Skip to main content
This guide walks you through creating an enrollment key, installing the Golf Inventory agent on a Mac, and viewing your first scan results in the dashboard.

​
What You’ll Learn

  • How to create an enrollment key
  • How to install Golf Inventory on a Mac
  • How to verify enrollment and view scan results

​
Prerequisites

  • Golf Control Plane account with admin access
  • macOS device (Apple Silicon or Intel)
  • Root/sudo access on the target machine
1

Create an Enrollment Key

Navigate to Inventory > Enrollments in the Golf Control Plane and click New enrollment.Configure your key:
  • Name: A descriptive label (e.g., “Engineering team”)
  • Max enrollments: Maximum number of devices that can use this key (default: 100)
  • Expiry: Number of days until the key expires (default: 90)
Click Save. Copy the enrollment key (sk_enroll_...) immediately.
Save the enrollment key immediately. It is shown once and cannot be retrieved later — it is stored as a PBKDF2 hash.
Checkpoint: You have an enrollment key starting with sk_enroll_.
2

Install the Agent

Download the install script from the credentials modal on the Enrollments tab, or run:
sudo ./install.sh <enrollment-key> <api-url>
The script:
  1. Downloads the latest scanner-mcp binary for your architecture
  2. Verifies the SHA-256 checksum
  3. Installs to /Library/GolfGateway/scanner-mcp/bin/
  4. Enrolls the machine with the platform
  5. Creates a LaunchDaemon that scans every 15 minutes
Checkpoint: You see “Enrollment successful” in the terminal.
3

Verify Enrollment

Go to Inventory > Devices in the Golf Control Plane.Your machine should appear with status Active, showing its hostname and operating system.Checkpoint: Your machine appears in the Devices list.
4

View Scan Results

Go to Inventory > Overview to see the executive dashboard with discovered servers, risk scores, and governance classification.Then go to Inventory > Servers to see individual servers with their audit results, risk scores, and finding details.
Some checks (sandbox analysis, capability analysis) run asynchronously. You may see “Pending” scores that resolve within a few minutes. The dashboard polls every 10 seconds while scores are pending.
Checkpoint: You see MCP servers from your machine in the Servers tab.