What's new in MunkiSee

A maintenance release alongside MunkiWho 1.0.3, with no visible changes to MunkiSee.

Improved

• Help centre. The Help centre now shows only MunkiSee's own guides, now that MunkiWho has a Help centre of its own.

MunkiSee Server comes to Linux, MunkiSee and MunkiWho become separate products, and the MCP endpoint works again on Windows.

Breaking changes

• MunkiWho is no longer bundled with MunkiSee Server. MunkiSee and MunkiWho are now separate products, each with its own server. Upgrading a Windows MunkiSee Server removes the bundled MunkiWho. If you use MunkiWho, install MunkiWho Server alongside it.
• Self-hosted Docker images are discontinued. Self-hosted MunkiSee is now available as a Windows installer or a native Linux server. If you run MunkiSee in Docker, move to one of these.

New

• Linux server. MunkiSee Server now runs natively on Linux (x64 and ARM64) as a systemd service, with its own Node.js runtime included.

Improved

• Hosted sign-ins in the audit log. Sign-ins on the hosted service now appear in Settings › Audit.

Fixed

• MCP on Windows. The MCP endpoint was silently disabled on Windows installs of MunkiSee Server.

Employees can see their own day, time off goes through approval, suspicious activity is flagged, and self-hosted servers gain backups and more sign-on providers.

New

• View Activity. Employees can see their own recorded day from the Windows tray, or by signing in to a personal account an admin has linked to them.
• Time-off requests. Calendar entries employees add for themselves go to a Requests page for admin approval before they pause measurement.
• Suspicious activity. Flags device-days that look like a mouse jiggler or auto-clicker. Signals can be dismissed or actioned, and each department can set its own threshold.
• Person and department trends. Who fell short of the utilisation target, a trend for each person, a twelve-week department trend with a baseline band, and an idle-gap histogram.
• Pause reasons. The tray agent asks why someone is pausing, and the dashboard shows paused time per person and by reason.
• Correct the record. Owners and admins can remove wrong activity for a day, or add activity that was missed. Manual entries are clearly marked.
• Backup and restore for self-hosted servers. Back up on demand or on a schedule, with automatic clean-up of old backups, and restore from Settings.
• Data retention settings. Choose how long detailed activity is kept. Older detail is rolled into daily summaries, so trends, totals and heatmaps survive.
• More single sign-on providers. Any OpenID Connect provider, such as Google Workspace or Okta, and SAML 2.0, such as ADFS or OneLogin, alongside Microsoft Entra.
• Block devices by hostname. A machine you remove can be stopped from enrolling itself again, offered when you delete a device.
• Australian public holidays. Available for each state and territory.

Improved

• Dashboard and Trends redesigned. Today is compared with the same time yesterday, Trends uses calendar weeks, months and quarters, and there are new Paused now, On leave today and out-of-hours figures.
• Person details. Opens beside the list and shows the person across all their devices, with a proper calendar and one date range for the whole panel.
• Utilisation. Measured against scheduled hours, including paused time, and the idle threshold and idle allowance settings now take effect.
• Time zones. Heatmaps can be read on each person's own clock or one shared clock, and devices whose clock has been changed are flagged for review.
• Business hours. Each person shows which schedule they are measured against. Widening monitoring asks for confirmation, and that confirmation is kept permanently in the audit log.
• Audit log. Filter by action, person, text and date, and export everything that matches.
• Reports. Scheduled reports are emailed to chosen recipients, the PDF report is redesigned, and a full raw activity export is available.
• MCP server. Available on the hosted service with a URL and key, included in self-hosted installers, and able to read everything the dashboard shows.
• API tokens. Set None, Read or Write separately for each area.
• Windows agent. Installs to 64-bit Program Files, adds Refresh now to the menu, reports the correct Windows version and device address, and the tray icon appears reliably after start-up.
• Accounts and licensing. A redesigned sign-in page, email sign-in for hosted users, pending invites in Access control, and a Licence page to manage seats, see invoices and turn auto-renew off.
• Help Centre. Full articles on how activity is measured and how each setting works.
• Self-hosted licences. Servers now need an activated licence. Without one, history stays readable but new devices and activity are refused.
• Stronger passwords. Passwords need at least ten characters with mixed case, a number and a symbol, and common or easily guessed passwords are refused.
• Secrets encrypted at rest. MFA secrets, the licence key, SSO client secrets and typed notes are encrypted at rest. API tokens and sessions are stored hashed, and a token is shown only once.
• HTTPS by default. Sign-in cookies are secure over HTTPS, the client installer defaults to HTTPS and warns before plain HTTP, and the device key is never saved unencrypted.
• Account ranks enforced. Admins can no longer reset the password of, delete or change an account ranked above them, and the last owner cannot be removed.
• Offline recovery keys. Enterprise self-hosted installs can be recovered with offline single-use keys if every admin account is locked out.

Fixed

• Missing minutes in timelines. Minutes at the start and end of business hours, and at each change between active and idle, are no longer missing from timelines and totals.
• Idle time on shared devices. Idle time on shared devices is charged to the person actually using them, and is no longer counted twice.
• Time off shifting by a day. Time-off entries no longer move by a day when the browser and server are in different time zones.
• Business hours overwriting schedules. Saving organisation business hours no longer overwrites user, team and department schedules.
• Hosted scheduled reports and alerts. On the hosted service, scheduled reports and offline alerts now run.

The first release of MunkiSee: activity monitoring for Windows teams.

A tray agent records active, idle and paused time on each device and sends it to a server, self-hosted on Windows or hosted by us. The dashboard shows live device status, timelines and heatmaps, people and their devices, departments, a calendar for time off, trends, and reports with CSV and PDF export and scheduling. Admins set business hours with overrides, choose how out-of-hours activity is recorded, and manage admin accounts, MFA, Microsoft single sign-on, API keys and the audit log. An optional MCP server lets AI assistants read the data.