BR /Future of Work · Cybersecurity
Microsoft Defender makes local AI agent discovery generally available
Security teams can connect supported agents with their users, devices and MCP tools; Windows runtime protection remains in preview.
What happened
Microsoft announced general availability for discovering supported local AI agents and their configured Model Context Protocol servers on Windows and macOS. The October 29 release expands coverage beyond 50 supported agents and MCP servers, bringing device, account and tool-connection details into Defender's security inventory.
Discovery observes agent activity on eligible devices already onboarded to Defender. Security teams can investigate the resulting context alongside other security data. Protection that inspects agents during operation remains a Windows preview, with coverage depending on the agent and inspection method; discovery and enforcement are separate capabilities.
Source: Microsoft — Discover local AI agents with Microsoft Defender.
BELL RIVER perspective · Editorial analysis
What it means for business
Our editorial view is that endpoint specialists increasingly need to understand an assistant's tool connections as well as its installation. A useful inventory should help a reviewer explain which business resources an agent can reach.
- Compare approved assistants with the discovered inventory.
- Review MCP connections with the relevant resource owners.
- Test preview enforcement in a limited device group.
The announcement does not establish complete agent coverage or measured detection accuracy.
Sources & editorial note
This brief summarises a third-party announcement. The business perspective is BELL RIVER’s interpretation, not a vendor claim or a report of a BELL RIVER client project.