The osctrl-mcp component extends osctrl's capabilities by exposing its read surface over the Model Context Protocol (MCP), enabling AI clients such as Claude Code or ChatGPT to inspect nodes, the osquery schema, and distributed query results through a permission-checked interface — read-only by default, with write tools gated behind an explicit switch.

The new osctrl frontend is a single-page application in React that communicates exclusively with osctrl-api. With it in place, osctrl-admin, the original web UI since 2019, has been deprecated and completely removed, collapsing the operator experience into a single, hardened API surface.

The osctrl-api component extends osctrl's capabilities by providing a secure API that enables integration with other security tools, empowers automation, and allows engineering teams to build custom solutions around osquery fleet management.