Short answer
Some controls need it and others do not. Inspecting AI app traffic from laptops uses the Cloudflare WARP client on managed devices.
In detail: Device Software Needed to Secure AI Use?
AI Gateway, MCP server portals and data protection built into your own applications need nothing installed on the device. FirstNet recommends the right mix for managed, unmanaged and contractor devices.