Platform · Know

Know first.
Say no only
when it matters.

Backplanes shows your security team every agent, tool, server and destination in use, and the few that need a decision. Nothing slows down, and nothing is blocked until you say so.

Claude Code, Codex and Cursor · SDK for the rest · No agent changes

Org reportthis week · 38 people
  • 1,240sessions
  • 12MCP servers
  • 31tools
  • 47destinations
  • Sanctioned86%
  • Unreviewed11%
  • Worth a look3%

Three need a decision. Everything else was fine.

Why this comes first

Saying no to every request is not control. It is what a team does when it cannot see. Backplanes puts the picture in front of you first, so yes becomes the default and no becomes specific.

What you know on day one

Every agent, tool, server and destination in use.

One install and the org report fills in: who reaches what, how often, and what appeared this week. No agent changes and no new instrumentation.

External access

90-day observed window · generated now · organization-wide

External domains
47
MCP servers
12
MCP tools
31
Skills
9
Needs review
3
All 99MCP servers 12MCP tools 31Skills 9Plugins 4External domains 47Needs review 3Blocked 1
ResourceKindStatusSessionsCallsReached byLast
github.comdomain · git + api.github.comDomainSanctioned412,890team12m
web-searchmcp_server:web-searchMCP serverSanctioned221,2046 engineers1h
api.stripe.comdomain · paymentsDomainSanctioned14312alex, maya2h
api.example-vendor.comdomain · not on allowlistDomainNeeds review347maya2d
filesystemmcp_server:filesystemMCP serverSanctioned186425 engineers3h
pdf-exportskill:pdf-exportSkillSanctioned753alex1d
browser_navigatemcp_tool:playwright/browser_navigateMCP toolUnreviewed18260maya4h
unknown-cdn.iodomain · first seen this weekDomainBlocked12sam3d

The few that matter

The three things that need a decision.

Backplanes reads how your agents actually work and surfaces what is new, spreading, or unapproved. Everything else stays quiet.

This week1,240 sessions
  • file-transfer.externalMCP servernew this week · 2 people
  • bulk-exportSkillspreading · now on 6 machines
  • paste.example.netDomainfirst seen · 1 session

Three need a decision. Everything else was fine.

Nobody slows down

Your engineers keep moving.

Sessions capture themselves when they end, redacted before anything leaves the laptop. A new server is noted, not stopped, until you decide otherwise.

agent session

› resolving MCP servers for this session

~/checkout-api $ mcp: connect file-transfer.external

new server · noted by Backplanes, nothing changed

› connected · 2 tools available

~/checkout-api $ run the failing test and fix it

~/checkout-api $

Before you enforce

Watch what a control would do, before it does anything.

Every drafted rule is replayed against your real sessions. You know what enforcing it would change before a single agent’s behavior does.

Proposeddrafted from last week

Warn on bulk-export

Skill · first seen 4 days ago · now on 6 machines

If this had been live for the last 30 days

14 sessions warned · 6 people · nothing blocked

Still a draft. Nothing enforces until you publish it.

When it matters

Enforce when you are ready, and not before.

The first controls are drafted from what you already know. Approve one, run it in monitor first, or leave it. Nothing enforces until you say so.

Proposed controlDraft

Backplanes proposes

block: file-transfer.external
WhyDrafted from this week. An MCP server nobody has approved was reached by 2 people.
If liveLast 30 days: 3 sessions blocked. Nothing else affected.
DecisionApprove as rev 5Monitor first
Tell me what I don’t know. Because right now, nobody knows. There’s no visibility.

Former CISO · Enterprise Healthcare

When you are ready

When you do enforce, it is one policy across every form of agent activity, drafted from this picture, rather than five policies in five consoles. That is the next stage, and it starts from here.

Next

Start by knowing.

The fastest way to judge this is to look at what Backplanes knows about your organization after one install.