforms, then confirm with network traffic. An AI agent is software that uses a language model to decide on and carry out steps, such as reading tickets, querying systems, writing code or sending e-mails, usually through API keys, service accounts or OAuth grants. So the best first sources are your identity provider and SaaS admin consoles: new OAuth applications with broad scopes, service accounts or personal tokens created recently, and AI features with connectors switched on. Then check automation and low-code platforms, CI pipelines and developer machines for agent frameworks and MCP servers, and ask teams directly, because many agents are pilots nobody has registered. The network adds the behavioural view: which servers or workstations call AI APIs regularly, at night or in bursts, and which also reach internal systems. From the Pro plan, NetSenX shows which hosts talk to which external AI services and local model runtimes and how much data moves. It does not identify an agent by name, and the agent-specific behaviour signals described elsewhere are not yet alerts.
This answer is part of the guide: Shadow AI: what it is and how to find it