Shadow AI on company computers often starts with an AI agent that an employee installed on their own, signed in with a personal subscription and connected to internal systems through a Model Context Protocol (MCP) server. Shadow AI is one branch of shadow IT, with a shorter path from install to impact: these tools set up quickly, act on files and systems, and work under whatever account the employee chose. This guide skips the long definitions and goes to the practical part.