Skip to content

Connectors · MSP & PSA

Jamf Pro MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Jamf Pro and the rest of your systems. It gives your agent 1,177 Jamf Pro actions (591 reads, 393 writes and 193 that wait for a confirmation) and holds the Jamf Pro credential itself, so the agent never does. It paces Jamf Pro's limits and records every call.

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "jamf_pro.users.list",  intent: "check which Jamf Pro account is connected"}# Retrieve users with pagination and filtering · read · 1 upstream call
  • 1,177actionsin one signed file
  • 591readlook, never change
  • 393writecreate and update
  • 193wait for a yesdestructive, confirmed first

Set up

Connect Jamf Pro in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Jamf Pro.

    OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.

    • client_idClient ID of a Jamf Pro API client
    • client_secretClient secret generated for that API client (shown once)
    • tenant_hostWhere your Jamf Pro lives: your tenant host
    account { op: "connections.requirements", service: "jamf_pro" }
    # free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "jamf_pro.users.list" }# retrieve users with pagination and filtering · read · 1 upstream callcheck { action: "jamf_pro.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Jamf Pro at a glance

Sign-in
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide
client_idclient_secret
Setup fields
tenant_host
Limits we pace to
300 calls a minute, per connection
API covered
Jamf Pro API 11.33.0 (OpenAPI 3.0.1) and Classic API 11.32.0 (OpenAPI 3.0.0), at your Jamf Pro instance's API base URL, which you enter when connecting
Built from
Jamf Pro's documentation, read 23 October 2026developer.jamf.comdeveloper.jamf.comdeveloper.jamf.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
563 of 591 reads, for up to 5 minutes; a write clears what it affects
Shared entities
4, so ask can line Jamf Pro up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Jamf Pro.

1,177 actions in 189 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 591readlook, never change
  • 393writecreate and update
  • 193destructivewait for a confirmation
  1. Computermanagement

    25

    25 read · 0 write · 0 destructive

    Finds computer management information by ID · Display patch management information for a computer and filter · Finds a subset of computer management information by ID · Finds management information for a computer and username

  2. Mobiledevices

    22

    11 read · 6 write · 5 destructive

    Creates a new mobile device by ID · Finds all mobile devices · Finds mobile devices by ID · Finds mobile devices by Mac address

  3. Accounts

    20

    7 read · 8 write · 5 destructive

    Adds new account · Get user accounts · Creates a new group by ID · Creates a new account by ID

  4. Enrollment

    20

    10 read · 7 write · 3 destructive

    Configure Access Management settings · Add the configured LDAP group for User-Initiated Enrollment · Retrieve the configured LDAP groups configured for User-Initiated Enrollment · Retrieve the list of languages and corresponding ISO 639-1 Codes but only those not already added to Enrollment

  5. Enrollment customization preview

    17

    7 read · 6 write · 4 destructive

    Parse the given string as markdown text and return Html output · Create an LDAP Panel for a single Enrollment Customization · Get all Panels for single Enrollment Customization · Create an SSO Panel for a single Enrollment Customization

  6. Managed software updates

    17

    13 read · 4 write · 0 destructive

    Create a Managed Software Update Plan · Retrieve Managed Software Update Plans · Force stops any ongoing or stalled feature-toggle processes · Create Managed Software Update Plans for a Group

  7. Mobile device prestages

    17

    9 read · 5 write · 3 destructive

    Create a Mobile Device Prestage · Get sorted and paged Mobile Device Prestages · Get all Prestage sync States for all prestages · Get attachments for a Mobile Device Prestage

  8. Packages

    17

    6 read · 6 write · 5 destructive

    Retrieve Packages · Create package · Get specified Package object · Update specified package object

