ADR is Uber's Apache-2.0 platform that inventories, monitors, and detects threats across the AI agents and MCP servers running on your endpoints.
Yes, ADR (Agentic AI Detection and Response) is open source under the Apache-2.0 license.
ADR (Agentic AI Detection and Response) is free to use.
Yes, ADR (Agentic AI Detection and Response) can be self-hosted (the source is available under the Apache-2.0 license).
ADR, short for Agentic AI Detection and Response, is Uber's open-source platform for securing the AI agents a team actually runs. As operators put coding and ops agents onto machines that reach real systems, ADR answers three questions: what agents and MCP servers are running, what are they doing, and which sessions look dangerous. Open source: yes (Apache-2.0); self-hostable; free. It is in production at Uber and was accepted to MLSys 2026.
ADR has three parts. Discovery inventories the AI apps, CLI agents, IDE extensions, model runtimes, and MCP servers present on an endpoint, so you know what is installed before you reason about risk. The Sensor collects and normalizes agent telemetry from Claude Code, Cursor, Codex, GitHub Copilot CLI, and DeepSeek Harness across macOS, Linux, and Windows. The Detection layer is a dual-agent detector that pairs high-recall triage with deeper agentic reasoning on the sessions that look suspicious. It ships with ADR-Bench, a benchmark of more than 300 tasks spanning 134 MCP servers and all 17 agent attack techniques, so detection quality can be measured rather than asserted.
The owned, agent-native GTM stack this registry tracks has a governance edge: once an agent can read your CRM, write to your pipeline, or run outreach, the question is not only what it can do but what it is actually doing and when something is wrong. ADR is the detection-and-response side of that story. It is honestly general enterprise-agent security rather than a GTM-specific control, and it earns a place here the same way agent data-access and attack-surface tools do, because the agents it watches are increasingly the ones running on your go-to-market data. For a technical team already putting Claude Code or Cursor near revenue systems, ADR is a license-clean, self-hostable way to inventory those agents, collect their telemetry, and measure detection against a public benchmark, on infrastructure it owns.