What happened
In the same Nov 5, 2026 update, Microsoft Defender made generally available its discovery of more than 50 supported local AI agents and their configured Model Context Protocol (MCP) servers across Windows and macOS, correlating the agent, device, account and MCP context.
Why it matters
It gives defenders agentic inventory and MCP tool-connection visibility on endpoints in the Defender console — the baseline needed to govern local agents and their tool access, extending Defender's agent security beyond a single product.
Applicability
Microsoft Defender / M365 E5 shops should enable local AI-agent discovery to inventory agent usage and MCP connections on end-user devices.