181 more areas · 1,022 actions
  • Buildings 16
  • Categories 16
  • Patch software title configurations 16
  • Users 16
  • Departments 15
  • Mobiledeviceapplications 15
  • Scripts 15
  • Mobile device groups 14
  • Computer inventory 13
  • Mobiledeviceprovisioningprofiles 13
  • Cloud ldap 12
  • Computer groups 12
  • Device enrollments 12
  • Ebooks 12
  • Local admin password 12
  • Mobiledeviceenrollmentprofiles 12
  • Cloud distribution point 11
  • Computer extension attributes 11
  • Team viewer remote administration 11
  • Computer prestages 10
  • Computerhardwaresoftwarereports 10
  • Computerhistory 10
  • Jamf protect 10
  • Sites 10
  • Venafi preview 10
  • Volume purchasing locations 10
  • Distribution point 9
  • Inventory preload 9
  • Macapplications 9
  • Mobiledeviceconfigurationprofiles 9
  • Mobiledevicehistory 9
  • Osxconfigurationprofiles 9
  • Policies 9
  • Adcs settings 8
  • Advancedcomputersearches 8
  • Advancedmobiledevicesearches 8
  • Advancedusersearches 8
  • App request preview 8
  • Byoprofiles 8
  • Classes 8
  • Computerextensionattributes 8
  • Computergroups 8
  • Directorybindings 8
  • Diskencryptionconfigurations 8
  • Distributionpoints 8
  • Dockitems 8
  • Enrollment customization 8
  • Ibeacons 8
  • Licensedsoftware 8
  • Mobile device extension attributes 8
  • Mobile devices 8
  • Mobiledevicecommands 8
  • Mobiledeviceextensionattributes 8
  • Mobiledevicegroups 8
  • Networksegments 8
  • Patchexternalsources 8
  • Printers 8
  • Removablemacaddresses 8
  • Restrictedsoftware 8
  • Softwareupdateservers 8
  • SSO settings 8
  • Userextensionattributes 8
  • Usergroups 8
  • Webhooks 8
  • Advanced mobile device searches 7
  • Cloud idp 7
  • Computerinvitations 7
  • Digicert 7
  • Jamf connect 7
  • Ldapservers 7
  • Mobiledeviceinvitations 7
  • Onboarding 7
  • Volume purchasing subscriptions 7
  • API integrations 6
  • Computercommands 6
  • GSX connection 6
  • Patch policy logs 6
  • SMTP server 6
  • Supervision identities preview 6
  • Advanced user content searches 5
  • Allowedfileextensions 5
  • API roles 5
  • Cloud azure 5
  • Computerapplicationusage 5
  • Jsonwebtokenconfigurations 5
  • Ldap 5
  • Log flushing 5
  • MDM 5
  • Oidc 5
  • Patch policies 5
  • Patchpolicies 5
  • Peripherals 5
  • Peripheraltypes 5
  • Return to service 5
  • Self service branding ios 5
  • Self service branding macos 5
  • SSO certificate 5
  • Vppaccounts 5
  • Vppassignments 5
  • Vppinvitations 5
  • Activation code 4
  • Apns client push status 4
  • Client check in 4
  • Computer inventory collection settings 4
  • Computerapplications 4
  • Declarative device management 4
  • Device communication settings 4
  • Groups 4
  • Healthcarelistenerrule 4
  • Jamf pro initialization 4
  • Jamf pro server URL preview 4
  • Jamf pro user account settings 4
  • Jamf remote assist 4
  • MDM renewal 4
  • Parent app preview 4
  • Re enrollment preview 4
  • Self service 4
  • Teacher app 4
  • Computerreports 3
  • Conditional access 3
  • Csa 3
  • Dock items 3
  • Healthcarelistener 3
  • Infrastructuremanager 3
  • Jamf pro notifications 3
  • Logflush 3
  • Patchinternalsources 3
  • Scheduler 3
  • Self service plus 3
  • Account groups 2
  • API role privileges 2
  • Cache settings 2
  • Certificate authority 2
  • Commandflush 2
  • Computercheckin 2
  • Computerinventorycollection 2
  • Computers 2
  • Dashboard 2
  • Gsxconnection 2
  • Health check 2
  • Impact alert notification settings 2
  • Jamf package 2
  • Jamf pro account preferences 2
  • Login customization 2
  • Policies preview 2
  • Service discovery enrollment 2
  • Slasa 2
  • Smart computer groups preview 2
  • Smart mobile device groups preview 2
  • Smart user groups preview 2
  • Smtpserver 2
  • SSO failover 2
  • Static user groups preview 2
  • User session preview 2
  • User sessions 2
  • API authentication 1
  • App store country codes preview 1
  • Classic ldap 1
  • Cloud information 1
  • Computers preview 1
  • Device enrollments devices 1
  • Devices 1
  • Fileuploads 1
  • Icon 1
  • Inventory information 1
  • Jamf management framework 1
  • Jamf pro information 1
  • Jamf pro version 1
  • Last login 1
  • Locales preview 1
  • M2M 1
  • Mobile device apps 1
  • Mobile device extension attributes preview 1
  • Patch management 1
  • Patchavailabletitles 1
  • Remote administration 1
  • SSO oauth session tokens 1
  • Startup status 1
  • Time zones preview 1
  • Tomcat settings preview 1
  • User 1

