Skip to main content Announcing Tool Policies: AI agent permissions down to the field Read the announcement
Live 109 Actions

Jamf Pro MCP Server
for AI Agents

Connect your AI agent to StackOne's Jamf Pro MCP server and give it 109 MCP tools out of the box. Auth, tool execution, and security all managed.

Jamf Pro logo
Jamf Pro MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

109 Agent Actions

Agents can read, write, delete and run operations in Jamf Pro. Extend your agent's capabilities with custom actions.

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Jamf Pro MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Jamf Pro tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Jamf Pro call.

Tools Discovery →

What is the Jamf Pro MCP Server?

A Jamf Pro MCP server lets AI agents read and write Jamf Pro data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's Jamf Pro MCP server ships with 109 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Jamf Pro MCP Tools

Every StackOne action for Jamf Pro, ready for your agent. Read, write, delete and run operations, scoped to exactly what you need.

Computers

  • Get Computers

    Retrieve a paginated list of computer inventory records from Jamf Pro

  • Get Computer

    Retrieve a single computer by its Jamf Pro ID, returning only the lightweight General section by default and optionally narrowing to specific sections. Preferred action for computer lookups.

  • Update Computer

    Update specific fields on a computer inventory record in Jamf Pro

  • Delete Computer

    Permanently remove a computer inventory record from Jamf Pro

Smart Computer Groups

  • Create Smart Computer Group

    Create a new smart computer group with criteria-based dynamic membership

  • Get Smart Computer Group

    Retrieve a single smart computer group by its Jamf Pro ID

  • Delete Smart Computer Group

    Delete a smart computer group from Jamf Pro by its ID

Static Computer Groups

  • Create Static Computer Group

    Create a new static computer group with an explicit set of computer assignments

  • Get Static Computer Group

    Retrieve a single static computer group by its Jamf Pro ID

  • Update Static Computer Group

    Rename a static computer group or replace its whole member list

  • Delete Static Computer Group

    Delete a static computer group from Jamf Pro by its ID

Mobile Devices

  • Get Mobile Devices

    Retrieve a paginated list of mobile devices enrolled in Jamf Pro

  • Get Mobile Device

    Retrieve a single mobile device by its Jamf Pro instance ID

  • Update Mobile Device

    Update user-modifiable fields on an existing mobile device record

Mobile Device Smart Groups

  • Create Mobile Device Smart Group

    Create a new mobile device smart group in Jamf Pro

  • Get Mobile Device Smart Groups

    Retrieve a paginated list of mobile device smart groups from Jamf Pro

  • Get Mobile Device Smart Group

    Retrieve a single mobile device smart group from Jamf Pro by its identifier

Mobile Device Static Groups

  • Create Mobile Device Static Group

    Create a new mobile device static group in Jamf Pro

  • Get Mobile Device Static Groups

    Retrieve a paginated list of mobile device static groups from Jamf Pro

  • Get Mobile Device Static Group

    Retrieve a single mobile device static group from Jamf Pro by its identifier

  • Update Mobile Device Static Group

    Rename a mobile device static group or add and remove its member devices

Users

  • Create User

    Create a new end-user inventory record in Jamf Pro

  • Get Users

    Retrieve a paginated list of end-user inventory records from Jamf Pro

  • Get User

    Retrieve a single Jamf Pro end-user record by its ID

  • Update User

    Update an existing end-user inventory record in Jamf Pro

  • Delete User

    Delete an end-user inventory record from Jamf Pro

Scripts

  • Create Script

    Create a new script in Jamf Pro

  • Search Scripts

    Retrieve a list of scripts from Jamf Pro

  • Get Script

    Retrieve a single script by its Jamf Pro ID

  • Delete Script

    Delete a script from Jamf Pro

Categorys

  • Create Category

    Create a new category record in Jamf Pro

  • Get Category

    Retrieve a single category by its Jamf Pro ID

  • Delete Category

    Remove a category record from Jamf Pro

Buildings

  • Create Building

    Create a new building record in Jamf Pro

  • Search Buildings

    Retrieve a paginated list of buildings from Jamf Pro

  • Get Building

    Retrieve a single building by its Jamf Pro ID

  • Delete Building

    Delete a building record from Jamf Pro

Departments

  • Create Department

    Create a new department record in Jamf Pro

  • Search Departments

    Retrieve a paginated list of departments from the Jamf Pro instance

