Product guide · English
Watch AI coding agents with Agent Watch
Use the Agent Watch desktop app to see when AI coding agents on a team machine read credentials, reach new domains, delete files or change their own settings, and review the result in the VetKit app.
Steps
- Open Plugins and download Agent Watch if it is available for your account, then start pairing in the desktop app. Approve the device code in the browser and choose the organization; members, admins and owners can pair, viewers cannot.
- Open Agent Watch in the app to see devices, tools, alerts, sessions and posture. Alerts are grouped by rule and device, so repeats raise a count instead of creating new items; acknowledge, resolve or mark them as false positives.
- Open a session to read its attestations, such as no reads outside the project or egress only to listed domains. Each claim is verified, partial or unknown, depending on the sensor coverage behind it.
- Organization admins can edit the policy, set time-limited exceptions and choose whether admins see session details and alert context or alert metadata only. Each member can revoke their own device at any time.
Read the result
An alert is a rule match on one device, not proof of compromise. Severity is decided by the server from the rule, the context and the organization policy. An attestation is only as strong as the coverage reported for that session.
Limits and availability
Agent Watch observes and reports; it does not block actions. Uploads are metadata only (alerts, session summaries, posture) and never file contents or prompts; raw events are uploaded only when the organization and the user both opt in. Every workspace gets team views, policy editing and integrations, with up to 25 devices; alerts are kept for 180 days and sessions and posture for 90 days. Organizations remain responsible for notice and consent under local law.
This guide describes the implemented workflow. Every account has every feature: Quick Scan is free each month, and full scans use credits. What you can run also depends on your role and configuration. Check the available controls and the evidence returned by each run.