Top actions

The Jamf Pro API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 28 of Jamf Pro's 28 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
jamf_pro.users.listRetrieve users with pagination and filteringRetrieve users with pagination and filteringreadidentity.user.list474 connectors
jamf_pro.computers_inventory.listReturn paginated Computer Inventory recordsReturn paginated Computer Inventory recordsreaddevice.endpoint.list65 connectors
jamf_pro.api_roles.listGet the current Jamf API RolesGet the current Jamf API Rolesreadidentity.role.list184 connectors
jamf_pro.users.createCreate a new user in inventoryCreate a new user in inventorywriteidentity.user.create262 connectors
jamf_pro.api_roles.createCreate a new API roleCreate a new API rolewriteidentity.role.create105 connectors
jamf_pro.computers_inventory.getReturn General section of a ComputerReturn General section of a Computerreaddevice.endpoint.get57 connectors
jamf_pro.users.deleteDelete a user from inventoryDelete a user from inventorydestructiveidentity.user.delete253 connectors
jamf_pro.auth.getGet all the Authorization details associated with the current apiGet all the Authorization details associated with the current apireadidentity.current_user.get307 connectors
jamf_pro.packages.listRetrieve PackagesRetrieve Packagesreaddevice.software_package.list6 connectors
jamf_pro.scripts.listSearch for sorted and paged ScriptsSearch for sorted and paged Scriptsreaddevice.script.list5 connectors
jamf_pro.scripts.createCreate a ScriptCreate a Scriptwritedevice.script.create4 connectors
jamf_pro.packages.createCreate packageCreate packagewritedevice.software_package.create3 connectors

Try it

Prompts to paste into Claude.

Each one names the Jamf Pro actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which Jamf Pro devices have not checked in for a week?

    callsjamf_pro.computers_inventory.list

  2. Writewrite

    Create a new user in inventory in Jamf Pro. Show me exactly what you will send before you save it.

    callsjamf_pro.users.create

Governance for Jamf Pro

Destructive actions wait for a yes.

193 Jamf Pro actions are destructive. The first 10:

  • Delete a user from inventoryjamf_pro.users.delete
  • Remove specified Computer recordjamf_pro.computers_inventory.delete
  • Delete API Integrations Rolejamf_pro.api_roles.delete
  • Erase a computerjamf_pro.computers_inventory.erase
  • Delete a Script at the specified idjamf_pro.scripts.delete
  • Remove specified packagejamf_pro.packages.delete
  • Disable SSOjamf_pro.sso.disable
  • Delete a group by platform UUIDjamf_pro.groups.delete
  • Deletes the user accountjamf_pro.accounts.delete
  • Delete the currently configured certificate used by SSOjamf_pro.sso_cert.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dojamf_pro.users.deleteconfirm_policy: human

Delete a user from inventory?

intent: the user asked me to delete a user from inventory

run suspended · waiting for a named person · key jamf-pro-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "jamf-pro-agent",  allowed_actions: ["jamf_pro.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "jamf_pro.users.delete", approver: "[email protected]" },    { match: "jamf_pro.computers_inventory.delete", approver: "[email protected]" },    { match: "jamf_pro.api_roles.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Jamf Pro only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Jamf Pro costs on actionlake.

