• AUDIT
  • SECURITY
  • STATUS
  • HUMAN

How to track MDM commands and activity with your AI

Connect Kandji to your AI client to audit device management logs and command histories.

Ask AI about this page

Short answer

How can I track MDM commands and activity with my AI?

Your AI uses Kandji tools to pull recent management actions and specific command histories for any device. You can then ask it to identify specific changes or security events. This allows you to pinpoint exactly when and how a device was modified.

Investigation outcomes.

Where your data lands.

The AI turns raw Kandji logs into clear answers.

AUDIT

Command history logs

The AI pulls specific command sequences from Kandji. You get a clear timeline of what was sent to a device and when.

SECURITY

Incident investigation

Your AI scans recent management activity to find unexpected changes. This helps you catch security issues faster.

STATUS

Device state changes

The AI tracks how device configurations have shifted over time. You can see the direct result of management actions.

HUMAN

Manual remediation

The AI identifies the problem, but you decide which corrective MDM commands to push to the device.

The workflow

What your AI does when the data arrives.

The AI acts as a bridge between your Kandji environment and your natural language queries.

  1. Fetch activity logs

    The AI pulls a list of recent management actions from your Kandji instance.

    list_activity

  2. Retrieve command history

    It looks up the specific execution history for individual MDM commands.

    list_commands

  3. Analyze changes

    The AI compares the logs to find discrepancies or specific device modifications.

    list_activity

  4. Summarize findings

    It organizes the command data into a readable report for your review.

    list_commands

Try it

Copy these to start.

Use these prompts to begin your investigation.

Starting points

Swap out the device names or specific timeframes to get more precise results.

Kandji Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Kandji capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "kandji-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp"
    }
  }
}
Copy into chat04

  • Show me the recent management activity for the MacBook Pro assigned to Sarah.

  • List the last five commands sent to device ID 8829-X.

  • What recent MDM commands were executed on the fleet in the last 24 hours?

  • Find any suspicious activity in the command history for the engineering department devices.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Kandji once, then ask.

Just link your Kandji account through Vinkius. Your credentials stay encrypted, and you can immediately start querying your device logs.

Connect Kandji to your AI

FAQ

How this task behaves.

  • 01

    Can the AI push new commands to my devices?

    No. The AI can only read activity and command history. You must manually issue any new commands through the Kandji console.

  • 02

    Can the AI delete management logs?

    No. The AI has read-only access to the data provided by the tools.

  • 03

    How deep does the command history go?

    The AI can only access the history that the list_commands tool is able to retrieve from your Kandji instance.

  • 04

    Does the AI know which user owns a device?

    Yes, if that user information is included in the activity logs retrieved by the AI.

  • 05

    Can I use this to automate device enrollment?

    No. This specific task is for auditing and investigating existing activity, not for performing enrollment actions.

  • More questions about Kandji? The Connector page answers them. See everything the Kandji Connector can do

Connect Kandji to Claude, Cursor, ChatGPT & more