Glossary
A managed macOS or Windows device where the Origin agent is installed and actively reporting. Each endpoint appears in the Registered Endpoints view with its own telemetry status, agent version, and activity history. One physical or virtual machine corresponds to one endpoint record in your tenant.
The lightweight background service installed on each endpoint that collects and reports AI inventory and event data. The agent collects AI event data using Otel, application hooks and other methods before streaming that data to your Origin tenant. It applies fleet-wide configuration settings pushed from the console on each heartbeat cycle.
An AI tool or API that the Origin agent observes — for example, Claude desktop, Claude CoWork, ChatGPT Desktop, Codex, Gemini CLI or GitHub Copilot. Origin ships with built-in detection rules for the most common AI agents and providers.
A single, discrete conversation or interaction between a user and an AI provider. A session groups together all of the prompts and responses that belong to one continuous exchange. Sessions are the primary unit you navigate when investigating activity on a specific endpoint.
An individual request sent by a user to an AI model, along with the model’s response. Prompts are the lowest-level unit of AI activity that Origin captures. Each prompt is timestamped, attributed to a user and endpoint, and associated with the session it belongs to.
A semantically grouped set of AI prompts that Origin has automatically identified as belonging to the same topic or work pattern. Clusters are named automatically based on the content of the prompts they contain. They help you understand what AI is being used for across your fleet without reading every individual prompt.
A signed JSON Web Token that authorizes an Origin agent installation to register with your specific tenant. You generate provisioning tokens from the Settings panel and supply them during agent installation — either interactively or silently via an MDM deployment script. Treat a provisioning token like a password: rotate it if it is compromised and do not commit it to source control.
Your organization’s isolated Origin account. All endpoints, users, sessions, configuration settings, and telemetry data in your deployment belong to a single tenant. Users from outside your tenant cannot access your data, and your tenant’s configuration does not affect any other organization.
Folders of instructions, scripts, and resources that an AI assistant loads dynamically to improve its performance on specialized tasks. Skills teach an AI how to complete specific workflows in a repeatable, consistent way — whether that’s following company brand guidelines, executing a standard analysis routine, or automating a recurring task. Skills can be created by individual users, provisioned by an organization, or sourced from third-party providers.Origin inventories all skills present on Origin-managed endpoints, giving administrators visibility into which skills are installed across the fleet, their versions, and how frequently they’re being used. Administrators can also deploy approved skills to managed devices directly from the Origin console, ensuring teams use standardized, vetted capabilities.
The underlying data model that powers both the Origin dashboards and the natural-language chat interface. The analytics graph connects endpoints, users, sessions, prompts, and clusters into a unified, queryable structure. When you ask Origin a question in the chat interface, it queries the analytics graph to generate its answer.