Skip to content
Copy
View as Markdown Suggest changes
Add Docs MCP
Setup guide

Topology

What this is

Topology draws how the AI components inside your applications connect: agents, the LLMs they
call, MCP servers and tools, APIs and data stores. It is built from the traffic the scanner
records.

For "who talks to whom across applications, and where does personal data go", use
Traffic → Flow. For the list of components and their governance, use
Registry.

What is on the screen

What you see depends on the application dropdown next to the page title.

All applications

  • Graph / Cards — Graph draws one node per application; Cards shows one summary
    card per application. A counter shows how many applications there are.
  • In Graph, click an application to see its components drawn in named layers, from
    Interface first to Infrastructure last.

One application

  • A flow tree of that application's components: what calls what, left to right.
  • Show N dependencies / Hide dependencies — adds or removes the application's software
    dependencies from the tree.

Detail panel

With nothing selected, the panel shows the Pipeline overview for the application: Total
agents, Critical and Warning counts, Pipeline Stats (Pipelines, Total RPM,

Daily cost, PII flows) and Infrastructure (Nodes). Add custom pipeline is shown
but not available yet.

Click a node for its details. A node that is not yet approved shows its Governance state
(Tolerated or Unsanctioned) and two buttons:

  • Promote to Inventory — approves it; it then appears in Registry as
    Sanctioned.
  • Block Access — blocks the application from reaching it.

Click empty canvas to return to the overview.

When this page is empty

No topology yet means the scanner has not recorded traffic for these applications. The first
nodes appear within about a minute of the scanner starting on an opted-in namespace. If it stays
empty, check Settings → Scanners (see Getting started). On a macOS
endpoint workspace, nodes appear once the device reports.

How to use it

See how one application is wired

  1. Pick the application in the application dropdown.

  2. Read the tree left to right. Click a node for details.

  3. Click Show N dependencies to add its packages.

Compare applications

  1. Choose All applications.

  2. Use Graph to see them side by side, or Cards for their summaries.

  3. In Graph, click an application to see its components by layer.

Approve or block an unknown component

  1. Click the node.

  2. Click Promote to Inventory if it belongs, or Block Access if it does not.

Where to go next

  • Registry — the same components as a list, with governance.
  • Traffic → Flow — traffic between applications and personal data leaving the network.
  • Infrastructure — the clusters and nodes these applications run on.

How you get here

  • Sidebar → Discover → Topology.