Setup & Installation

Prerequisites

Both of the following must be in place before AI Agent Security can function:

1. Nightfall endpoint agent v1.2.12.11+ installed and running on the endpoint; The agent auto-installs and keeps nightfall-hook-relay updated, and adds it to the system PATH. The hooks call the binary by name, so without the agent the hooks resolve to nothing.

2. MDM configuration profile v3+ deployed via your MDM provider (Jamf, Mosyle, Kandji, etc.)

3. MDM scope selected - the device group / Blueprint / Smart Group / assignment that will receive the deployment.

4. Claude Code is reasonably current on managed devices.

5. You have the three pieces from this package: the payload (payloads/nightfall-hooks.json) and the scripts for your platform (scripts/macos/ or scripts/windows/).

If the MDM profile has not been deployed, the agent will show a missing permissions error and you will not see any local or remote MCP servers across installed devices.