---
title: "Jamf Pro MCP server for AI agents - actionlake"
description: "Give Claude 1,177 Jamf Pro actions through one MCP server: computermanagement, mobiledevices. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/jamf-pro
updated: 2026-10-23
---

Connectors · MSP & PSA

# Jamf Pro MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Jamf Pro and the rest of your systems. It gives your agent 1,177 Jamf Pro actions (591 reads, 393 writes and 193 that wait for a confirmation) and holds the Jamf Pro credential itself, so the agent never does. It paces Jamf Pro's limits and records every call.

[Connect Jamf Pro free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "jamf_pro.users.list",
  intent: "check which Jamf Pro account is connected"
}
# Retrieve users with pagination and filtering · read · 1 upstream call
```

- 1,177 actions in one signed file
- 591 read look, never change
- 393 write create and update
- 193 wait for a yes destructive, confirmed first

Set up

## Connect Jamf Pro in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect Jamf Pro.
   OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `client_id` Client ID of a Jamf Pro API client
   - `client_secret` Client secret generated for that API client (shown once)
   - `tenant_host` Where your Jamf Pro lives: your tenant host
   ```
   account { op: "connections.requirements", service: "jamf_pro" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "jamf_pro.users.list" }
   # retrieve users with pagination and filtering · read · 1 upstream call
   check { action: "jamf_pro.users.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

Jamf Pro at a glance

**Sign-in**

OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.

**You provide**

`client_id` `client_secret`

**Setup fields**

`tenant_host`

**Limits we pace to**

300 calls a minute, per connection

**API covered**

Jamf Pro API 11.33.0 (OpenAPI 3.0.1) and Classic API 11.32.0 (OpenAPI 3.0.0), at your Jamf Pro instance's API base URL, which you enter when connecting

**Built from**

Jamf Pro's documentation, read 23 October 2026[developer.jamf.com](https://developer.jamf.com/jamf-pro/openapi/jamf-pro-api.json) [developer.jamf.com](https://developer.jamf.com/jamf-pro/openapi/classic-api.json) [developer.jamf.com](https://developer.jamf.com/jamf-pro/reference)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

563 of 591 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

4, so ask can line Jamf Pro up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in Jamf Pro.

1,177 actions in 189 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **591** read look, never change
- **393** write create and update
- **193** destructive wait for a confirmation

1. ### Computermanagement
   25
   25 read · 0 write · 0 destructive
   Finds computer management information by ID · Display patch management information for a computer and filter · Finds a subset of computer management information by ID · Finds management information for a computer and username
2. ### Mobiledevices
   22
   11 read · 6 write · 5 destructive
   Creates a new mobile device by ID · Finds all mobile devices · Finds mobile devices by ID · Finds mobile devices by Mac address
3. ### Accounts
   20
   7 read · 8 write · 5 destructive
   Adds new account · Get user accounts · Creates a new group by ID · Creates a new account by ID
4. ### Enrollment
   20
   10 read · 7 write · 3 destructive
   Configure Access Management settings · Add the configured LDAP group for User-Initiated Enrollment · Retrieve the configured LDAP groups configured for User-Initiated Enrollment · Retrieve the list of languages and corresponding ISO 639-1 Codes but only those not already added to Enrollment
5. ### Enrollment customization preview
   17
   7 read · 6 write · 4 destructive
   Parse the given string as markdown text and return Html output · Create an LDAP Panel for a single Enrollment Customization · Get all Panels for single Enrollment Customization · Create an SSO Panel for a single Enrollment Customization
6. ### Managed software updates
   17
   13 read · 4 write · 0 destructive
   Create a Managed Software Update Plan · Retrieve Managed Software Update Plans · Force stops any ongoing or stalled feature-toggle processes · Create Managed Software Update Plans for a Group
7. ### Mobile device prestages
   17
   9 read · 5 write · 3 destructive
   Create a Mobile Device Prestage · Get sorted and paged Mobile Device Prestages · Get all Prestage sync States for all prestages · Get attachments for a Mobile Device Prestage
8. ### Packages
   17
   6 read · 6 write · 5 destructive
   Retrieve Packages · Create package · Get specified Package object · Update specified package object

