Quickstart

Make an install package, enrol one Mac through your MDM, and watch the machine and its first agent session appear before you roll out.

By the end of this page one Mac is enrolled, listed under Data Sources, with its first agent session under Sessions, and you know what to check before enrolling the fleet. You need the Admin or Owner role in the dashboard, an MDM that can push profiles and a package, and an Apple Silicon Mac on macOS 14 or later; see Platform support.

1. Make an install package

   Open Add machines from Settings › Machines & licensing or Data Sources. Choose Mac, then A device management tool (MDM), then your MDM, name the package, and click Make my files. Download the files: two profiles and the Mac installer. They can be downloaded once. See Add machines.

2. Enrol the Mac

   Follow Install on a Mac: assign both profiles to the Mac, confirm they landed, then assign the installer. With the profiles in place, the extensions activate without a prompt and the Mac joins your organisation.

3. Find the machine under Data Sources

   Open Data Sources. Within a few minutes the Mac appears in Telemetry by host with its Capture layers and Last seen. Until then the table says “No hosts enrolled yet.”

4. Check which agents are covered

   Open the host’s row. Agents on this host lists each coding agent found on the Mac. An agent that is not listed is not recorded. Supported agents explains the depth of coverage for each.

5. Start an agent and watch the first session

   On the Mac, start a covered agent such as Claude Code and let it run one tool call. Then open Sessions, which lists “Sessions in the last 24 hours · newest first · root sessions only”. Open the row for its activity timeline.

​

An empty dashboard is not an all-clear

Right after install, Live Activity shows “No events captured yet.” Its own explanation: “This view shows real scored actions from OS-level capture. Rows appear as soon as an agent runs a tool call on an instrumented host. An empty view means nothing has been captured — not that nothing happened.” If the machine is listed but nothing arrives, check Agents on this host before concluding that no agent ran.

​

Before you roll out to the fleet

• Agents: every agent you expect to record is listed on the host page. Anything missing here stays unrecorded across the fleet.
• Capture layers: the host’s Capture layers column shows which of the four (Endpoint Security, Proxy (MITM), Network Extension, OpenTelemetry) are live. A layer missing here is missing everywhere.
• The notice: the people whose machines you enrol have read what Quint records.

Then continue to Roll out with MDM.

​

If this fails

What you see	What it means	What to do
The machine is not under Data Sources after a few minutes	The profiles did not land first, or the package is not Active	Check System Settings › General › Device Management (on macOS 14, Privacy & Security › Profiles) on the Mac, and the package in Machines & licensing.
The host is Degraded	Not every capture layer is live	See Verify a machine.
An agent is missing from Agents on this host	Not yet wired, or no adapter for it	Wait for the next check-in, then see Supported agents.

​

Next

• Roll out with MDM
• Sessions and activity