The Inventory page provides a centralized view of AI assets discovered across your organization, giving you visibility into the enterprise AI ecosystem. You can explore and analyze AI assets such as AI Applications, MCP Servers, Agents and Models used by users across the enterprise. These assets might be accessed from managed endpoints, run locally on managed endpoints. To learn what Netskope Client detects during an endpoint scan, see Netskope Client AI Discovery.
By consolidating this information into a single interface, the Inventory page helps you understand how AI components are interconnected, identify high-risk assets, and investigate user interactions and data flows. This page is primarily used for in-depth analysis, allowing you to drill down into specific entities for effective monitoring and governance.
Use the time range filter in the top-right corner to select a time frame. All metrics and data on the page update dynamically based on the selected range. The same time range options are available as on the Overview page.
Search and Filtering
A search bar is available above each inventory table, allowing you to filter results by name or identifier. Each section also provides filter dropdowns specific to the data type. When filters are active, a “Clear All” button appears to reset all filters at once.
The Inventory page UI is organized into two primary sections: Assets and Identities
Assets
Provides a detailed view of discovered AI applications, MCP servers, Agents and Models used across the enterprise, whether accessed from managed endpoints, running locally on endpoints, or hosted in cloud and on-premises environments. See following articles to learn more about individual articles:
Identities
This section offers visibility into users interacting with AI systems, helping you analyze user activity for specific identities.
Users
The Users section, under Identities, provides detailed visibility into individual users interacting with AI applications and assets within your organization.
Source – Next-Gen Secure Web Gateway
- User Groups – Shows the top 10 user groups by usage. Click a group to filter.
- Organization Unit – Shows the top 5 organizational units. Click a bar to filter.
The following table displays a list of users in your environment with the following details:
- Name – Name or identifier of the user.
- User Group – Group assigned to the user.
- OU – Organizational unit or department.
- Risk – Reconciled risk level for the application, combined with a confidence indicator. Hover over the confidence dots to see the confidence level. This data comes from the AI Risk Agent (Beta), part of AI SecOps. For details on how risk is calculated, see the AI Risk Agent documentation in your tenant. See What Does the Risk Score and Confidence Level Mean in AICC?
- #d Apps – Number of AI applications accessed by the user in selected time range.
- #d MCP Servers – Number of MCP servers (discovered on NG-SWG and on managed endpoints) the user has interacted with in the selected time range.
- #d Bytes – Volume of data exchanged by the user across AI services in selected time range.
- #d Sessions – Number of sessions initiated by the user involving AI applications in selected time range.
- First Seen – Timestamp when the user was first detected interacting with AI services.
- #d Models – Number of distinct AI models detected on this user’s managed endpoint(s) during the selected time range. Populated when Endpoint AI Discovery is enabled.
Click any row to open the user detail panel.
Unknown
The Unknown section, under Identities, provides visibility into interactions with AI applications and assets where the user identity could not be determined. These entries typically represent activity from unmanaged, unauthenticated, or unrecognized sources, and may indicate potential gaps in identity visibility or control.
The table displays a list of unidentified entities interacting with AI services with the following details:
- Source IP – IP address of the unknown entity (primary identifier).
- Hostname – Hostname associated with the entity, if available.
- #d Apps – Number of AI applications accessed in selected time range.
- #d MCP Servers – Number of MCP servers interacted with in selected time range.
- #d Bytes – Volume of data exchanged with AI services in selected time range.
- First Seen – Timestamp indicating when the activity was first detected.
- Last Seen – Timestamp of the most recent activity.
Click any row to open the unknown identity detail panel.
Freequently Asked Questions
Q: Why do I see blank footprints or identities in AI Inventory?
Footprints and Identities can be blank if the asset was discovered in 90 days but not seen in the given time frame. Footprints and identities appear blank when the asset has not been accessed within the time period set by the filter. Available filter values are 24 hours, 7 days, and 14 days. For example, if you set the filter to 7 days and the asset has not been accessed in the last 7 days, its footprint or identity fields show as blank. Selecting a longer filter window, such as 14 days, may surface footprint data if the asset was accessed within that broader range.