How do I connect this MCP to my AI client?

You connect once through Vinkius. Once connected, the capabilities are immediately available in any MCP-compatible client like Claude, Cursor, or Windsurf.

Do I need to host the MCP myself?

No. Vinkius hosts and manages the MCP for you, so it is ready to use as soon as you connect.

What kind of devices can I manage?

This MCP is designed for managing Apple devices, specifically macOS and iOS, through the Kandji MDM platform.

Can my AI agent perform remote wipes?

The MCP allows your agent to see and audit MDM commands, such as wipes or locks, that have been sent to devices.

Is my Kandji data secure?

Vinkius manages your credentials securely, allowing your AI client to interact with the Kandji API without exposing your raw keys to the model.

How do I get Kandji API credentials?

Log in to your Kandji account, navigate to Settings > Access > API Token, and generate a new token. You also need your tenant's API URL.

The API URL is specific to your Kandji instance (e.g., https://yourtenant.api.kandji.io). You can find this in your Kandji API settings.

Can I see remote commands?

Yes, the list_commands capability allows you to retrieve a history of MDM commands sent to your managed devices.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect Kandji to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Automate device management and fleet security with your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Kandji.

01
Get organization
This capability retrieves your Kandji organization details to verify account identity.
02
Get device
This capability pulls full details for a specific Apple device for deep auditing.
03
List activity
This capability lists recent management activity to help you audit system changes.
04
List devices
This capability returns names, IDs, and OS versions for all managed Apple devices.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Kandji.

05
List parameters
This capability lists all library parameters so you can audit available security controls.
06
List users
This capability lists all users associated with your managed devices.
07
List auto apps
This capability lists all Kandji Auto Apps to audit your standard software libraries.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Kandji.

08
List blueprints
This capability lists all device blueprints to show how devices are configured.
09
List commands
This capability lists recent MDM commands like locks or wipes sent to devices.
10
List custom apps
This capability lists all custom applications to audit non-store software deployments.

Real work

What teams actually run

Rapid Device Audits

Ask your agent for a list of all devices running an outdated OS version.

Security Compliance Checks

Have your agent verify that specific security parameters are applied to your blueprints.

Software Deployment Review

Use the agent to confirm which custom apps are installed across your fleet.

Incident Response

Quickly check the history of MDM commands sent to a specific device during a security event.

Automate a task

Put Kandji to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Kandji works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put Kandji to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

994ms average. Fast in production.

Kandji is checked daily against the live service.

Daily averagePeak 1193ms

Oct 3Today

Fastest day: 790ms
Slowest day: 1193ms
14-day trend: Improving-6%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Kandji, so you can see the experience inside your AI.

It does not authenticate your account with Kandji. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Kandji Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — Kandji capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "kandji-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Kandji in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Kandji owners hand off.

IT professionals managing large Apple ecosystems use this to bridge the gap between MDM data and AI-driven automation.

01
IT Managers
They hand off fleet auditing and security compliance checks to the agent.
02
Systems Administrators
They use the agent to quickly pull device specs or software lists.
03
Security Operations
They task the agent with monitoring MDM commands and security parameters.

FAQ

Questions Kandji owners ask.

01
How do I connect this MCP to my AI client?
You connect once through Vinkius. Once connected, the capabilities are immediately available in any MCP-compatible client like Claude, Cursor, or Windsurf.
02
Do I need to host the MCP myself?
No. Vinkius hosts and manages the MCP for you, so it is ready to use as soon as you connect.
03
What kind of devices can I manage?
This MCP is designed for managing Apple devices, specifically macOS and iOS, through the Kandji MDM platform.
04
Can my AI agent perform remote wipes?
The MCP allows your agent to see and audit MDM commands, such as wipes or locks, that have been sent to devices.
05
Is my Kandji data secure?
Vinkius manages your credentials securely, allowing your AI client to interact with the Kandji API without exposing your raw keys to the model.
06
How do I get Kandji API credentials?
Log in to your Kandji account, navigate to Settings > Access > API Token, and generate a new token. You also need your tenant's API URL.
07
What is the API URL?
The API URL is specific to your Kandji instance (e.g., https://yourtenant.api.kandji.io). You can find this in your Kandji API settings.
08
Can I see remote commands?
Yes, the list_commands capability allows you to retrieve a history of MDM commands sent to your managed devices.

Explore

More in Security Compliance

Connect Kandji to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Get organization

Get device

List activity

List devices

05-07

List parameters

List users

List auto apps

08-10

List blueprints

List commands

List custom apps

What teams actually run

Rapid Device Audits

Security Compliance Checks

Software Deployment Review

Incident Response

Building your own app? The connector is yours to use.

Kandji Connector

Claude Desktop

IT Managers

Systems Administrators

Security Operations

How do I connect this MCP to my AI client?

Do I need to host the MCP myself?

What kind of devices can I manage?

Can my AI agent perform remote wipes?

Is my Kandji data secure?

How do I get Kandji API credentials?

What is the API URL?

Can I see remote commands?

Scytale (Security Compliance Automation) AI Connector

Kolide AI Connector

Beagle Security AI Connector

Beagle Security AI Connector

Suggestions

AT&T IoT AI Connector

AWS IoT Core Device & Limits Calculator AI Connector

Balena AI Connector

Home Network Device Inventory AI Connector