**181 more areas · 1,022 actions**

- Buildings **16**
- Categories **16**
- Patch software title configurations **16**
- Users **16**
- Departments **15**
- Mobiledeviceapplications **15**
- Scripts **15**
- Mobile device groups **14**
- Computer inventory **13**
- Mobiledeviceprovisioningprofiles **13**
- Cloud ldap **12**
- Computer groups **12**
- Device enrollments **12**
- Ebooks **12**
- Local admin password **12**
- Mobiledeviceenrollmentprofiles **12**
- Cloud distribution point **11**
- Computer extension attributes **11**
- Team viewer remote administration **11**
- Computer prestages **10**
- Computerhardwaresoftwarereports **10**
- Computerhistory **10**
- Jamf protect **10**
- Sites **10**
- Venafi preview **10**
- Volume purchasing locations **10**
- Distribution point **9**
- Inventory preload **9**
- Macapplications **9**
- Mobiledeviceconfigurationprofiles **9**
- Mobiledevicehistory **9**
- Osxconfigurationprofiles **9**
- Policies **9**
- Adcs settings **8**
- Advancedcomputersearches **8**
- Advancedmobiledevicesearches **8**
- Advancedusersearches **8**
- App request preview **8**
- Byoprofiles **8**
- Classes **8**
- Computerextensionattributes **8**
- Computergroups **8**
- Directorybindings **8**
- Diskencryptionconfigurations **8**
- Distributionpoints **8**
- Dockitems **8**
- Enrollment customization **8**
- Ibeacons **8**
- Licensedsoftware **8**
- Mobile device extension attributes **8**
- Mobile devices **8**
- Mobiledevicecommands **8**
- Mobiledeviceextensionattributes **8**
- Mobiledevicegroups **8**
- Networksegments **8**
- Patchexternalsources **8**
- Printers **8**
- Removablemacaddresses **8**
- Restrictedsoftware **8**
- Softwareupdateservers **8**
- SSO settings **8**
- Userextensionattributes **8**
- Usergroups **8**
- Webhooks **8**
- Advanced mobile device searches **7**
- Cloud idp **7**
- Computerinvitations **7**
- Digicert **7**
- Jamf connect **7**
- Ldapservers **7**
- Mobiledeviceinvitations **7**
- Onboarding **7**
- Volume purchasing subscriptions **7**
- API integrations **6**
- Computercommands **6**
- GSX connection **6**
- Patch policy logs **6**
- SMTP server **6**
- Supervision identities preview **6**
- Advanced user content searches **5**
- Allowedfileextensions **5**
- API roles **5**
- Cloud azure **5**
- Computerapplicationusage **5**
- Jsonwebtokenconfigurations **5**
- Ldap **5**
- Log flushing **5**
- MDM **5**
- Oidc **5**
- Patch policies **5**
- Patchpolicies **5**
- Peripherals **5**
- Peripheraltypes **5**
- Return to service **5**
- Self service branding ios **5**
- Self service branding macos **5**
- SSO certificate **5**
- Vppaccounts **5**
- Vppassignments **5**
- Vppinvitations **5**
- Activation code **4**
- Apns client push status **4**
- Client check in **4**
- Computer inventory collection settings **4**
- Computerapplications **4**
- Declarative device management **4**
- Device communication settings **4**
- Groups **4**
- Healthcarelistenerrule **4**
- Jamf pro initialization **4**
- Jamf pro server URL preview **4**
- Jamf pro user account settings **4**
- Jamf remote assist **4**
- MDM renewal **4**
- Parent app preview **4**
- Re enrollment preview **4**
- Self service **4**
- Teacher app **4**
- Computerreports **3**
- Conditional access **3**
- Csa **3**
- Dock items **3**
- Healthcarelistener **3**
- Infrastructuremanager **3**
- Jamf pro notifications **3**
- Logflush **3**
- Patchinternalsources **3**
- Scheduler **3**
- Self service plus **3**
- Account groups **2**
- API role privileges **2**
- Cache settings **2**
- Certificate authority **2**
- Commandflush **2**
- Computercheckin **2**
- Computerinventorycollection **2**
- Computers **2**
- Dashboard **2**
- Gsxconnection **2**
- Health check **2**
- Impact alert notification settings **2**
- Jamf package **2**
- Jamf pro account preferences **2**
- Login customization **2**
- Policies preview **2**
- Service discovery enrollment **2**
- Slasa **2**
- Smart computer groups preview **2**
- Smart mobile device groups preview **2**
- Smart user groups preview **2**
- Smtpserver **2**
- SSO failover **2**
- Static user groups preview **2**
- User session preview **2**
- User sessions **2**
- API authentication **1**
- App store country codes preview **1**
- Classic ldap **1**
- Cloud information **1**
- Computers preview **1**
- Device enrollments devices **1**
- Devices **1**
- Fileuploads **1**
- Icon **1**
- Inventory information **1**
- Jamf management framework **1**
- Jamf pro information **1**
- Jamf pro version **1**
- Last login **1**
- Locales preview **1**
- M2M **1**
- Mobile device apps **1**
- Mobile device extension attributes preview **1**
- Patch management **1**
- Patchavailabletitles **1**
- Remote administration **1**
- SSO oauth session tokens **1**
- Startup status **1**
- Time zones preview **1**
- Tomcat settings preview **1**
- User **1**

