Jamf Pro MCP. Audit your entire Mac and mobile fleet status.
Jamf Pro MCP connects your AI agent directly to the Jamf Pro API, letting you audit and manage entire Apple device fleets. Use it to list all managed computers, check mobile security status, track inventory details like disk encryption, or see which users are assigned where. It's essential for IT teams needing a full view of their hardware and software deployment.
Give Claude and any AI agent real-world access
The MCP retrieves detailed records for every Mac on the network, including installed applications and disk encryption status.
You can pull deep data on any single mobile asset, showing its operating system version, assigned user, and security state.
The MCP lists all configured departments, buildings, and management categories to understand how devices are distributed across the company.
You can pull a list of every user in the system and view which specific machines or mobile devices they are associated with.
The MCP lists all available software packages, management scripts, and custom categories ready for deployment across the fleet.
Ask an AI about this
Waiting for input…
What AI agents can do with Jamf Pro with 10 Tools
Use these tools to run specific queries against the Jamf Pro API, allowing your AI client to retrieve detailed asset records and system configurations.
Make your AI actually useful.
Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.
Start using Jamf Pro MCPGet Computer
Retrieves detailed information for one specific computer, including its installed apps and disk encryption status.
Get Mobile Device
Pulls comprehensive data on a single mobile device, showing its security status...
List Buildings
Lists all physical buildings configured within the Jamf Pro management system.
List Categories
Retrieves a list of all management categories, useful for understanding the...
List Computers
Lists every managed computer on the network, providing names, IDs, and serial...
List Departments
Provides a list of all configured business departments, allowing analysis of device distribution by unit.
List Mobile Devices
Lists every managed mobile device, providing their names, IDs, and models for asset auditing.
List Packages
Returns a list of all software packages available in Jamf Pro's distribution points...
List Scripts
Lists all management scripts stored within Jamf Pro, which can be used for remote...
List Users
Retrieves a full list of users in the system and identifies their current...
Security and governance baked right in.
Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.
Choose How to Get Started
Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.
Build Your Own
Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.
- Import from OpenAPI, Swagger, or YAML specs
- Create Agent Skills with progressive disclosure
- Deploy to edge with MCPFusion framework
- Built in DLP, auth, and compliance on each call
- Real time usage dashboard and cost metering
- Publish to catalog or keep private
Make Your AI Do More
Start with Jamf Pro, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.
- Use this MCP plus 5,200+ others, all in one place
- Add new capabilities to your AI anytime you want
- Connections are secured and governed automatically
- Track usage and costs across all your servers
- Works with Claude, ChatGPT, Cursor, and more
- New servers added to the catalog weekly
Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Jamf Pro. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
VINKIUS CLOUD
Cloud Hosted
Managed infra
V8 Isolated
Sandboxed per request
Zero-Trust Proxy
No stored credentials
DLP Enforced
Policy on each call
GDPR Compliant
EU data residency
Token Compression
~60% cost reduction
The Manual Chore of Auditing Device Compliance
Right now, checking compliance means jumping between dashboard views and spreadsheets. You pull a list of 500 employee Macs, then you have to manually open the detailed view for each one just to confirm if disk encryption is active or what OS version it's running. It’s tedious copy-pasting, cross-referencing IDs, and spending hours chasing missing data points.
With this MCP, your agent handles that entire process in a single sequence of calls. You ask for compliance status across the fleet, and your agent automatically uses tools like `list_computers` followed by `get_computer` on every asset to build you one complete, accurate report.
Get Full Visibility with Jamf Pro's Tools
The biggest time sink is correlating who has what. You pull the user list from one place and the device inventory from another, forcing you to manually match names and IDs in a separate spreadsheet. This step alone can take hours.
Instead, your agent combines `list_users` with the asset data. It gives you immediate, correlated knowledge: User X is assigned Device Y, which belongs to Department Z. The whole picture just appears.
What Jamf Pro MCP does for your AI
This MCP lets your AI client work with the Jamf Pro API to manage your entire Apple ecosystem. Your agent can list all managed computers and mobile devices, giving you an immediate inventory count and status overview. Need to know who's using what? You can look up users and see which departments they belong to.
The system also tracks physical locations by listing buildings or analyzing device distribution across specific categories. For automation tasks, your AI client doesn't just read data; it pulls details about available software packages or existing management scripts for remote execution. When you connect this via Vinkius, you give your agent the full capability to audit everything from user accounts and computer serial numbers to department assignments in one place.
019d75bc-4778-722c-b9bb-6186a8738eea How to set up Jamf Pro MCP
The bottom line is that your AI client uses this MCP to talk directly to Jamf Pro, giving it real-time asset and user information.
