# Jamf Pro MCP for AI Agents AI Agent Connect

> Jamf Pro MCP. It lets your AI agent manage your Apple device fleet, track inventory, and audit security settings directly through the Jamf Pro API. It handles the heavy lifting of navigating the API, so you can focus on actual troubleshooting. It's built for IT teams who need to move faster without the friction of constant context switching between the Jamf Pro console and your chat window.

## Overview
- **Category:** fort-knox
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_vRfDdF8gVSQ9lcHBrRS8zlPjZ74Fex2s9DDnoQ8S/ai-agent-connect
- **Tags:** mobile-device-management, it-automation, asset-tracking, endpoint-security

## Description

Jamf Pro lets your AI agent manage your Apple device fleet, track inventory, and audit security settings directly through the API. This connector changes your workflow by giving your agent a direct line into your corporate device environment. Instead of manually digging through records, you can just ask your agent to find a specific device, check its encryption status, or see which department owns a certain set of assets. It handles the heavy lifting of navigating the backend, so you can focus on actual troubleshooting. By connecting this through the Vinkius catalog, you can manage your environment from your favorite AI client while gaining access to a massive library of other tools. You get to move faster without the friction of constant context switching between the management console and your chat window.

Imagine your IT team spending half their day jumping between different dashboards to figure out which Mac has a specific app installed or which mobile device is missing a security update. This connector replaces that manual process with a direct query system. You can handle complex requests like "who is using the Mac in Building B" or "what scripts are we running for the marketing department" with a simple sentence. The agent does the work of querying the database and presenting the results clearly. It takes the tedious parts out of asset management and lets you spend your time on high-value tasks like security hardening and proactive fleet maintenance.

## Tools

### get_computer
Retrieves deep details for a specific Mac. It includes disk encryption status, installed apps, and user info for auditing.

### list_categories
Lists all management categories in your system. Use this to navigate your management hierarchy.

### list_computers
Lists all managed computers in your fleet. It includes names, IDs, and serial numbers for auditing.

### list_departments
Lists all configured departments. Use this to analyze device distribution by business unit.

### list_mobile_devices
Lists all managed mobile devices. It returns device names, IDs, and models to audit your mobile fleet.

### list_packages
Lists all software packages available in your distribution points. This is useful for auditing available software deployments.

### get_mobile_device
Pulls data for a specific mobile asset. It includes OS versions, security status, and assigned user info.

### list_buildings
Lists all configured buildings in your environment. This is useful for auditing site-based device distribution.

### list_scripts
Lists all management scripts stored in your system. Use this to audit your custom automation assets.

### list_users
Lists all users in the system. This helps identify which users are associated with specific devices.

## Prompt Examples

**Prompt:** 
```
Which Macs are in the Engineering department?
```

**Response:** 
```
I've pulled the list of computers for the Engineering department. Here are the managed devices:

| Device Name | Serial Number | Status |
| :--- | :--- | :--- |
| Eng-MacBook-01 | C02XJ6789 | Active |
| Eng-MacBook-02 | C02XJ6790 | Active |
| Eng-MacBook-03 | C02XJ6791 | Maintenance |

Let me know if you need the specific app versions for any of these.
```

**Prompt:** 
```
Is my mobile device with ID 9982 secure?
```

**Response:** 
```
I've checked the status for mobile device 9982. Here is the security summary:

* **OS Version:** 17.4.1
* **Encryption:** Enabled
* **Security Status:** Compliant
* **Assigned User:** Sarah Jenkins

The device meets all current security requirements.
```

**Prompt:** 
```
What scripts do we have for remote wipes?
```

**Response:** 
```
I found the following management scripts available for remote execution:

* **RemoteWipe_Standard**: Executes a full factory reset.
* **Reboot_Force**: Triggers an immediate restart.
* **Update_Check**: Verifies latest OS availability.

Would you like me to run one of these or provide more details on a specific script?
```

## Capabilities

### Audit Mac fleet status
Get detailed hardware and software info for any computer.

### Investigate mobile assets
Pull OS versions and security statuses for mobile devices.

### Map device distribution
See which buildings or departments own specific hardware.

### Review deployment assets
List all scripts and software packages in your distribution points.

### Link users to hardware
Identify which employees are associated with specific devices.

## Use Cases

### Audit department compliance
An IT admin needs to find every Mac in the Marketing department missing a security update. Ask the agent to list computers in Marketing and check their status.

### Verify site security
A security lead needs to verify if all mobile devices in Building A have encryption enabled. Use `list_buildings` to find the site and `get_mobile_device` to check status.

### Check software availability
A manager wants to see what software is available for deployment. Ask the agent to list all software packages in the distribution points.

### Map user hardware assignments
A new employee needs a laptop, and you need to see who owns the closest available one. Use `list_users` to find device assignments and `list_computers` to see the fleet.

## Benefits

- Stop manual auditing: Use `list_computers` to get a full overview of your Mac fleet in seconds instead of clicking through pages.
- Faster troubleshooting: Use `get_computer` to instantly see disk encryption and app status for any single machine.
- Better asset tracking: Use `list_departments` and `list_buildings` to see exactly where your hardware is distributed.
- Simplified script management: Use `list_scripts` to quickly find and review custom automation assets without searching the console.
- Quick mobile checks: Use `get_mobile_device` to verify security statuses and OS versions for specific mobile assets instantly.

## How It Works

The bottom line is you get a conversational way to query and manage your entire Apple device lifecycle.

1. Connect your Jamf Pro API keys to the Vinkius platform.
2. Link your preferred AI client to the Jamf Pro MCP.
3. Ask your agent to find devices or audit scripts.

## Frequently Asked Questions

**Can Jamf Pro MCP help me audit my Mac fleet?**
Yes, it provides a direct way to list all managed computers in your fleet. You can quickly see names, IDs, and serial numbers to keep your inventory up to date.

**How do I see which building my Apple devices are in?**
You can ask your agent to list all configured buildings. It will then help you identify which site-based assets are distributed where.

**Can my AI agent check mobile device security?**
Yes, it can pull the OS version, security status, and assigned user for any specific mobile device to help with compliance checks.

**How does Jamf Pro MCP manage software packages?**
It allows your agent to list all software packages available in your distribution points, making it easy to see what's ready for deployment.

**Can I use this to see which users have which devices?**
Yes, the Connector can list all users in the system, which helps identify which employees are associated with specific managed hardware.

**Is there a way to see all my automation scripts in Jamf Pro?**
You can ask your agent to list all management scripts. This lets you quickly audit your custom automation assets without searching the console.

**How do I get Jamf Pro API credentials?**
You need to create an API user in your Jamf Pro console under Settings > User Accounts & Groups. Ensure the user has the necessary privileges for the data you want to access.

**What is the instance domain?**
The domain is your Jamf Pro server URL (e.g., company.jamfcloud.com). You must provide this during setup.

**Does it support the latest Jamf Pro API?**
Yes, this Connector uses the Jamf Pro API v1 with Bearer token authentication.