Top actions

## The Jamf Pro API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 28 of Jamf Pro's 28 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `jamf_pro.users.list` Retrieve users with pagination and filtering | Retrieve users with pagination and filtering | read | `identity.user.list` 474 connectors |
| `jamf_pro.computers_inventory.list` Return paginated Computer Inventory records | Return paginated Computer Inventory records | read | `device.endpoint.list` 65 connectors |
| `jamf_pro.api_roles.list` Get the current Jamf API Roles | Get the current Jamf API Roles | read | `identity.role.list` 184 connectors |
| `jamf_pro.users.create` Create a new user in inventory | Create a new user in inventory | write | `identity.user.create` 262 connectors |
| `jamf_pro.api_roles.create` Create a new API role | Create a new API role | write | `identity.role.create` 105 connectors |
| `jamf_pro.computers_inventory.get` Return General section of a Computer | Return General section of a Computer | read | `device.endpoint.get` 57 connectors |
| `jamf_pro.users.delete` Delete a user from inventory | Delete a user from inventory | destructive | `identity.user.delete` 253 connectors |
| `jamf_pro.auth.get` Get all the Authorization details associated with the current api | Get all the Authorization details associated with the current api | read | `identity.current_user.get` 307 connectors |
| `jamf_pro.packages.list` Retrieve Packages | Retrieve Packages | read | `device.software_package.list` 6 connectors |
| `jamf_pro.scripts.list` Search for sorted and paged Scripts | Search for sorted and paged Scripts | read | `device.script.list` 5 connectors |
| `jamf_pro.scripts.create` Create a Script | Create a Script | write | `device.script.create` 4 connectors |
| `jamf_pro.packages.create` Create package | Create package | write | `device.software_package.create` 3 connectors |

Try it

## Prompts to paste into Claude.

Each one names the Jamf Pro actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Which Jamf Pro devices have not checked in for a week?
   calls `jamf_pro.computers_inventory.list`
2. Write write
   Create a new user in inventory in Jamf Pro. Show me exactly what you will send before you save it.
   calls `jamf_pro.users.create`

Governance for Jamf Pro

## Destructive actions wait for a yes.

193 Jamf Pro actions are destructive. The first 10:

- Delete a user from inventory `jamf_pro.users.delete`
- Remove specified Computer record `jamf_pro.computers_inventory.delete`
- Delete API Integrations Role `jamf_pro.api_roles.delete`
- Erase a computer `jamf_pro.computers_inventory.erase`
- Delete a Script at the specified id `jamf_pro.scripts.delete`
- Remove specified package `jamf_pro.packages.delete`
- Disable SSO `jamf_pro.sso.disable`
- Delete a group by platform UUID `jamf_pro.groups.delete`
- Deletes the user account `jamf_pro.accounts.delete`
- Delete the currently configured certificate used by SSO `jamf_pro.sso_cert.delete`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do jamf_pro.users.delete confirm_policy: **human**

Delete a user from inventory?

**intent:** the user asked me to delete a user from inventory

run suspended · waiting for a named person · key _jamf-pro-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "jamf-pro-agent",
  allowed_actions: ["jamf_pro.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "jamf_pro.users.delete", approver: "lead@example.com" },
    { match: "jamf_pro.computers_inventory.delete", approver: "lead@example.com" },
    { match: "jamf_pro.api_roles.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to Jamf Pro only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What Jamf Pro costs on actionlake.

Every Jamf Pro action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Jamf Pro refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 1,177 Jamf Pro actions
- 1,177 actions page each page of a long list is one call
- 563 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every Jamf Pro action.

1,177 actions by area: the id your agent calls, what it does, and its effect.

