shield360 collector

shield360 collector reports AI tool usage, application time and, when your organisation’s collection policy turns them on, browsing and network activity from this machine. It reads files and OS tables. It installs no certificate, changes no proxy setting and opens no listening socket.

SHIELD360_INSTALL_KEY=<key> shield360 collector enroll --url https://app.shield360.ai
shield360 collector install

enroll

Link this machine to your Shield360 organisation.

shield360 collector enroll --url <shield360-url> [--install-key-file <path>]

Flag	Description
--url	Your Shield360 address, for example https://app.shield360.ai. Required.
--install-key-file	Read the install key from this file.

The install key is read from --install-key-file, then SHIELD360_INSTALL_KEY, then a prompt. It’s never accepted as an argument, which other users of the machine could see. The machine receives its own collector token and the install key isn’t stored. SHIELD360_URL, SHIELD360_COLLECTOR_ID and SHIELD360_COLLECTOR_TOKEN are written to the CLI config file with owner-only permissions. Enrolment ends by sending a heartbeat, so a machine that enrols successfully is known to be able to report.

install

Report automatically in the background.

shield360 collector install [--every-minutes 60]

Registers a LaunchAgent on macOS (running watch), a systemd --user timer or cron entry on Linux, or a Task Scheduler task on Windows (both running run). See What gets scheduled.

uninstall

Stop reporting automatically. The machine stays enrolled.

shield360 collector uninstall

run

Report AI usage once.

shield360 collector run [--dry-run] [--verbose] [--since-hours 48] [--since 48h]

Flag	Description
--dry-run	Print a summary and send nothing.
--verbose	List every project found.
--since-hours	How far back a first run looks. Default 48.
--since	Ignore the last-run watermark and read exactly this far back, for example 48h.

Each run continues from a per-person watermark, so nothing is sent twice.

watch

Report continuously, including time by application and machine state.

shield360 collector watch [--sample 30s] [--report-every 1h] [--activity-every 5m] [--verbose]

Flag	Description
--sample	How often to sample the foreground application. Default 30s.
--report-every	How often to report AI usage. Default 1h.
--activity-every	How often to send accumulated application time. Default 5m.
--verbose	Print each report.

watch also refreshes the collection policy and, when running as a user, installs coding-agent hooks for agents that appear after installation.

status

Show what this machine reports to.

shield360 collector status

Prints the server, collector ID, the policy in force, whether background reporting is scheduled, and the last report for each person. When running elevated, it also reports how many people it collects for. See Multi-user machines.

Environment

Variable	Used by	Purpose
SHIELD360_INSTALL_KEY	enroll, install scripts	Organisation install key
SHIELD360_URL	all	Shield360 server
SHIELD360_COLLECTOR_ID	all	Written by enroll
SHIELD360_COLLECTOR_TOKEN	all	Written by enroll; this machine’s credential