Integration · Security and identity
AI agents for Jamf Pro
See and act on the Macs, iPhones and iPads Jamf Pro manages.
- Actions
- 8
- Read
- 5
- Write
- 3
Actions
What your agents can do in Jamf Pro
See and act on the Macs, iPhones and iPads Jamf Pro manages: search computers and mobile devices by name, serial number, user or OS, read one computer's hardware, security and group details, list computer groups, check the state of MDM commands, and lock, restart or erase a device. Jamf Cloud, through an API client.
Read 5
Look things up. Nothing changes.
Find computers
Finds Macs with an RSQL filter (general.name=="Ada's MacBook", hardware.serialNumber=="C02XYZ", userAndLocation.email=="ada@acme.com", operatingSystem.version=lt=15.0…
Get a computer
Reads one computer by its Jamf Pro ID with its general, hardware, operatingSystem, userAndLocation, security.
Find mobile devices
Finds iPhones, iPads, Apple TVs and Apple Vision Pros with an RSQL filter (displayName=="Ada's iPhone", serialNumber=="DMPXYZ", username=="ada", groupName=="Sales iPads").
List computer groups
Lists the smart and static computer groups: each group's id, name, description and smartGroup.
Check MDM commands
Lists MDM commands sent to one device (by its management ID) or matching an RSQL filter (status, command, dateSent=ge=2026-10-01T00:00:00Z).
Write 3
Create, change or send.
Lock a deviceDeletes data
Locks a computer or mobile device by its management ID (general.managementId): a Mac shuts down and needs the six-digit pin to start again; an iPhone or iPad locks its screen.
Restart a device
Restarts a computer or mobile device by its management ID; notify_user lets a Mac user see it coming.
Erase a deviceDeletes data
Erases a computer or mobile device by its management ID, wiping all its data and returning it to factory settings.
A person can approve first
Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything. Actions that delete data ask first by default.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Paste the client ID and secret of an app your organization registered with Jamf Pro. The platform fetches its tokens itself (OAuth client credentials).
Settings
- Jamf Cloud address
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your Jamf Pro data
Ask a question in plain words. The agent can find computers, get a computer or find mobile devices in Jamf Pro, then answers with what it found.
- 02
Let an agent update Jamf Pro
Have the agent restart a device or lock a device in Jamf Pro as part of a larger task. Turn on approval and a person signs off on each change first.
- 03
Share what it finds in Slack
Give one agent Jamf Pro and Slack: it can find computers in Jamf Pro and post a summary to a Slack channel in the same run.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- Google Workspace Admin9 actionsManage people and groups in a Google Workspace domain.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- Vanta8 actionsTrack compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
FAQ
Jamf Pro and MyDeepAgents
Can MyDeepAgents connect to Jamf Pro?
Yes. The Jamf Pro connector has 8 actions: 5 read and 3 make changes. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect Jamf Pro?
Paste the client ID and secret of an app your organization registered with Jamf Pro. The platform fetches its tokens itself (OAuth client credentials). The connection also asks for: Jamf Cloud address. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in Jamf Pro without asking?
Only if you let it. Each of the 3 actions that change data can be set to wait for a person's approval before it runs, and the 2 that delete data ask first by default.
Can I use Jamf Pro in workflows as well as agents?
Yes. Every Jamf Pro action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put Jamf Pro to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.