Every Jamf Pro action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Jamf Pro refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 1,177 Jamf Pro actions
  • 1,177actions pageeach page of a long list is one call
  • 563reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Jamf Pro action.

1,177 actions by area: the id your agent calls, what it does, and its effect.

Computermanagement25
  • jamf_pro.classic_computermanagement.getFinds computer management information by IDread
  • jamf_pro.classic_computermanagement.get_by_id_patchfilterDisplay patch management information for a computer and filterread
  • and 23 more in this area
Mobiledevices22
  • jamf_pro.classic_mobiledevices.createCreates a new mobile device by IDwrite
  • jamf_pro.classic_mobiledevices.getFinds mobile devices by IDread
  • and 20 more in this area
Accounts20
  • jamf_pro.accounts.createAdds new accountwrite
  • jamf_pro.accounts.listGet user accountsread
  • and 18 more in this area
Enrollment20
  • jamf_pro.enrollment.access_managementConfigure Access Management settingswrite
  • jamf_pro.enrollment_access_groups.createAdd the configured LDAP group for User-Initiated Enrollmentwrite
  • and 18 more in this area
Enrollment customization preview17
  • jamf_pro.enrollment_customization.parse_markdownParse the given string as markdown text and return Html outputread
  • jamf_pro.enrollment_customization_ldap.createCreate an LDAP Panel for a single Enrollment Customizationwrite
  • and 15 more in this area
Managed software updates17
  • jamf_pro.managed_software_updates_plans.createCreate a Managed Software Update Planwrite
  • jamf_pro.managed_software_updates_plans.listRetrieve Managed Software Update Plansread
  • and 15 more in this area
Mobile device prestages17
  • jamf_pro.mobile_device_prestages.createCreate a Mobile Device Prestagewrite
  • jamf_pro.mobile_device_prestages.listGet sorted and paged Mobile Device Prestagesread
  • and 15 more in this area
Packages17
  • jamf_pro.packages.createCreate packagewrite
  • jamf_pro.packages.getGet specified Package objectread
  • and 15 more in this area
Buildings16
  • jamf_pro.buildings.createCreate Building recordwrite
  • jamf_pro.buildings.listSearch for sorted and paged Buildingsread
  • and 14 more in this area
Categories16
  • jamf_pro.categories.createCreate Category recordwrite
  • jamf_pro.categories.listGet Category objectsread
  • and 14 more in this area
Patch software title configurations16
  • jamf_pro.patch_software_title_configurations.createCreate Patch Software Title Configurationswrite
  • jamf_pro.patch_software_title_configurations.dashboardAdd a software title configuration to the dashboardwrite
  • and 14 more in this area
Users16
  • jamf_pro.users.createCreate a new user in inventorywrite
  • jamf_pro.users.getRetrieve a user by IDread
  • and 14 more in this area
Departments15
  • jamf_pro.classic_departments.createCreates a new department by IDwrite
  • jamf_pro.classic_departments.listFinds all departmentsread
  • and 13 more in this area
Mobiledeviceapplications15
  • jamf_pro.classic_mobiledeviceapplications.createCreates a new mobile device application by IDwrite
  • jamf_pro.classic_mobiledeviceapplications.getFinds mobile device applications by IDread
  • and 13 more in this area
Scripts15
  • jamf_pro.scripts.createCreate a Scriptwrite
  • jamf_pro.scripts.getRetrieve a full script objectread
  • and 13 more in this area
Mobile device groups14
  • jamf_pro.mobile_device_groups.listReturn the list of all Mobile Device Groupsread
  • jamf_pro.mobile_device_groups_smart_groups.createCreate a smart groupwrite
  • and 12 more in this area
Computer inventory13
  • jamf_pro.computers_inventory.deleteRemove specified Computer recorddestructive
  • jamf_pro.computers_inventory.getReturn General section of a Computerread
  • and 11 more in this area
Mobiledeviceprovisioningprofiles13
  • jamf_pro.classic_mobiledeviceprovisioningprofiles.createCreates a mobile device provisioning profiles by idwrite
  • jamf_pro.classic_mobiledeviceprovisioningprofiles.create_by_nameCreates a mobile device provisioning profiles by namewrite
  • and 11 more in this area
Cloud ldap12
  • jamf_pro.cloud_ldaps.createCreate Cloud Identity Provider configurationwrite
  • jamf_pro.cloud_ldaps.getGet Cloud Identity Provider configuration with given idread
  • and 10 more in this area
Computer groups12
  • jamf_pro.computer_groups.listReturns the list of all computer groupsread
  • jamf_pro.computer_groups_smart_groups.createCreate a Smart Computer Groupwrite
  • and 10 more in this area
Device enrollments12
  • jamf_pro.device_enrollments.create_from_tokenCreate a Device Enrollment Instance with the supplied Tokenwrite
  • jamf_pro.device_enrollments.listRead all sorted and paged Device Enrollment instancesread
  • and 10 more in this area
Ebooks12
  • jamf_pro.classic_ebooks.createCreates a new ebook by IDwrite
  • jamf_pro.classic_ebooks.getFinds ebooks by IDread
  • and 10 more in this area
Local admin password12
  • jamf_pro.local_admin_password_account_audit.listGet LAPS password viewed historyread
  • jamf_pro.local_admin_password_account_audit_by_guid.listGet LAPS password viewed historyread
  • and 10 more in this area
Mobiledeviceenrollmentprofiles12
  • jamf_pro.classic_mobiledeviceenrollmentprofiles.createCreates a new mobile device enrollment profile by IDwrite
  • jamf_pro.classic_mobiledeviceenrollmentprofiles.getFinds mobile device enrollment profiles by IDread
  • and 10 more in this area
Cloud distribution point11
  • jamf_pro.cloud_distribution_point.createCreate cloud distribution pointwrite
  • jamf_pro.cloud_distribution_point.refresh_inventoryUpdates inventory data for the currently configured cloud distribution pointwrite
  • and 9 more in this area
Computer extension attributes11
  • jamf_pro.computer_extension_attributes.createCreate Computer Extension Attributewrite
  • jamf_pro.computer_extension_attributes.listRetrieve Computer Extension Attributesread
  • and 9 more in this area
Team viewer remote administration11
  • jamf_pro.remote_administration_configurations_team_viewer.createCreate Team Viewer Remote Administration connection configurationwrite
  • jamf_pro.remote_administration_configurations_team_viewer_sessions.closeClose a sessionwrite
  • and 9 more in this area
Computer prestages10
  • jamf_pro.computer_prestages.createCreate a Computer Prestagewrite
  • jamf_pro.computer_prestages.getRetrieve a Computer Prestage with the supplied idread
  • and 8 more in this area
Computerhardwaresoftwarereports10
  • jamf_pro.classic_computerhardwaresoftwarereports.get_by_idFinds hardware/software reports by computer IDread
  • jamf_pro.classic_computerhardwaresoftwarereports.get_by_id_subsetFinds a subset of hardware/software reports by computer IDread
  • and 8 more in this area
Computerhistory10
  • jamf_pro.classic_computerhistory.getFinds computer history by IDread
  • jamf_pro.classic_computerhistory.get_by_id_subsetFinds a subset of computer history data by IDread
  • and 8 more in this area

