Skip to content
CortexDocs

AI tools supported by Defender

Find the AI providers and surfaces Cortex Defender supports on macOS, Windows, and headless Linux.

This catalog covers Defender capture, not Egress Gateway client compatibility. The endpoint app supports macOS and Windows; headless Linux supports selected CLI agents on Debian 13 or newer, Fedora and Amazon Linux 2023.

Providers, surfaces, and platforms

Filter by provider, platform and surface. Each result names its setup path. For GitHub, Jira, Slack and other workplace sources, use Workplace connections.

Provider
Platform
Surface

37 supported entries

Anthropic

Claude Web

ApplicationWebmacOSWindows
Set up inHome / Add connection
Anthropic

Claude Code

ApplicationCLImacOSWindowsLinux
Set up inHome / Add connection / Headless CLI
Anthropic

Claude Desktop

ApplicationDesktopmacOS
Set up inHome / Add connection
Anthropic

Local MCP

ApplicationMCPmacOSWindows
Set up inManaged setup
OpenAI

ChatGPT Web

ApplicationWebmacOSWindows
Set up inHome / Add connection
OpenAI

Codex

ApplicationCLImacOSWindowsLinux
Set up inHome / Add connection / Headless CLI
OpenAI

Codex in ChatGPT

ApplicationCLImacOSWindows
Set up inHome / Add connection
OpenAI

ChatGPT Desktop built-in Codex

ApplicationDesktopmacOSWindows
Set up inHome / Add connection
OpenAI

Local MCP through Codex

ApplicationMCPmacOSWindows
Set up inManaged setup
Google

Gemini Web

ApplicationWebmacOSWindows
Set up inHome / Add connection
Google

Gemini CLI

ApplicationCLImacOSWindowsLinux
Set up inHome / Add connection / Headless CLI
xAI

Grok Web

ApplicationWebmacOSWindows
Set up inHome / Add connection
xAI

Grok in X

ApplicationWebmacOSWindows
Set up inHome / Add connection
xAI

Grok Build

ApplicationCLImacOSLinux
Set up inHome / Add connection / Headless CLI
Perplexity

Perplexity Computer

ApplicationWebmacOSWindows
Set up inHome / Add connection
Microsoft

Microsoft Copilot for work

ApplicationWebmacOSWindows
Set up inHome / Add connection
Cursor

Cursor Web

ApplicationWebmacOSWindows
Set up inHome / Add connection
Cursor

Cursor CLI

ApplicationCLImacOSWindowsLinux
Set up inHome / Add connection / Headless CLI
Cursor

Cursor IDE local-history import

ApplicationIDE historymacOSWindows
Set up inHome / Add connection
OpenCode

OpenCode CLI

ApplicationCLImacOSWindowsLinux
Set up inHome / Add connection / Headless CLI
OpenClaw

OpenClaw CLI

ApplicationCLILinux
Set up inHeadless CLI
Pi

Pi CLI

ApplicationCLImacOSLinux
Set up inHome / Add connection / Headless CLI
Anthropic

Claude models

Model providerAPIManaged gateway
Set up inModel providers
OpenAI

GPT and o-series

Model providerAPIManaged gateway
Set up inModel providers
Google

Gemini models

Model providerAPIManaged gateway
Set up inModel providers
xAI

Grok models

Model providerAPIManaged gateway
Set up inModel providers
Meta

Llama models

Model providerAPIManaged gateway
Set up inModel providers
Mistral AI

Mistral models

Model providerAPIManaged gateway
Set up inModel providers
DeepSeek

DeepSeek models

Model providerAPIManaged gateway
Set up inModel providers
Alibaba Cloud

Qwen models

Model providerAPIManaged gateway
Set up inModel providers
Moonshot AI

Kimi models

Model providerAPIManaged gateway
Set up inModel providers
Perplexity

Sonar models

Model providerAPIManaged gateway
Set up inModel providers
Fireworks AI

Fireworks models

Model providerAPIManaged gateway
Set up inModel providers
Ollama

Local open models

Model providerAPIManaged gateway
Set up inModel providers
Amazon Web Services

Amazon Bedrock

Cloud AIAPICloud managed
Set up inModel providers
Google Cloud

Vertex AI

Cloud AIAPICloud managed
Set up inModel providers
Microsoft Azure

Azure OpenAI

Cloud AIAPICloud managed
Set up inModel providers

Setup guides

  • Set up browser sync for Chrome on macOS, Chrome on Windows or Safari on macOS. Device policy must permit routing and certificate trust.
  • Connect a command-line app on macOS/Windows, or use the headless Linux guide.
  • Connect a desktop app on macOS/Windows. ChatGPT Desktop support covers built-in Codex sessions, not generic desktop chat.
  • Connect Cursor IDE. Cursor IDE imports completed conversations from its local database on macOS/Windows, rather than routing live IDE traffic. Linux supports live Cursor CLI capture instead.
  • Local MCP: Configure this path with your Cortex team, then restart the app.

Test each source

On macOS/Windows, follow Verify capture and sync for each configured source. On Linux, follow Verify local capture and Verify managed upload.

A working app or provider response does not establish capture or Atlas delivery. For missing activity, use Troubleshoot Cortex Defender.