You tell your AI client exactly what you need to audit—for example, 'Find all Macs without disk encryption.'
The client calls the relevant tool in this MCP (like list_computers or get_computer), which executes a request against the Jamf Pro API.
Your agent receives structured data containing the specific inventory details, user assignments, or deployment status you requested.
Who uses Jamf Pro MCP
This is for the IT Operations team or Endpoint Security Engineers who spend their days manually cross-referencing spreadsheets with dashboard reports. If you're tired of clicking through multiple Jamf Pro sections just to figure out if a device meets compliance standards, this MCP gets your agent working.
Audits the entire Mac fleet using list_computers and checks individual machine details with get_computer, ensuring all assets are accounted for.
Uses get_mobile_device to verify security status and OS versions on specific mobile assets, feeding data into compliance reports.
Maps out the organizational structure by listing buildings or departments (list_buildings, list_departments) before rolling out new software packages via list_packages.
Benefits of connecting Jamf Pro MCP
Stop manually checking compliance. By using get_computer, you can instantly audit a machine's disk encryption status, which is crucial for security reporting.
Get location context immediately. Tools like list_buildings or list_departments let your agent map device distribution across physical sites and business units.
Improve asset visibility by using list_mobile_devices. You can quickly get a list of all managed phones and tablets, speeding up inventory checks.
Streamline software deployments. Instead of guessing what's available, use list_packages to see every software package ready for rollout across the entire organization.
Simplify user-asset mapping. Running list_users lets your agent instantly pair users with their assigned devices, making audit reports simple and accurate.
Jamf Pro MCP use cases
The Quarterly Compliance Audit
A security analyst needs to prove all corporate Macs have disk encryption enabled. They ask the agent to run list_computers first, then iterate through the results calling get_computer for each one, compiling a single report showing every machine's current status.
Onboarding a New Department
A sysadmin needs to provision 50 new employee laptops. They use list_departments to find the correct unit ID and then call get_computer repeatedly to ensure every device assigned to that department is accounted for.
Investigating Lost Devices
A manager loses track of company phones. They ask their agent to run list_mobile_devices to get a master list, and then use get_mobile_device on specific IDs to verify the last known OS version.
Pre-Rollout Check
An IT team is prepping an OS update. Before deployment, they check list_packages to confirm the correct software is available and then use list_scripts to ensure any necessary pre-run scripts are ready.
Jamf Pro MCP tradeoffs
What to watch out for, and the recommended way to handle each one.
Assuming a full device list exists.
The user just asks, 'What devices do we have?' without specifying the type or scope, leading to vague partial results.
Be specific. Always start by calling list_computers if you need Macs, or use list_mobile_devices if you only want phones and tablets.
Overlooking physical location data.
Reporting device counts without knowing which building they are in, making the report useless for facility planning.
Before reporting totals, run list_buildings to establish the scope. Then, use tools like get_computer while filtering by building ID.
Mixing up user data with hardware status.
Listing users and then separately listing computers without connecting them, resulting in two unrelated lists that need manual comparison.
Use list_users to get the roster, then call get_computer using the user ID or device name to correlate who has which machine.
When to use Jamf Pro MCP
Use this MCP if your primary job is auditing hardware inventory and maintaining compliance across a mixed fleet of Apple computers and mobile devices. You need deep-dive data points, like disk encryption status (get_computer) or OS versions (get_mobile_device), which only Jamf Pro holds.
Don't use this MCP if your goal is simply to send out mass announcements or manage ticketing workflow—you’d be better off using a dedicated messaging tool. Also, don't use it if you just need generic user directories without asset linkage; list_users gives names but not device status.
If you only need basic reporting (e.g., 'How many Macs do we have?'), this is perfect. But if you need to know why a Mac has that specific OS version, or which building it's assigned to, you need the deep tool set provided here.
Frequently asked questions about Jamf Pro MCP
Can Jamf Pro MCP list all managed hardware? +
Yes, the MCP can list both Mac computers using list_computers and mobile devices via list_mobile_devices, giving you a comprehensive inventory count.
How do I check if an individual computer is encrypted? +
You call the get_computer tool, passing in the specific device ID. The returned data includes the current disk encryption status for that machine.
Does Jamf Pro MCP help me find devices by location? +
Yes, you can audit distribution using tools like list_buildings and list_departments, allowing you to filter or analyze assets based on their assigned physical site or business unit.
What if I need to see available software packages? +
Use the list_packages tool. It retrieves a list of every .pkg or .dmg file available in Jamf Pro's distribution points, so you know exactly what can be deployed.
Can I see which user owns a specific device? +
You use list_users to view the full roster and then cross-reference that data with device details retrieved from tools like get_computer or get_mobile_device.