Skip to main content

The #1 agentic semantic tool search: 91.6% first-try accuracy on S1 Search Bench Explore Tool Discovery

Live 55 Actions

Jamf Pro MCP Server
for AI Agents

Connect your AI agent to StackOne's Jamf Pro MCP server and give it 55 MCP tools out of the box. Auth, tool execution, and security all managed.

Jamf Pro logo
Jamf Pro MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

55 Agent Actions

Create, read, update, and delete across Jamf Pro — and extend your agent's capabilities with custom actions.

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Jamf Pro MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Jamf Pro tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Jamf Pro call.

Tools Discovery →

What is the Jamf Pro MCP Server?

A Jamf Pro MCP server lets AI agents read and write Jamf Pro data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Jamf Pro MCP server ships with 55 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Jamf Pro MCP Tools

Every action from Jamf Pro's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Computers

  • List Computers

    Retrieve a paginated list of computer inventory records from Jamf Pro

  • Get Computer

    Retrieve the General section (or selected sections) of a single computer by its Jamf Pro ID

  • Update Computer

    Update specific fields on a computer inventory record in Jamf Pro

  • Delete Computer

    Permanently remove a computer inventory record from Jamf Pro

Smart Computer Groups

  • Create Smart Computer Group

    Create a new smart computer group with criteria-based dynamic membership

  • List Smart Computer Groups

    Retrieve a paginated list of smart computer groups from Jamf Pro

  • Get Smart Computer Group

    Retrieve a single smart computer group by its Jamf Pro ID

  • Delete Smart Computer Group

    Delete a smart computer group from Jamf Pro by its ID

Static Computer Groups

  • Create Static Computer Group

    Create a new static computer group with an explicit set of computer assignments

  • List Static Computer Groups

    Retrieve a paginated list of static computer groups from Jamf Pro

  • Get Static Computer Group

    Retrieve a single static computer group by its Jamf Pro ID

  • Delete Static Computer Group

    Delete a static computer group from Jamf Pro by its ID

Mobile Devices

  • List Mobile Devices

    Retrieve a paginated list of mobile devices enrolled in Jamf Pro

  • Get Mobile Device

    Retrieve a single mobile device by its Jamf Pro instance ID

  • Update Mobile Device

    Update user-modifiable fields on an existing mobile device record

Mobile Device Smart Groups

  • Create Mobile Device Smart Group

    Create a new mobile device smart group in Jamf Pro

  • List Mobile Device Smart Groups

    Retrieve a paginated list of mobile device smart groups from Jamf Pro

  • Get Mobile Device Smart Group

    Retrieve a single mobile device smart group from Jamf Pro by its identifier

Mobile Device Static Groups

  • Create Mobile Device Static Group

    Create a new mobile device static group in Jamf Pro

  • List Mobile Device Static Groups

    Retrieve a paginated list of mobile device static groups from Jamf Pro

  • Get Mobile Device Static Group

    Retrieve a single mobile device static group from Jamf Pro by its identifier

Users

  • Create User

    Create a new end-user inventory record in Jamf Pro

  • List Users

    Retrieve a paginated list of end-user inventory records from Jamf Pro

  • Get User

    Retrieve a single Jamf Pro end-user record by its ID

  • Update User

    Update an existing end-user inventory record in Jamf Pro

  • Delete User

    Delete an end-user inventory record from Jamf Pro

Scripts

  • Create Script

    Create a new script in Jamf Pro

  • List Scripts

    Retrieve a list of scripts from Jamf Pro

  • Get Script

    Retrieve a single script by its Jamf Pro ID

  • Update Script

    Replace an existing script in Jamf Pro

  • Delete Script

    Delete a script from Jamf Pro

Categorys

  • Create Category

    Create a new category record in Jamf Pro

  • Get Category

    Retrieve a single category by its Jamf Pro ID

  • Delete Category

    Remove a category record from Jamf Pro

Buildings

  • Create Building

    Create a new building record in Jamf Pro

  • List Buildings

    Retrieve a paginated list of buildings from Jamf Pro

  • Get Building

    Retrieve a single building by its Jamf Pro ID

  • Delete Building

    Delete a building record from Jamf Pro

Departments

  • Create Department

    Create a new department record in Jamf Pro

  • List Departments

    Retrieve a paginated list of departments from the Jamf Pro instance

  • Delete Department

    Delete a department record from Jamf Pro

MDM Commands

  • Send MDM Command

    Send an MDM command to one or more managed devices in Jamf Pro

  • List MDM Commands

    Retrieve a list of MDM commands queued or completed in the Jamf Pro account

Policys

  • Create Policy

    Create a new policy on the Jamf Pro server using raw XML

  • Get Policy

    Retrieve a single policy by its Jamf Pro ID

  • Update Policy

    Update an existing policy on the Jamf Pro server using raw XML

  • Delete Policy

    Delete a policy from the Jamf Pro server

Other (8)

  • Get Computer Detail

    Retrieve all sections of a single computer inventory record by its Jamf Pro ID

  • Get Computer FileVault

    Retrieve FileVault disk-encryption information for a specific computer

  • Get Mobile Device Detail

    Retrieve the full inventory detail record for a mobile device

  • List Categories

    Retrieve a list of category objects from Jamf Pro

  • List Policies

    Retrieve a list of all policies from the Jamf Pro server

  • List MacOS Configuration Profiles

    Retrieve a list of all macOS configuration profiles from Jamf Pro

  • List Mobile Device Configuration Profiles

    Retrieve a list of all mobile device (iOS/iPadOS) configuration profiles from Jamf Pro

  • Erase Mobile Device

    Queue a remote wipe (Erase Device) MDM command for a mobile device

Set Up Your Jamf Pro MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Jamf Pro in under 10 lines of code.

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Jamf Pro MCP Server FAQ

Does StackOne have a Jamf Pro MCP server?
Yes. StackOne offers a hosted Jamf Pro MCP server with 55 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Jamf Pro MCP server vs direct API integration — what's the difference?
A Jamf Pro MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Jamf Pro. A Jamf Pro MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Jamf Pro at runtime. StackOne provides both.
How does Jamf Pro authentication work for AI agents?
Jamf Pro authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Jamf Pro account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are Jamf Pro MCP tools vulnerable to prompt injection?
Yes — Jamf Pro MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Jamf Pro agent and how do I avoid it?
Context bloat happens when Jamf Pro tool schemas and API responses eat your Jamf Pro agent's memory, preventing it from reasoning effectively. A single Jamf Pro query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Jamf Pro agent can access?
Yes — you can limit which actions your Jamf Pro agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Jamf Pro MCP server?
Yes — you can create custom agent actions for your Jamf Pro MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Jamf Pro's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Jamf Pro MCP server?
Skip a Jamf Pro MCP server if your integration is purely software-to-software — direct Jamf Pro API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Jamf Pro actions at runtime.
What AI frameworks and AI clients does the StackOne Jamf Pro MCP server support?
The StackOne Jamf Pro MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.