- GAP ANALYSIS
- AUDIT READY
- REMEDIATION
- HUMAN ACTION
Short answer
How can I check my fleet's security compliance using AI?
Your agent pulls your current Kandji blueprints and security parameters to identify where your devices deviate from your required standards. You'll get a clear view of which machines are out of spec and which settings need fixing.
Compliance outcomes
Where gaps are found
The AI maps your current setup against your security requirements.
GAP ANALYSIS
Identify misconfigured devices
The agent compares active device settings against your blueprints to find any mismatches.
AUDIT READY
Generate compliance reports
Get a summary of which security parameters are met and which are failing across your fleet.
REMEDIATION
Pinpoint required fixes
The AI flags the exact settings that need to change to bring a device back into compliance.
HUMAN ACTION
Manual policy updates
The agent identifies the gaps, but you still handle the actual changes to your Kandji policies.
The workflow
What your AI does when the request arrives.
The agent acts as an auditor, scanning your Kandji environment for discrepancies.
Fetch blueprints
The agent retrieves all existing device blueprints from your Kandji account to understand your intended security posture.
list_blueprintsScan parameters
It pulls the specific security parameters defined in your environment to use as a baseline for comparison.
list_parametersCompare configurations
The agent cross-references the retrieved blueprints and parameters against the actual state of your fleet.
list_blueprintslist_parametersReport deviations
The AI summarizes every instance where a device fails to meet the required security configuration.
list_parameters
Try it
Copy these to start.
Use these prompts to begin your security audit.
Starting points
Swap out the specific blueprint names or parameter types to target certain security rules.
Kandji Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Kandji capabilities are ready to use.
{
"mcpServers": {
"kandji-mcp": {
"url": "https://edge.vinkius.com/vk_preview_47dZOrq6axzqY7N6eKozgF7QiUAy4WTru8MRILv1/mcp"
}
}
}Check my Kandji blueprints and tell me if any devices are missing the required security parameters.
List all my current blueprints and find any mismatches in the encryption settings.
Compare my fleet against the 'Standard Security' blueprint and list the non-compliant devices.
Which security parameters are currently failing across my most active device groups?
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Kandji once, then ask.
Log in once to link your Kandji account. Your credentials stay encrypted, and you can immediately start auditing your fleet through your AI client.
Connect Kandji to your AIFAQ
How this task behaves
- 01
Can the AI change my security policies?
No. The AI can only read your blueprints and parameters to find issues. You must manually update policies in Kandji.
- 02
Can the AI deploy new software to my devices?
No. This specific task is limited to checking configurations and parameters via the available tools.
- 03
How does the AI know which devices are out of compliance?
It uses the list_blueprints and list_parameters tools to compare your intended settings against the actual device states.
- 04
Does the AI delete any of my Kandji configurations?
No. The AI has read-only access to your blueprints and parameters.
- 05
Can I audit a specific group of devices?
Yes, if you provide the specific blueprint or parameter name you want to check against.
More questions about Kandji? The Connector page answers them. See everything the Kandji Connector can do
Connect Kandji to Claude, Cursor, ChatGPT & more
