Review Shadow MCP discoveries
Find reported MCP access outside Durin and check device coverage before acting.
Enroll a reporting device
Open Shadow MCPs → Enroll device. Name the device, download its setup file and follow the displayed Durin CLI commands to enroll and watch the intended project. Keep the file private and delete it after enrollment.
Review discoveries
In Inventory, open an MCP to see the employees, devices and agents reporting it. Filter by routing, review status, evidence or configuration presence. Inspect first and last seen times, then save a review status and note.
Check coverage first
Use Device coverage to inspect reporting health, last reports and scanned sources. No matching inventory does not prove there are no MCPs: devices may be unenrolled, stale or unable to scan a source.
Bring access under policy
Device reports are observations, not proof of a current connection. A review status does not block access or remove configuration. Add the MCP through Connections and update the client to use Durin; direct access remains outside its policy checks.