Speakeasy

What is Speakeasy

Speakeasy is the enterprise AI control plane.

Distribute the Speakeasy Device Agent through Jamf to govern every AI agent running on managed devices. Speakeasy authenticates each agent through your identity provider and enforces your security policies on every agentic action, with a full audit trail.

Detect shadow AI, prevent AI-related data leaks, and centralize AI skills, budgets, and MCP servers across every AI tool.

Why it exists

Security and identity platforms weren't built for AI. Employees are connecting AI tools, on both enterprise and personal accounts, to company systems through MCP servers. Speakeasy puts guardrails on agent actions so employees can keep using the most powerful tools without putting the organization at risk. The Device Agent is the on-device half of that: it keeps the organization's mandated configuration in place on every AI tool, re-applies it every 60 seconds, and reports coverage back to Speakeasy.

How it works with Jamf Pro

1.  Upload the signed, notarized universal .pkg as a Package and scope it to your fleet. It installs the daemon, CLI, menu bar app, and helper with no script.

2.  Deliver the org's settings with a Configuration Profile (Application & Custom Settings, domain com.speakeasy.agent). Use $EMAIL so one profile enrolls every Mac with zero user interaction.

3.  Push once. Built-in signed auto-update keeps the agent current.

4.  Connect your Jamf Cloud tenant in Speakeasy (API role with Read Computers only) to sync inventory hourly and see every managed Mac as Agent active, Agent stale, No agent, or No email in MDM. Optionally export that coverage to Drata or Vanta as compliance evidence.