Jamf protect 10Sites 10Venafi preview 10Volume purchasing locations 10Distribution point 9Inventory preload 9Macapplications 9Mobiledeviceconfigurationprofiles 9Mobiledevicehistory 9Osxconfigurationprofiles 9Policies 9Adcs settings 8Advancedcomputersearches 8Advancedmobiledevicesearches 8Advancedusersearches 8App request preview 8Byoprofiles 8Classes 8Computerextensionattributes 8Computergroups 8Directorybindings 8Diskencryptionconfigurations 8Distributionpoints 8Dockitems 8Enrollment customization 8Ibeacons 8Licensedsoftware 8Mobile device extension attributes 8Mobile devices 8Mobiledevicecommands 8Mobiledeviceextensionattributes 8Mobiledevicegroups 8Networksegments 8Patchexternalsources 8Printers 8Removablemacaddresses 8Restrictedsoftware 8Softwareupdateservers 8SSO settings 8Userextensionattributes 8Usergroups 8Webhooks 8Advanced mobile device searches 7Cloud idp 7Computerinvitations 7Digicert 7Jamf connect 7Ldapservers 7Mobiledeviceinvitations 7Onboarding 7Volume purchasing subscriptions 7API integrations 6Computercommands 6GSX connection 6Patch policy logs 6SMTP server 6Supervision identities preview 6Advanced user content searches 5Allowedfileextensions 5API roles 5Cloud azure 5Computerapplicationusage 5Jsonwebtokenconfigurations 5Ldap 5Log flushing 5MDM 5Oidc 5Patch policies 5Patchpolicies 5Peripherals 5Peripheraltypes 5Return to service 5Self service branding ios 5Self service branding macos 5SSO certificate 5Vppaccounts 5Vppassignments 5Vppinvitations 5Activation code 4Apns client push status 4Client check in 4Computer inventory collection settings 4Computerapplications 4Declarative device management 4Device communication settings 4Groups 4Healthcarelistenerrule 4Jamf pro initialization 4Jamf pro server URL preview 4Jamf pro user account settings 4Jamf remote assist 4MDM renewal 4Parent app preview 4Re enrollment preview 4Self service 4Teacher app 4Computerreports 3Conditional access 3Csa 3Dock items 3Healthcarelistener 3Infrastructuremanager 3Jamf pro notifications 3Logflush 3Patchinternalsources 3Scheduler 3Self service plus 3Account groups 2API role privileges 2Cache settings 2Certificate authority 2Commandflush 2Computercheckin 2Computerinventorycollection 2Computers 2Dashboard 2Gsxconnection 2Health check 2Impact alert notification settings 2Jamf package 2Jamf pro account preferences 2Login customization 2Policies preview 2Service discovery enrollment 2Slasa 2Smart computer groups preview 2Smart mobile device groups preview 2Smart user groups preview 2Smtpserver 2SSO failover 2Static user groups preview 2User session preview 2User sessions 2API authentication 1App store country codes preview 1Classic ldap 1Cloud information 1Computers preview 1Device enrollments devices 1Devices 1Fileuploads 1Icon 1Inventory information 1Jamf management framework 1Jamf pro information 1Jamf pro version 1Last login 1Locales preview 1M2M 1Mobile device apps 1Mobile device extension attributes preview 1Patch management 1Patchavailabletitles 1Remote administration 1SSO oauth session tokens 1Startup status 1Time zones preview 1Tomcat settings preview 1User 1

