--- title: "AI Footprint Calculator: Estimate the AI Agents and MCPs on Your Fleet | Anomity" description: "Estimate how many AI agents, MCP servers, skills, browser extensions, personal AI accounts and AI OAuth grants your fleet holds, and which of them EDR, MDM, CASB and DLP cannot see." url: "https://anomity.ai/tools/ai-footprint-calculator/" source: html --- - Home - AI Footprint Calculator Calculator # AI Footprint Calculator A two-minute estimate of the AI tools, MCP servers, skills, extensions, personal AI accounts and OAuth grants running across your company, and how much of it your current controls can see. Employees Share who write code 25% Sanctioned AI coding tools Claude Code Cursor GitHub Copilot Codex Gemini CLI Windsurf Sanctioned enterprise AI services ChatGPT Enterprise Claude Enterprise Gemini for Workspace Microsoft 365 Copilot Can employees connect third-party apps to Google Workspace or GitHub? Yes, anyone can Admin approval only Not sure Controls you run today MDM EDR / XDR SWG / CASB DLP Estimated AI footprint 2,034 AI tools, MCP servers, skills, hooks, extensions and OAuth grants across your fleet. **1,666** of them were never reviewed by anyone, and your current controls do not see **8 of 11** AI surfaces at all. ### Endpoint Sensor - AI tools, agents and desktop apps 788 - of which unsanctioned 420 - MCP servers 349 - Skills and plugins 233 - Agent hooks 39 - Local LLM runtimes 25 - Plaintext secrets in AI configs 87 ### Browser Sensor - AI web services in use 53 - of which not sanctioned 52 - Employees on personal AI accounts 510 - Employees who have entered sensitive data 427 - GenAI browser extensions 200 ### Cloud discovery - OAuth grants held by AI apps Google Workspace and GitHub 400 ### What your current controls see Typical coverage for each category of control, not a claim about any one product. AI surface Your controls Anomity AI CLIs, agents and desktop apps EDR and MDM see the binary or app; neither reads its configuration. Partial Seen MCP servers and what they can reach An MCP server is a legitimate process doing what its config allows, so EDR sees nothing wrong. Not seen Seen Skills, plugins and IDE extensions They live as files inside each tool's own config directory. Not seen Seen Agent permissions and hooks Allow and deny rules sit in per-user settings files. Not seen Seen Plaintext secrets in AI configs DLP sees a secret only if it leaves the machine, not where it sits. Not seen Seen Local LLM runtimes The process is visible; which models it serves and to whom is not. Partial Seen AI web services in use Web proxies see the domain. Not seen Seen Personal vs corporate AI accounts Needs TLS inspection or tenant restrictions per vendor. Not seen Seen Secrets and PII pasted or typed into AI Paste and upload are often covered; typed text usually is not. Not seen Seen AI browser extensions Browser management can list extensions, but not rate what they can read. Partial Seen OAuth grants held by AI apps Grants live in Google Workspace and GitHub, not on the network or the device. Not seen Seen [Get a demo](https://anomity.ai/#early-access) Copy share link ## Email me this estimate We'll send the numbers and show you how to replace the estimate with your real inventory. No spam. Full Name Work Email Company Phone Your Role Select your role CISO / VP Security Security Engineer IT Admin DevOps / Platform Engineering Lead Other Email me this estimate Thanks. We'll be in touch shortly with your estimate. ## How we calculate The estimate multiplies your headcount and developer share by published adoption rates where they exist, and by our own stated assumptions where they do not. Every input to the model is in the table below, with its source. Where a row says Assumption, no primary source we trust measures it yet. Developers drive most of the endpoint footprint: AI CLIs, IDE extensions, MCP servers, skills and hooks are configured per developer. Browser numbers scale with everyone who uses AI at work. OAuth grants scale with headcount and drop sharply when only admins can approve third-party apps. Unsanctioned tools are the AI tools outside the ones you ticked. MCP servers, skills, hooks, extensions and OAuth grants count as unreviewed, because none of these inputs is an allowlist for them. The coverage table reflects what each category of control is built to observe, not any one vendor's product. It is an estimate. Your real inventory will differ, which is the point of measuring it: the Endpoint Sensor, Browser Sensor and cloud discovery replace every number on this page with what is actually there, usually on the first day of a deployment. Input to the model Value Source Developers who use or plan to use AI tools 84% [Stack Overflow Developer Survey 2025](https://survey.stackoverflow.co/2025/) Developers already using AI agents 31% [Stack Overflow Developer Survey 2025](https://survey.stackoverflow.co/2025/) Distinct AI tools per AI-using developer (CLI, IDE extension, desktop app) 2.5 Assumption MCP servers configured per agent user (survey: most run 2 to 7) 4.5 [Zuplo State of MCP report, via Nordic APIs (2026)](https://nordicapis.com/10-interesting-mcp-statistics/) Skills and plugins installed per agent user 3 Assumption Agent hooks configured per agent user 0.5 Assumption Developers