Josys brings AI agents into your identity governance control plane. Discover agents from Microsoft Copilot and Claude, see who owns them, what apps they access, and classify their status - all from a single inventory.

AI agents are rapidly gaining access to business apps and sensitive data - without clear ownership, visibility, or governance. Josys brings every AI agent into your identity governance framework, so teams can see them, manage them, and continuously review access.
Explore Shadow AI Report
Josys extends its identity governance platform to treat AI agents as non-human identities. The same control plane you use for users, apps, and access now covers agentic workflows.
Automatically inventory AI agents built on Copilot or Claude with full activity visibility.
Establish ownership and classify agents as Authorized, Unauthorized, or Unclassified.
Review app access, permissions, and exposure to govern every agent.
A dedicated AI Agents inventory under Identities - view ownership, source, access, permissions, status, and activity in one table.


Four summary cards at the top of the page surface what matters immediately: Total AI Agents, Agents with Privileged Access, Agents without Owners, and Shadow Agents.
Filter agents by status, owner, source, or name to quickly identify and prioritize high-risk AI agents.


Click into any agent to see its full access footprint: which applications it connects to, what permission levels it holds, and the scope of its reach across your environment.
Microsoft Copilot & Claude are the current supported sources. More are to follow.
No. Existing Microsoft directory integrations (Entra ID) do not provide Copilot agent listing access. Copilot discovery uses a different Microsoft identity path and requires a separate, one-time Power Platform setup. Josys provides guided assistance for this configuration.
Agent name, owner (if assigned), source platform, accessed applications, authorization status, creation date, permissions, and activity context.
App accounts are tied to human users. AI agents are autonomous, non-human identities that can access multiple applications and execute workflows independently - often without a clear owner or review trail.
A shadow agent is an AI agent in your environment that has not been formally registered, approved, or assigned an owner by IT. It may have been created by individual users or teams without central oversight.
Yes. Access review workflows for agent owners and app owners are on the governance roadmap. Discovery is the foundation - review and remediation capabilities will follow.