Overview
The most common questions we hear about Velatir for Desktop, grouped by topic. If your question is not here, Troubleshooting covers diagnosis, and your account team can help with anything operational.What it is and what it does
Does Velatir for Desktop cover AI in the browser?
Does Velatir for Desktop cover AI in the browser?
Yes. Velatir for Desktop covers AI usage in web apps as well as in desktop and CLI apps, from one install and one ingest key. There is no separate product to deploy.
Does it inspect all my traffic?
Does it inspect all my traffic?
No. Velatir only inspects traffic from a curated list of supported AI applications. Everything else on the device is passed through untouched.
Which AI applications are supported?
Which AI applications are supported?
Coverage includes GitHub Copilot (VS Code, JetBrains Rider, IntelliJ IDEA, Visual Studio, Xcode, Neovim, GitHub Copilot CLI), Microsoft Copilot in Word, Excel, PowerPoint, Outlook, and Teams, the standalone Microsoft Copilot desktop app, Claude Code (CLI and VS Code), Claude Desktop, Claude for Word, and ChatGPT for Word. See the supported applications list for the current set. If you need coverage for an application that is not yet supported, request it through your account team.
Installation and updates
How is it distributed?
How is it distributed?
An MSI for Windows and a PKG for macOS. Linux support is in development. See Download and install.
Can I install it silently for a whole organisation?
Can I install it silently for a whole organisation?
Yes. Microsoft Intune, Jamf Pro, and any MDM that deploys an MSI or PKG work out of the box. See Enterprise deployment.
How are updates delivered?
How are updates delivered?
The agent checks every four hours and updates itself automatically, with no update service to manage. You can apply one immediately with
velatir update --apply.Can I pin a specific version for change management?
Can I pin a specific version for change management?
Yes. Tenant-specific update channels are available for organisations that need to coordinate updates with their own change-management process. Contact support to enable this for your tenant.
How do I uninstall?
How do I uninstall?
Use Add/Remove Programs on Windows (or
msiexec /x), and sudo velatir-uninstall on macOS. Both remove Velatir and everything it installed cleanly. See Download and install.Permissions and privacy
What permissions does it request?
What permissions does it request?
Administrator rights at install time on both platforms, and a one-time system extension approval on macOS. The full list with rationale is in Permissions.
Does it have access to my files, screen, microphone, or clipboard?
Does it have access to my files, screen, microphone, or clipboard?
No. Velatir requests none of these. It does not request Full Disk Access on macOS, and it does not capture screenshots or keystrokes. Its only inputs are the connections of supported AI applications.
What data is sent to Velatir?
What data is sent to Velatir?
For each captured interaction, a trace containing the prompt, the response, the model, token counts, and process context. What gets stored after capture is governed by your agent configuration and your data privacy settings. See Data privacy.
Does it work offline?
Does it work offline?
Velatir needs to reach
api.velatir.com to submit traces. If the device is offline it buffers them and sends once connectivity returns; your AI applications keep working as normal in the meantime.Networking
Is it compatible with corporate VPNs?
Is it compatible with corporate VPNs?
Yes, including split-tunnel and full-tunnel VPNs. Velatir adjusts on its own when a VPN connects or disconnects, so no restart is needed. See VPN compatibility.
What happens if something goes wrong?
What happens if something goes wrong?
Velatir recovers on its own within seconds, and never leaves the device without internet access.
Certificates
Can I use my own certificate authority?
Can I use my own certificate authority?
My Node.js or Python application rejects the certificate. How do I fix it?
My Node.js or Python application rejects the certificate. How do I fix it?
Runtimes that keep their own trust store (Node.js, Python
requests, JVM) need an explicit pointer to the Velatir certificate. See Troubleshooting.Does it work with certificate-pinned applications?
Does it work with certificate-pinned applications?
Pinned applications are detected and passed through unmodified; they cannot be inspected without the application cooperating. If a pinned application matters to your compliance workflow, contact your account team.
Operations
How do I monitor it across a fleet?
How do I monitor it across a fleet?
Run
velatir status --json as a Microsoft Intune Remediation, a Jamf Pro extension attribute, or any similar device-state collector. The output includes the agent’s status, version, capture state, and last trace timestamp.How do I rotate ingest keys?
How do I rotate ingest keys?
Redeploy the install command with the new key, or run
velatir set-api-key --key vltr_... on the device. The new key takes effect immediately.What does it look like for end users?
What does it look like for end users?
Nothing visible besides a tray icon. Supported AI applications work exactly as before, and users are never prompted. Behaviour only changes when an agent in Enforcer mode blocks or escalates an interaction.
Next steps
Download and install
Set Velatir up on Windows or macOS.
Enterprise deployment
Roll out across your organisation.
Troubleshooting
Diagnose the issues most commonly seen in production.
How it works
How Velatir for Desktop works.