The Agent Device Discovery page shows MDE-discovered endpoints missing the Huntress agent, but there's no way to get this data out — no API endpoint, no webhook/escalation event, and no CSV export.

Ideally this data would be accessible via an API endpoint, returning hostname, OS, last seen, discovery source, and agent status. Or, a new escalation type that fires when devices are discovered without an agent.

We cross-reference Huntress, Intune, and our RMM to find agent deployment gaps. Having this data programmatically would let us automate the full loop.