**Computermanagement 25**

- `jamf_pro.classic_computermanagement.get` Finds computer management information by ID read
- `jamf_pro.classic_computermanagement.get_by_id_patchfilter` Display patch management information for a computer and filter read
- and 23 more in this area

**Mobiledevices 22**

- `jamf_pro.classic_mobiledevices.create` Creates a new mobile device by ID write
- `jamf_pro.classic_mobiledevices.get` Finds mobile devices by ID read
- and 20 more in this area

**Accounts 20**

- `jamf_pro.accounts.create` Adds new account write
- `jamf_pro.accounts.list` Get user accounts read
- and 18 more in this area

**Enrollment 20**

- `jamf_pro.enrollment.access_management` Configure Access Management settings write
- `jamf_pro.enrollment_access_groups.create` Add the configured LDAP group for User-Initiated Enrollment write
- and 18 more in this area

**Enrollment customization preview 17**

- `jamf_pro.enrollment_customization.parse_markdown` Parse the given string as markdown text and return Html output read
- `jamf_pro.enrollment_customization_ldap.create` Create an LDAP Panel for a single Enrollment Customization write
- and 15 more in this area

**Managed software updates 17**

- `jamf_pro.managed_software_updates_plans.create` Create a Managed Software Update Plan write
- `jamf_pro.managed_software_updates_plans.list` Retrieve Managed Software Update Plans read
- and 15 more in this area

**Mobile device prestages 17**

- `jamf_pro.mobile_device_prestages.create` Create a Mobile Device Prestage write
- `jamf_pro.mobile_device_prestages.list` Get sorted and paged Mobile Device Prestages read
- and 15 more in this area

**Packages 17**

- `jamf_pro.packages.create` Create package write
- `jamf_pro.packages.get` Get specified Package object read
- and 15 more in this area

**Buildings 16**

- `jamf_pro.buildings.create` Create Building record write
- `jamf_pro.buildings.list` Search for sorted and paged Buildings read
- and 14 more in this area

**Categories 16**

- `jamf_pro.categories.create` Create Category record write
- `jamf_pro.categories.list` Get Category objects read
- and 14 more in this area

**Patch software title configurations 16**

- `jamf_pro.patch_software_title_configurations.create` Create Patch Software Title Configurations write
- `jamf_pro.patch_software_title_configurations.dashboard` Add a software title configuration to the dashboard write
- and 14 more in this area

**Users 16**

- `jamf_pro.users.create` Create a new user in inventory write
- `jamf_pro.users.get` Retrieve a user by ID read
- and 14 more in this area

**Departments 15**

- `jamf_pro.classic_departments.create` Creates a new department by ID write
- `jamf_pro.classic_departments.list` Finds all departments read
- and 13 more in this area

**Mobiledeviceapplications 15**

- `jamf_pro.classic_mobiledeviceapplications.create` Creates a new mobile device application by ID write
- `jamf_pro.classic_mobiledeviceapplications.get` Finds mobile device applications by ID read
- and 13 more in this area

**Scripts 15**

- `jamf_pro.scripts.create` Create a Script write
- `jamf_pro.scripts.get` Retrieve a full script object read
- and 13 more in this area

**Mobile device groups 14**

- `jamf_pro.mobile_device_groups.list` Return the list of all Mobile Device Groups read
- `jamf_pro.mobile_device_groups_smart_groups.create` Create a smart group write
- and 12 more in this area

**Computer inventory 13**

- `jamf_pro.computers_inventory.delete` Remove specified Computer record destructive
- `jamf_pro.computers_inventory.get` Return General section of a Computer read
- and 11 more in this area

**Mobiledeviceprovisioningprofiles 13**

- `jamf_pro.classic_mobiledeviceprovisioningprofiles.create` Creates a mobile device provisioning profiles by id write
- `jamf_pro.classic_mobiledeviceprovisioningprofiles.create_by_name` Creates a mobile device provisioning profiles by name write
- and 11 more in this area

**Cloud ldap 12**

- `jamf_pro.cloud_ldaps.create` Create Cloud Identity Provider configuration write
- `jamf_pro.cloud_ldaps.get` Get Cloud Identity Provider configuration with given id read
- and 10 more in this area

**Computer groups 12**

- `jamf_pro.computer_groups.list` Returns the list of all computer groups read
- `jamf_pro.computer_groups_smart_groups.create` Create a Smart Computer Group write
- and 10 more in this area

