Every command your AI agents execute is logged locally with the decision, matched rule, and calling agent. Your security team sees exactly what happened, when, and why.
❯ cat ~/.truvant/signals/policy-decisions/policy-decisions.jsonl | jq -c '.'
// 14:30 — Claude clones a repo → allowed by git whitelist
{"timestamp":"2026-02-02T14:30:15Z", "decision":"allowed", "binary":"git",
"args":["clone","https://github.com/company/repo.git"],
"matched_rule":{"type":"whitelist","pattern":"git"},
"context":{"user":"alice", "agent":"claude", "working_dir":"/Users/alice/projects"}}
// 14:35 — Claude installs a package → default allow
{"timestamp":"2026-02-02T14:35:42Z", "decision":"allowed", "binary":"npm",
"args":["install","express"],
"matched_rule":{"type":"default_allow"},
"context":{"user":"alice", "agent":"claude", "working_dir":"/Users/alice/projects/myapp"}}
// 14:42 — Claude tries force push → BLOCKED by deny pattern
{"timestamp":"2026-02-02T14:42:11Z", "decision":"blocked", "binary":"git",
"args":["push","--force","origin","main"],
"matched_rule":{"type":"deny_pattern","pattern":"push.*--force"},
"context":{"user":"alice", "agent":"claude", "working_dir":"/Users/alice/projects/myapp"}}
// 15:10 — Cursor tries privileged Docker container → BLOCKED
{"timestamp":"2026-02-02T15:10:33Z", "decision":"blocked", "binary":"docker",
"args":["run","--privileged","alpine"],
"matched_rule":{"type":"deny_pattern","pattern":"--privileged"},
"context":{"user":"bob", "agent":"cursor", "working_dir":"/home/bob/infra"}}
❯ mcpctl agent signals
Recent signals (3):
TIMESTAMP SERVER SCORE SEVERITY SOURCE
2026-02-02 15:30 suspicious-mcp 35 critical npm:@untrusted/mcp-pkg@1.2.3
2026-02-02 14:15 risky-plugin 48 high npm:@unknown/claude-plugin@0.3.1
2026-02-01 22:45 legacy-db-server 62 medium git:github.com/intern/db-mcp@main
Signal directory: /Users/mike/.truvant/signals
Signal files are consumed by SIEM (Microsoft Defender for Endpoint)
Audit logs rotate automatically (5 MB / 7 days). Signal files are consumed by SIEM (Microsoft Defender for Endpoint).
