See the AI agents and AI apps in your Microsoft 365 tenant.
Sign in as an admin. This page reads your Entra directory and shows how many agent identities exist, which AI apps people have granted access to, and how many of them handed over mailbox or file access.
This copy of the page has no app registration configured, so sign-in is turned off. The sample report still works.
Read-only
The page asks Microsoft for three read permissions:
Application.Read.Allapp registrations and enterprise appsDelegatedPermissionGrant.Read.Allwhich apps people consented to, with what scopesAgentIdentity.Read.AllEntra Agent ID identities
It can't change, create or delete anything in your tenant.
Approve it for yourself only
On Microsoft's consent screen, leave Consent on behalf of your organization unchecked. When you're done, delete Barndoor AI Exposure Check from Enterprise applications. That removes the app and your consent.
Prefer a script?
Paste this script into Azure Cloud Shell. It runs the same reads with your own Azure CLI sign-in and prints the same headline numbers. No app to approve.
How this page is locked down
Your data never reaches Barndoor
There is no Barndoor server behind this page and no analytics. Every request goes from this tab straight to Microsoft. Close the tab and the results are gone.
Requests go only to Microsoft
Apart from loading its own files, the page can only send requests to
login.microsoftonline.com and graph.microsoft.com. A Content-Security-Policy
makes your browser enforce that; check the network tab.
Tokens wiped on arrival
When Microsoft returns you here, the page keeps the access token in memory and clears the sign-in library's storage before the first read. No refresh token is kept, and a reload means signing in again.
No room for injected script
Trusted Types are switched on and the report is built without HTML strings, so an app name in your tenant can only ever show up as text.
Every script pinned by hash
Each script and stylesheet carries an integrity hash your browser checks before running it. SHA256SUMS lists every file this site serves.
Nothing hidden
The code isn't minified. View the page source and you're reading exactly what runs. No client secret exists, so Barndoor holds no credential for your tenant.