This index shows a sample of each area. All 1,177 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Jamf Pro MCP server, answered.

Is there a Jamf Pro MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,177 Jamf Pro actions across computermanagement, mobiledevices, accounts and enrollment, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Jamf Pro.

What do I need to connect Jamf Pro?

Client ID of a Jamf Pro API client and Client secret generated for that API client (shown once). Plus your tenant host. The free call account { op: "connections.requirements", service: "jamf_pro" } lists exactly what to paste.

Can an AI agent delete or change things in Jamf Pro?

Only if its key allows it, and only with an explicit confirmation. 193 Jamf Pro actions are destructive, including delete a user from inventory, remove specified Computer record and delete API Integrations Role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Jamf Pro API limit?

actionlake paces every call to the limits in the Jamf Pro service file: 300 calls a minute per connection. Repeated reads are answered from cache (563 Jamf Pro actions can be), which never reaches Jamf Pro.

What does a Jamf Pro action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,177 Jamf Pro actions page). Cache hits, searches, dry runs and calls Jamf Pro refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Jamf Pro API does it cover?

The Jamf Pro API 11.33.0 (OpenAPI 3.0.1) and Classic API 11.32.0 (OpenAPI 3.0.0) at your Jamf Pro instance's API base URL, which you enter when connecting. It is built from Jamf Pro's documentation as read on 23 October 2026. 1,177 actions in 189 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Jamf Pro data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Jamf Pro credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Jamf Pro today.

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.