AI tools supported by Defender
Find the AI providers and surfaces Cortex Defender supports on macOS, Windows, and headless Linux.
This catalog covers Defender capture, not Egress Gateway client compatibility. The endpoint app supports macOS and Windows; headless Linux supports selected CLI agents on Debian 13 or newer, Fedora and Amazon Linux 2023.
Providers, surfaces, and platforms
Filter by provider, platform and surface. Each result names its setup path. For GitHub, Jira, Slack and other workplace sources, use Workplace connections.
37 supported entries
Claude Web
Claude Code
Claude Desktop
Local MCP
ChatGPT Web
Codex
Codex in ChatGPT
ChatGPT Desktop built-in Codex
Local MCP through Codex
Gemini Web
Gemini CLI
Grok Web
Grok in X
Grok Build
Perplexity Computer
Microsoft Copilot for work
Cursor Web
Cursor CLI
Cursor IDE local-history import
OpenCode CLI
OpenClaw CLI
Pi CLI
Claude models
GPT and o-series
Gemini models
Grok models
Llama models
Mistral models
DeepSeek models
Qwen models
Kimi models
Sonar models
Fireworks models
Local open models
Amazon Bedrock
Vertex AI
Azure OpenAI
Setup guides
- Set up browser sync for Chrome on macOS, Chrome on Windows or Safari on macOS. Device policy must permit routing and certificate trust.
- Connect a command-line app on macOS/Windows, or use the headless Linux guide.
- Connect a desktop app on macOS/Windows. ChatGPT Desktop support covers built-in Codex sessions, not generic desktop chat.
- Connect Cursor IDE. Cursor IDE imports completed conversations from its local database on macOS/Windows, rather than routing live IDE traffic. Linux supports live Cursor CLI capture instead.
- Local MCP: Configure this path with your Cortex team, then restart the app.
Test each source
On macOS/Windows, follow Verify capture and sync for each configured source. On Linux, follow Verify local capture and Verify managed upload.
A working app or provider response does not establish capture or Atlas delivery. For missing activity, use Troubleshoot Cortex Defender.