AL
4 developer · 2 CI · 1 unknown7 endpoints observed
Endpoint-Centered Topology
An endpoint map should show the machine, the identities on it, and the activity that originates there.
Useful per endpoint: host identity, OS/runtime posture, associated users, agent stack, models, destinations, and whether the machine fits an expected environment class.
Identity, adjacency, activity, and posture around one representative item.
Machine Identity
What the host is supposed to be.
10.0.1.44hostname + IP
unknown OSfingerprint gap
unknown archfingerprint gap
Observed Activity
What is running there right now.
unknown user1 session
Claude Code v1.2.0agent
claude-sonnet-4-6model
Endpoint
10.0.1.44
Unresolved host currently tied to an active session and an unknown API key.
1 session · unknown OS
Comparative Context
How this host compares with normal fleet shapes.
developer_machineexpected class
ci_runnerexpected class
outside known fleettriage path
Risk Lens
Why a machine-level view matters.
unknown key attachedcredential issue
active sessionlive activity
needs enrichmentasset inventory link
Type
unknown
Associated user
unknown
Current agent
Claude Code v1.2.0
Current credential
sk-ant-...C001
| Hostname | IP | OS | Arch | Type | Sessions | Users | Last seen |
|---|---|---|---|---|---|---|---|
| alice-mbp.local | 192.168.1.42 | MacOS | arm64 | developer_machine | 6 | 1 | today |
| bob-thinkpad.local | 192.168.1.18 | Linux | x86_64 | developer_machine | 4 | 1 | today |
| carol-mbp.local | 192.168.1.55 | MacOS | arm64 | developer_machine | 5 | 1 | today |
| dave-mbp.local | 192.168.1.71 | MacOS | arm64 | developer_machine | 3 | 1 | today |
| gh-actions-runner-12 | 10.0.0.12 | Linux | x86_64 | ci_runner | 8 | 1 | today |
| gh-actions-runner-08 | 10.0.0.8 | Linux | x86_64 | ci_runner | 3 | 1 | today |
| 10.0.1.44 | 10.0.1.44 | unknown | unknown | unknown | 1 | 1 | 22 min ago |