Summary is the front page of AI Tools Discovery: how exposed your fleet is, what your developers are running, and who carries the most risk.
The Discovery pages that serve cached figures — Summary, Inventory → Tools and Permissions — show how current they are: a chip beside the page title reads Updated 3 minutes ago, with the refresh cadence — Refreshes every 10 minutes — on hover.
What’s on the page
Security posture
The score runs 0–100 and higher is healthier: 76 and above reads Low, 51–75 Medium, 26–50 High, 25 and below Critical.
Five exposures pull it down. Hover the Security Posture Score to see the breakdown:
A fleet can read healthy overall while one of the five is bad, so the breakdown is the useful half: it names the exposure dragging the score down — the one to fix first.
Headline cards
High-Risk MCP Servers
Between the charts and the leaderboard, a table of the riskiest MCP servers with a count badge: Server, Risk (a score with its level, for example 9 · Critical, sortable) and Uses (how many developers have it, sortable). View all opens the MCP Servers inventory, and selecting a row opens that server. Where MCP risk rating is not on for your organization the table is absent.Distribution charts
Users Risk Leaderboard
A device that has not reported for more than seven days, or has never reported, is marked Stale in the Last Sync column.
Filters and controls
Search users narrows the leaderboard on any of name, username, system user, email or device ID. Stale keeps it to devices that have not reported in more than seven days, or never.
Risk Score, Last Sync and Tools sort, in either direction — selecting the same header again reverses it.
The distribution charts double as filters: selecting a slice of Risk Distribution, Tool Distribution or Autonomy Levels applies it to the leaderboard, and selecting the same slice again clears it.
The view is a link
Your leaderboard filters and sort are written into the address as you set them, so a filtered view is a link anyone can open on exactly what you were looking at:
The search box is not carried, so a shared link opens the same filters with the search cleared.
What you can do
Per-developer views
Selecting a row on the leaderboard opens that device’s own view at/ai-tools-discovery/users, with the device already selected — its tools, MCP servers, config files, skills and risk breakdown in one place, as the tabs Risk Overview, Tools & Permissions, MCP Servers, Tool Rules and Skills. The address needs the deviceId; opening /ai-tools-discovery/users on its own returns to Summary.