> ## Documentation Index
> Fetch the complete documentation index at: https://docs.originhq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Install the Origin Agent on a macOS Endpoint

> Install the Origin agent on macOS in five minutes: run the .pkg, approve system extensions, and confirm your endpoint in the Origin dashboard.

This guide walks you through installing the Origin agent on a macOS endpoint. The whole process takes a few minutes and ends with the agent registered, collecting AI event data, and your endpoint visible in the Origin dashboard.

<Note>
  **Before you start, make sure you have:**

  * A macOS host (macOS 15 Sequoia or later) that you can sign in to as an **admin**.
  * The Origin agent **`.pkg` installer** — download from the console under **Settings → Installers**.
  * A **provisioning token** — create one under **Settings → Provisioning Tokens**.

  These are two separate views in Settings. Tokens carry an expiry and a use limit, so confirm the one you're using is still valid. See [Provisioning Tokens](/getting-started/provisioning-tokens).
</Note>

## Installation steps

<Steps>
  <Step title="Launch the installer">
    Double-click the `.pkg` you downloaded. macOS opens the standard Installer app.

    Click **Continue**.
  </Step>

  <Step title="Confirm the install location">
    The installer shows the disk it will install to (typically *Macintosh HD*) and the approximate disk-space footprint.

    Click **Install**.
  </Step>

  <Step title="Authenticate to install">
    macOS prompts for your admin password to allow the installer to write to system locations.

    Enter your password and click **Install Software**.
  </Step>

  <Step title="Paste the registration token">
    After the package extracts, the **Origin Agent Registration** dialog appears. Paste the provisioning token you copied from the console.

    <Warning>
      **`⌘ + V` does not work in this field.** Use **right-click → Paste** instead. The field intentionally blocks the keyboard shortcut to prevent accidental clipboard injection.
    </Warning>

    Click **Register**.
  </Step>

  <Step title="Allow the installer to control System Events">
    The installer needs to drive **System Events** to finish wiring the agent into the OS.

    Click **Allow** when macOS asks for permission.
  </Step>

  <Step title="Grant Full Disk Access">
    The agent prompts you to grant **Full Disk Access** so it can read application logs and detect AI tooling installed in user-scoped locations.

    Click **OK**. macOS opens **System Settings → Privacy & Security → Full Disk Access**.

    1. Click the **+** button at the bottom of the list.
    2. Navigate to `/Applications` and select **Origin.app**.
    3. Click **Open**, then toggle the row on.

    The agent starts automatically as soon as the toggle flips on.
  </Step>

  <Step title="Confirm background activity">
    macOS posts a notification confirming the agent is allowed to run in the background.

    You're done. The agent is now reporting in. Open the Origin console — your host should appear under **Settings → Endpoint Inventory** within a minute.
  </Step>
</Steps>

<Note>
  Origin collects AI event data at the application layer, through each AI tool's OpenTelemetry exporter and through application-level hooks. There is no proxy to approve and no certificate to trust, so the install involves no network-extension or certificate-trust prompts.

  For fleet deployments, a single privacy-preferences (PPPC) profile pushed by MDM pre-approves Full Disk Access and removes the prompt in step 6 entirely — see [MDM Overview](/getting-started/mdm-overview).
</Note>

## Verify the install

Open the **Origin** menu-bar icon. A **green dot** means the agent is healthy and collecting AI activity. You can also run the built-in health check (Diagnostic Report) directly from the menu-bar menu.

If the host doesn't appear in the console within a couple of minutes, consult the log locations below.

For a full end-to-end verification workflow — including service checks and test prompts — see [Verify Installation](/getting-started/verifying-installation).

## Log locations

| Log                    | Path                                    |
| ---------------------- | --------------------------------------- |
| Install & Registration | `/Library/Origin/logs/origin-setup.log` |
| macOS Install Log      | `/var/log/install.log`                  |
| Agent Runtime          | `/Library/Origin/logs/origin-agent.log` |

## Menu bar icon

The Origin menu-bar icon gives you at-a-glance health status (green / yellow / red), a shortcut to run a full Diagnostic Report, and quick access to the agent log folder — all without opening a terminal.