> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getunbound.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Discovery

> Scan devices for installed AI tools and schedule recurring scans

`unbound discover` scans a device for installed AI coding tools and reports findings to Unbound. This powers the AI Tools inventory and fleet visibility in the dashboard.

Tools detected: Cursor, Claude Code, Gemini CLI, Codex, Windsurf, Roo Code, Cline, GitHub Copilot, Augment Code, JetBrains, and more.

## Prerequisites

Python 3 and `curl` must be available on the device.

The `--api-key` used here is a **discovery key** — separate from your login credentials. Get it from **Connect → AI Coding Tools** in the Unbound dashboard.

## Run a scan

```bash theme={null}
# Scan the current user only:
unbound discover --api-key <DISCOVERY_KEY>

# Scan all users on the device (requires root):
sudo unbound discover --api-key <DISCOVERY_KEY>

# Scan against a custom backend:
sudo unbound discover --api-key <DISCOVERY_KEY> --domain https://backend.acme.com
```

## Schedule recurring scans (macOS)

Set up a LaunchAgent that runs a scan every 12 hours:

```bash theme={null}
unbound discover schedule --api-key <DISCOVERY_KEY>
```

Check schedule status and log paths:

```bash theme={null}
unbound discover status
```

Remove the schedule:

```bash theme={null}
unbound discover unschedule
```

***

## One-step user onboarding

`unbound onboard` combines tool setup and discovery into a single command — useful for scripting new user enrollment:

```bash theme={null}
unbound onboard --api-key <USER_KEY> --discovery-key <DISCOVERY_KEY>
```

This runs `setup --all` (Cursor + Claude Code hooks + Codex hooks + Copilot hooks + Augment hooks) and then performs a device scan.

### Onboard flags

| Flag              | Purpose                                                                                                                                  |
| ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| `--api-key`       | User or admin key — gates which scope `onboard` runs in (see MDM section below)                                                          |
| `--discovery-key` | Discovery key from **Connect → AI Coding Tools**, used for the device scan                                                               |
| `--domain`        | Override the Unbound backend URL (defaults to `https://api.getunbound.ai`). Useful for staging or self-hosted deployments                |
| `--set-cron`      | Schedule a recurring scan after onboarding finishes. CLI/my-device scope only — for MDM-managed devices the MDM platform handles cadence |
| `--backfill`      | After onboarding, re-run discovery against the device's historical tool state so analytics catch up                                      |

***

## MDM device onboarding (admin, requires root)

For fleet-wide enrollment from an MDM system:

```bash theme={null}
sudo unbound onboard --api-key <ADMIN_KEY> --discovery-key <DISCOVERY_KEY>
```

Scope is automatic: running `unbound onboard` **with `sudo`** configures every user on the device (MDM/org scope), while **without `sudo`** it sets up just the current user. Running with `sudo` also performs a full device scan (via `sudo unbound setup --all`) after enrolling all users.

<Note>
  See [MDM Integrations](/mdm-integrations/overview) for deployment guides and MDM-specific configuration.
</Note>

***

## Supported AI coding tools

Unbound gives security teams visibility into the AI coding tools your developers use — the agents themselves, the MCP servers they connect to, the rules files that steer them, and the skills they've installed. The matrix below summarizes coverage across the most common tools in the ecosystem today.

<Note>
  Coverage continues to evolve alongside the AI tooling ecosystem. Specific feature behavior may vary by tool version and deployment configuration. Discovery supports macOS, Windows, and Linux.
</Note>

| Tool                                     | Platform              |                 Agents                |              MCP Servers              |                 Rules                 |                 Skills                |
| ---------------------------------------- | --------------------- | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: | :-----------------------------------: |
| **Cursor**                               | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |
| **Cursor CLI**                           | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Claude Code CLI**                      | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |
| **Claude Cowork**                        | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> |                   —                   |                   —                   | <Icon icon="check" color="#A78BFA" /> |
| **GitHub Copilot**                       | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Augment Code**                         | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |
| **Gemini CLI**                           | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Codex**                                | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **JetBrains IDEs** *(IntelliJ, PyCharm)* | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Junie** *(JetBrains)*                  | macOS, Linux          | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Roo Code**                             | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Cline**                                | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |
| **Windsurf**                             | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |
| **Google Antigravity**                   | Windows, macOS, Linux | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> | <Icon icon="check" color="#A78BFA" /> |                   —                   |

**Agents** — Detect installations of the AI coding tool.

**MCP Servers** — Surface the MCP server connections each tool has configured.

**Rules** — Capture the custom instruction and rules files each tool loads (e.g. `.cursorrules`, `CLAUDE.md`, `GEMINI.md`, `.windsurfrules`).

**Skills** — A `SKILL.md` file of instructions that an agent adds to its toolkit and uses when relevant to extend what it can do.

<CardGroup cols={2}>
  <Card title="MDM Integrations" icon="building" href="/mdm-integrations/overview">
    Connect your MDM provider and deploy AI tools at scale
  </Card>

  <Card title="Analytics" icon="chart-line" href="/analytics">
    View discovered tools and fleet activity in the dashboard
  </Card>
</CardGroup>