  • Get Department

    Retrieve a single department by its ID

  • Delete Department

    Delete a department record from Jamf Pro

MDM Commands

  • Create MDM Command

    Send an MDM command to one or more managed devices in Jamf Pro

  • Get MDM Commands

    Retrieve a list of MDM commands queued or completed in the Jamf Pro account

Packages

  • List Packages

    Retrieve a paginated list of packages uploaded to Jamf Pro

  • Get Package

    Retrieve a single package by its ID

Policys

  • Create Policy

    Create a new policy on the Jamf Pro server

  • Update Policy

    Update an existing policy on the Jamf Pro server

  • Delete Policy

    Delete a policy from the Jamf Pro server

Computer Extension Attributes

  • List Computer Extension Attributes

    Retrieve a paginated list of computer extension attribute definitions from Jamf Pro

  • Get Computer Extension Attribute

    Retrieve a single computer extension attribute definition by its ID

Mobile Device Extension Attributes

  • List Mobile Device Extension Attributes

    Retrieve a paginated list of mobile device extension attribute definitions from Jamf Pro

  • Get Mobile Device Extension Attribute

    Retrieve a single mobile device extension attribute definition by its ID

User Extension Attributes

  • List User Extension Attributes

    Retrieve all user extension attribute definitions from Jamf Pro

  • Get User Extension Attribute

    Retrieve a single user extension attribute definition by its ID

Computer Prestages

  • List Computer Prestages

    Retrieve a paginated list of computer PreStage enrollments from Jamf Pro

  • Get Computer Prestage

    Retrieve a single computer PreStage enrollment by its ID

Computer Prestage Scopes

  • Add Computer Prestage Scope

    Add serial numbers to the device scope of a computer PreStage enrollment

  • Get Computer Prestage Scope

    Retrieve the serial numbers assigned to a computer PreStage enrollment

  • List Computer Prestage Scopes

    Retrieve the serial number assignments for all computer PreStage enrollments

  • Remove Computer Prestage Scope

    Remove serial numbers from the device scope of a computer PreStage enrollment

Mobile Device Prestages

  • List Mobile Device Prestages

    Retrieve a paginated list of mobile device PreStage enrollments from Jamf Pro

  • Get Mobile Device Prestage

    Retrieve a single mobile device PreStage enrollment by its ID

Mobile Device Prestage Scopes

  • Add Mobile Device Prestage Scope

    Add serial numbers to the device scope of a mobile device PreStage enrollment

  • Get Mobile Device Prestage Scope

    Retrieve the serial numbers assigned to a mobile device PreStage enrollment

  • List Mobile Device Prestage Scopes

    Retrieve the serial number assignments for all mobile device PreStage enrollments

  • Remove Mobile Device Prestage Scope

    Remove serial numbers from the device scope of a mobile device PreStage enrollment

Patch Software Title Configurations

  • List Patch Software Title Configurations

    Retrieve all patch software title configurations from Jamf Pro

  • Get Patch Software Title Configuration

    Retrieve a single patch software title configuration by its ID

App Installer Titles

  • List App Installer Titles

    Retrieve a paginated list of Jamf App Catalog titles available as App Installers

  • Get App Installer Title

    Retrieve a single Jamf App Catalog title by its ID

App Installer Deployments

  • Create App Installer Deployment

    Deploy a Jamf App Catalog title to a computer smart group with App Installers

  • List App Installer Deployments

    Retrieve a paginated list of App Installer deployments from Jamf Pro

  • Get App Installer Deployment

    Retrieve a single App Installer deployment by its ID

Mac Applications

  • List Mac Applications

    Retrieve all Mac App Store apps managed in Jamf Pro

  • Get Mac Application

    Retrieve a single Mac App Store app record by its ID

Mobile Device Applications

  • List Mobile Device Applications

    Retrieve all mobile device apps managed in Jamf Pro

  • Get Mobile Device Application

    Retrieve a single mobile device app record by its ID

Restricted Softwares

  • List Restricted Software

    Retrieve all restricted software records from Jamf Pro

  • Get Restricted Software

    Retrieve a single restricted software record by its ID

Printers

  • Create Printer

    Add a new printer to Jamf Pro

  • List Printers

    Retrieve all printers configured in Jamf Pro

  • Get Printer

    Retrieve a single printer by its ID

  • Update Printer

    Update an existing printer in Jamf Pro

Unified Groups

  • List Unified Groups

    List unified groups (Jamf Pro account groups) in Jamf Pro.

  • Get Unified Group

    Get a unified Jamf Pro account group by ID.

