AI agents for Kandji (Iru)

Find devices

Finds devices by name, serial number (partial), assigned user's name or email, platform (Mac, iPhone, iPad, AppleTV, Android, Windows), model, OS version, Blueprint, tag or FileVault state.

Get device details

Reads one device's full details by device ID: general (name, model, Blueprint, enrollment), mdm and agent state, hardware_overview.

List a device's apps

Lists the apps installed on a device by device ID (for iPhone and iPad, not the built-in Apple apps): each with app_name, version, bundle_id, path and source.

List Blueprints

Lists the Blueprints (groups of settings and apps devices are assigned to): each with id, name, description, computers_count, type and enrollment_code.

List threats

Lists malware and potentially unwanted programs Kandji EDR found, by status.

Read the audit log

Reads the audit log newest first: Blueprint and Library changes, access to secrets.

Ask a device to check in

Sends a blank push to an Apple device by device ID so it checks in with Kandji now and picks up pending commands, apps and settings.

Restart a device

Restarts an iPhone, iPad, Apple TV or Mac by device ID; with notify_user a Mac user is asked to restart at their convenience instead.

Lock a deviceDeletes data

Locks a lost or stolen device by device ID, with an optional lock-screen message and phone number.

Erase a deviceDeletes data

Erases a device by device ID, wiping all its data and returning it to factory settings.