**Device enrollments 12**

- `jamf_pro.device_enrollments.create_from_token` Create a Device Enrollment Instance with the supplied Token write
- `jamf_pro.device_enrollments.list` Read all sorted and paged Device Enrollment instances read
- and 10 more in this area

**Ebooks 12**

- `jamf_pro.classic_ebooks.create` Creates a new ebook by ID write
- `jamf_pro.classic_ebooks.get` Finds ebooks by ID read
- and 10 more in this area

**Local admin password 12**

- `jamf_pro.local_admin_password_account_audit.list` Get LAPS password viewed history read
- `jamf_pro.local_admin_password_account_audit_by_guid.list` Get LAPS password viewed history read
- and 10 more in this area

**Mobiledeviceenrollmentprofiles 12**

- `jamf_pro.classic_mobiledeviceenrollmentprofiles.create` Creates a new mobile device enrollment profile by ID write
- `jamf_pro.classic_mobiledeviceenrollmentprofiles.get` Finds mobile device enrollment profiles by ID read
- and 10 more in this area

**Cloud distribution point 11**

- `jamf_pro.cloud_distribution_point.create` Create cloud distribution point write
- `jamf_pro.cloud_distribution_point.refresh_inventory` Updates inventory data for the currently configured cloud distribution point write
- and 9 more in this area

**Computer extension attributes 11**

- `jamf_pro.computer_extension_attributes.create` Create Computer Extension Attribute write
- `jamf_pro.computer_extension_attributes.list` Retrieve Computer Extension Attributes read
- and 9 more in this area

**Team viewer remote administration 11**

- `jamf_pro.remote_administration_configurations_team_viewer.create` Create Team Viewer Remote Administration connection configuration write
- `jamf_pro.remote_administration_configurations_team_viewer_sessions.close` Close a session write
- and 9 more in this area

**Computer prestages 10**

- `jamf_pro.computer_prestages.create` Create a Computer Prestage write
- `jamf_pro.computer_prestages.get` Retrieve a Computer Prestage with the supplied id read
- and 8 more in this area

**Computerhardwaresoftwarereports 10**

- `jamf_pro.classic_computerhardwaresoftwarereports.get_by_id` Finds hardware/software reports by computer ID read
- `jamf_pro.classic_computerhardwaresoftwarereports.get_by_id_subset` Finds a subset of hardware/software reports by computer ID read
- and 8 more in this area

**Computerhistory 10**

- `jamf_pro.classic_computerhistory.get` Finds computer history by ID read
- `jamf_pro.classic_computerhistory.get_by_id_subset` Finds a subset of computer history data by ID read
- and 8 more in this area