Unified Roles

  • List Unified Roles

    List unified roles (Jamf Pro privilege sets) in Jamf Pro.

  • Get Unified Role

    Get a unified Jamf Pro privilege set by ID.

Unified Users

  • List Unified Users

    List unified users (Jamf Pro user accounts) in Jamf Pro.

  • Get Unified User

    Get a unified Jamf Pro user account by ID.

Other (20)

  • Get Computer Detail

    Retrieve ALL sections of a single computer inventory record at once by its Jamf Pro ID. Use only when the user has explicitly asked for the full/complete computer details.

  • Get Computer FileVault

    Retrieve FileVault disk-encryption information for a specific computer

  • Search Computer Smart Groups

    Retrieve a paginated list of smart computer groups from Jamf Pro

  • Search Computer Static Groups

    Retrieve a paginated list of static computer groups from Jamf Pro

  • Get Mobile Device Detail

    Retrieve the full inventory detail record for a mobile device

  • Get Categories

    Retrieve a list of category objects from Jamf Pro

  • Get MacOS Configuration Profile

    Retrieve a single macOS configuration profile by its ID

  • Get Mobile Device Configuration Profile

    Retrieve a single mobile device configuration profile by its ID

  • List Patch Policies

    Retrieve a paginated list of patch policies from Jamf Pro

  • Get Unified Credentials

    Get the current Jamf Pro connection's unified credentials and identity.

  • Update Static Computer Group Membership

    Add computers to or remove computers from a static computer group

  • Erase Mobile Device

    Queue a remote wipe (Erase Device) MDM command for a mobile device

  • Replace Script

    Replace an existing script in Jamf Pro

  • Find Policies

    Retrieve a list of all policies from the Jamf Pro server

  • Find Policy

    Retrieve a single policy by its Jamf Pro ID

  • Find Policies By Category

    Retrieve all policies assigned to a category

  • Find MacOS Configuration Profiles

    Retrieve a list of all macOS configuration profiles from Jamf Pro

  • Find Mobile Device Configuration Profiles

    Retrieve a list of all mobile device (iOS/iPadOS) configuration profiles from Jamf Pro

  • Replace Computer Prestage Scope

    Replace the whole device scope of a computer PreStage enrollment

  • Replace Mobile Device Prestage Scope

    Replace the whole device scope of a mobile device PreStage enrollment

Set Up Your Jamf Pro MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Jamf Pro in under 10 lines of code.

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More developer MCP Servers

Wiz

696+ actions

IONOS

501+ actions

Workiva

266+ actions

KnowBe4

259+ actions

HighLevel

251+ actions

WorkOS

234+ actions

SAP Concur

232+ actions

Jamf Pro MCP Server FAQ

Does StackOne have a Jamf Pro MCP server?
Yes. StackOne offers a managed Jamf Pro MCP server with 109 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Jamf Pro MCP server vs direct API integration: what's the difference?
A Jamf Pro MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software work, where backend code calls Jamf Pro. A Jamf Pro MCP server is for AI agents that discover and call Jamf Pro at runtime, such as MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI. StackOne provides both.
How does Jamf Pro authentication work for AI agents?
Jamf Pro authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK to get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Jamf Pro account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are Jamf Pro MCP tools vulnerable to prompt injection?
Yes. Jamf Pro MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content, such as documents, messages, tickets, records, or free-text fields, is a potential vector. StackOne Defender scans every tool response before it enters the agent's context. It runs regex patterns in ~1ms, then a MiniLM classifier in ~4ms. Accuracy is 88.7%, and it runs entirely on CPU.
What is the context bloat of a Jamf Pro agent and how do I avoid it?
Context bloat happens when Jamf Pro tool schemas and API responses eat your Jamf Pro agent's memory, preventing it from reasoning effectively. A single Jamf Pro query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery reduces it by loading only the tools relevant to each query.
Can I limit which actions my Jamf Pro agent can access?
Yes. You can limit which actions your Jamf Pro agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Jamf Pro MCP server?
Yes. You can create custom agent actions for your Jamf Pro MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Jamf Pro's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Jamf Pro MCP server?
Skip a Jamf Pro MCP server if your integration is purely software-to-software, because direct Jamf Pro API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Jamf Pro actions at runtime.
What AI frameworks and AI clients does the StackOne Jamf Pro MCP server support?
The StackOne Jamf Pro MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

Connect AI to every company system and control what it can do in each one, down to the field.