Skip to main content

​
Overview

The most common questions we hear about Velatir for Desktop, grouped by topic. If your question is not here, Troubleshooting covers diagnosis, and your account team can help with anything operational.

​
What it is and what it does

Yes. Velatir for Desktop deploys the browser extension with your organisation’s ingest key, so AI usage in web apps is covered from the same install. There is no separate product to deploy.
In the browser, ChatGPT, Claude, Gemini, and thousands of other web platforms through the extension. On the device, the agent reports installed AI applications and launches of AI-native apps. Claude Code and Codex activity can be ingested over OpenTelemetry when that is enabled for your organisation. See Overview. If you need coverage for an application that is not yet supported, request it through your account team.

​
Installation and updates

An MSI for Windows and a PKG for macOS. Linux support is in development. See Download and install.
Yes. Microsoft Intune, Jamf Pro, and any MDM that deploys an MSI or PKG work out of the box. See Enterprise deployment.
The agent checks every four hours and updates itself automatically, with no update service to manage. You can apply one immediately with velatir update --apply.
Yes. Tenant-specific update channels are available for organisations that need to coordinate updates with their own change-management process. Contact support to enable this for your tenant.
Use Add/Remove Programs on Windows (or msiexec /x), and sudo velatir-uninstall on macOS. See Download and install.Two things that route around it. On macOS with Firefox, the browser extension may remain listed after uninstall (it is inactive) and needs removing by hand. And if the uninstall is interrupted, your MDM cannot remove the app, or items remain afterwards, run the cleanup script in Uninstall cleanup — devices on a version older than the current installer can leave artefacts a standard uninstall does not clear.

​
Permissions and privacy

Administrator rights at install time on both platforms. The full list with rationale is in Permissions.
Velatir does not monitor your clipboard, screen, microphone, or files. It does not request Full Disk Access on macOS, and it does not capture screenshots or keystrokes.
Browser interactions become traces (prompt, response, model, token counts, and process context). On the device, the agent sends installed-app findings, launch events, heartbeats, and configuration state. What gets stored after review is governed by your agent configuration and your data privacy settings. See Data privacy.
Velatir needs to reach api.velatir.com to submit traces and heartbeats. If the device is offline it retries once connectivity returns; your AI applications keep working as normal in the meantime.

​
Networking

The agent makes outbound HTTPS calls to api.velatir.com and Velatir’s update storage. If a firewall or VPN blocks unknown destinations, allow those hosts. Your AI applications are unaffected.
The agent retries on its own. A problem with Velatir cannot take the device offline.

​
Operations

Run velatir status --json or velatir health --json as a Microsoft Intune Remediation, a Jamf Pro extension attribute, or any similar device-state collector. The output includes the agent’s status, version, and last update and config-sync outcomes.
Redeploy the install command with the new key, or run velatir set-api-key --key vltr_ingest_... on the device. The new key takes effect immediately.
Nothing visible besides a tray icon. Supported AI applications work exactly as before, and users are not prompted during normal use. Behaviour changes only when an agent in Enforcer mode acts in the browser — for example blocking an interaction.

​
Next steps

Download and install

Set Velatir up on Windows or macOS.

Enterprise deployment

Roll out across your organisation.

Troubleshooting

Diagnose the issues most commonly seen in production.

How it works

How Velatir for Desktop works.