running a local LLM runtime (Ollama, LM Studio) 10% Assumption MCP servers configured with a credential written into the config file 25% Assumption GitGuardian found 24,008 unique secrets in public MCP config files in their first year. [GitGuardian State of Secrets Sprawl 2026](https://www.cybersecuritydive.com/press-release/20260317-ai-is-fueling-secrets-sprawl-gitguardian-reports-an-81-surge-of-ai-servic/) Non-developers with an AI desktop app installed 35% Assumption Employees who use AI assistants at work 75% Assumption AI users who reach AI assistants through personal accounts 68% [TELUS Digital survey of enterprise employees (2025)](https://www.silicon.co.uk/press-release/telus-digital-survey-reveals-enterprise-employees-are-entering-sensitive-data-into-ai-assistants-more-than-you-think) AI users who admit entering sensitive information 57% [TELUS Digital survey of enterprise employees (2025)](https://www.silicon.co.uk/press-release/telus-digital-survey-reveals-enterprise-employees-are-entering-sensitive-data-into-ai-assistants-more-than-you-think) Employees with a GenAI browser extension installed 20% [LayerX Enterprise Browser Extension Security Report 2025, via The Hacker News](https://thehackernews.com/2025/04/majority-of-browser-extensions-can.html) Distinct AI web services in use, per doubling of headcount beyond 10 8 Assumption OAuth grants held by AI apps per employee, where self-consent is allowed 0.4 Assumption Material Security counted a median of 1,760 OAuth grants per company, and 91% of the AI and automation apps had appeared in the previous 16 months. [Material Security OAuth & Google Workspace Risk Report (2026)](https://material.security/oauth-risk-report) Share of developer AI use covered by each sanctioned coding tool (floor 30% unsanctioned) 20% Assumption ## Frequently asked questions How accurate is the AI footprint estimate? It is an order-of-magnitude estimate built from public survey data and stated assumptions, listed with sources under How we calculate. It is meant to size the problem, not to replace an inventory. Deploying the Endpoint Sensor and Browser Sensor replaces it with the real count. Why can't EDR or MDM see MCP servers? An MCP server is a legitimate process doing exactly what its configuration allows. EDR watches processes and binaries, and MDM inventories installed applications; neither reads the per-user JSON and TOML files where MCP servers, permissions, skills and hooks are declared. What counts as an unreviewed AI artifact? Any AI tool outside the ones you marked as sanctioned, plus every MCP server, skill, plugin, hook, GenAI browser extension and AI OAuth grant, since none of these is covered by an allowlist in the calculator's inputs. Is any data I enter stored? No. The calculation runs in your browser and your inputs stay in the page address so you can share the result. Nothing is sent anywhere unless you fill in the form to email yourself the estimate. How do I get my real numbers? Get a demo. Anomity's Endpoint Sensor deploys through the MDM you already run, the Browser Sensor through browser policy, and cloud discovery connects to Google Workspace and GitHub, so the first inventory usually lands within a day. ## Structured data ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://anomity.ai/" }, { "@type": "ListItem", "position": 2, "name": "AI Footprint Calculator", "item": "https://anomity.ai/tools/ai-footprint-calculator/" } ] } ``` ```json { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "How accurate is the AI footprint estimate?", "acceptedAnswer": { "@type": "Answer", "text": "It is an order-of-magnitude estimate built from public survey data and stated assumptions, listed with sources under How we calculate. It is meant to size the problem, not to replace an inventory. Deploying the Endpoint Sensor and Browser Sensor replaces it with the real count." } }, { "@type": "Question", "name": "Why can't EDR or MDM see MCP servers?", "acceptedAnswer": { "@type": "Answer", "text": "An MCP server is a legitimate process doing exactly what its configuration allows. EDR watches processes and binaries, and MDM inventories installed applications; neither reads the per-user JSON and TOML files where MCP servers, permissions, skills and hooks are declared." } }, { "@type": "Question", "name": "What counts as an unreviewed AI artifact?", "acceptedAnswer": { "@type": "Answer", "text": "Any AI tool outside the ones you marked as sanctioned, plus every MCP server, skill, plugin, hook, GenAI browser extension and AI OAuth grant, since none of these is covered by an allowlist in the calculator's inputs." } }, { "@type": "Question", "name": "Is any data I enter stored?", "acceptedAnswer": { "@type": "Answer", "text": "No. The calculation runs in your browser and your inputs stay in the page address so you can share the result. Nothing is sent anywhere unless you fill in the form to email yourself the estimate." } }, { "@type": "Question", "name": "How do I get my real numbers?", "acceptedAnswer": { "@type": "Answer", "text": "Get a demo. Anomity's Endpoint Sensor deploys through the MDM you already run, the Browser Sensor through browser policy, and cloud discovery connects to Google Workspace and GitHub, so the first inventory usually lands within a day." } } ] } ```