Jamf protect **10** Sites **10** Venafi preview **10** Volume purchasing locations **10** Distribution point **9** Inventory preload **9** Macapplications **9** Mobiledeviceconfigurationprofiles **9** Mobiledevicehistory **9** Osxconfigurationprofiles **9** Policies **9** Adcs settings **8** Advancedcomputersearches **8** Advancedmobiledevicesearches **8** Advancedusersearches **8** App request preview **8** Byoprofiles **8** Classes **8** Computerextensionattributes **8** Computergroups **8** Directorybindings **8** Diskencryptionconfigurations **8** Distributionpoints **8** Dockitems **8** Enrollment customization **8** Ibeacons **8** Licensedsoftware **8** Mobile device extension attributes **8** Mobile devices **8** Mobiledevicecommands **8** Mobiledeviceextensionattributes **8** Mobiledevicegroups **8** Networksegments **8** Patchexternalsources **8** Printers **8** Removablemacaddresses **8** Restrictedsoftware **8** Softwareupdateservers **8** SSO settings **8** Userextensionattributes **8** Usergroups **8** Webhooks **8** Advanced mobile device searches **7** Cloud idp **7** Computerinvitations **7** Digicert **7** Jamf connect **7** Ldapservers **7** Mobiledeviceinvitations **7** Onboarding **7** Volume purchasing subscriptions **7** API integrations **6** Computercommands **6** GSX connection **6** Patch policy logs **6** SMTP server **6** Supervision identities preview **6** Advanced user content searches **5** Allowedfileextensions **5** API roles **5** Cloud azure **5** Computerapplicationusage **5** Jsonwebtokenconfigurations **5** Ldap **5** Log flushing **5** MDM **5** Oidc **5** Patch policies **5** Patchpolicies **5** Peripherals **5** Peripheraltypes **5** Return to service **5** Self service branding ios **5** Self service branding macos **5** SSO certificate **5** Vppaccounts **5** Vppassignments **5** Vppinvitations **5** Activation code **4** Apns client push status **4** Client check in **4** Computer inventory collection settings **4** Computerapplications **4** Declarative device management **4** Device communication settings **4** Groups **4** Healthcarelistenerrule **4** Jamf pro initialization **4** Jamf pro server URL preview **4** Jamf pro user account settings **4** Jamf remote assist **4** MDM renewal **4** Parent app preview **4** Re enrollment preview **4** Self service **4** Teacher app **4** Computerreports **3** Conditional access **3** Csa **3** Dock items **3** Healthcarelistener **3** Infrastructuremanager **3** Jamf pro notifications **3** Logflush **3** Patchinternalsources **3** Scheduler **3** Self service plus **3** Account groups **2** API role privileges **2** Cache settings **2** Certificate authority **2** Commandflush **2** Computercheckin **2** Computerinventorycollection **2** Computers **2** Dashboard **2** Gsxconnection **2** Health check **2** Impact alert notification settings **2** Jamf package **2** Jamf pro account preferences **2** Login customization **2** Policies preview **2** Service discovery enrollment **2** Slasa **2** Smart computer groups preview **2** Smart mobile device groups preview **2** Smart user groups preview **2** Smtpserver **2** SSO failover **2** Static user groups preview **2** User session preview **2** User sessions **2** API authentication **1** App store country codes preview **1** Classic ldap **1** Cloud information **1** Computers preview **1** Device enrollments devices **1** Devices **1** Fileuploads **1** Icon **1** Inventory information **1** Jamf management framework **1** Jamf pro information **1** Jamf pro version **1** Last login **1** Locales preview **1** M2M **1** Mobile device apps **1** Mobile device extension attributes preview **1** Patch management **1** Patchavailabletitles **1** Remote administration **1** SSO oauth session tokens **1** Startup status **1** Time zones preview **1** Tomcat settings preview **1** User **1**

This index shows a sample of each area. All 1,177 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The Jamf Pro MCP server, answered.

**Is there a Jamf Pro MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,177 Jamf Pro actions across computermanagement, mobiledevices, accounts and enrollment, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Jamf Pro.

**What do I need to connect Jamf Pro?**

Client ID of a Jamf Pro API client and Client secret generated for that API client (shown once). Plus your tenant host. The free call account { op: "connections.requirements", service: "jamf_pro" } lists exactly what to paste.

**Can an AI agent delete or change things in Jamf Pro?**

Only if its key allows it, and only with an explicit confirmation. 193 Jamf Pro actions are destructive, including delete a user from inventory, remove specified Computer record and delete API Integrations Role. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my Jamf Pro API limit?**

actionlake paces every call to the limits in the Jamf Pro service file: 300 calls a minute per connection. Repeated reads are answered from cache (563 Jamf Pro actions can be), which never reaches Jamf Pro.

**What does a Jamf Pro action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,177 Jamf Pro actions page). Cache hits, searches, dry runs and calls Jamf Pro refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which Jamf Pro API does it cover?**

The Jamf Pro API 11.33.0 (OpenAPI 3.0.1) and Classic API 11.32.0 (OpenAPI 3.0.0) at your Jamf Pro instance's API base URL, which you enter when connecting. It is built from Jamf Pro's documentation as read on 23 October 2026. 1,177 actions in 189 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my Jamf Pro data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Jamf Pro credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like Jamf Pro

Shares the most action names with

- [Kandji (Iru) 18](https://actionlake.com/connectors/kandji-iru)
- [Action1 14](https://actionlake.com/connectors/action1)
- [Tactical RMM 14](https://actionlake.com/connectors/tactical-rmm)
- [Kaseya VSA 13](https://actionlake.com/connectors/kaseya-vsa)
- [Wazuh 11](https://actionlake.com/connectors/wazuh)
- [TP-Link Omada Open API 11](https://actionlake.com/connectors/tp-link-omada-open-api)

Joins with, on shared entities

- [Microsoft 365 Users 3](https://actionlake.com/connectors/microsoft-365-users)
- [Okta 3](https://actionlake.com/connectors/okta)
- [JumpCloud 3](https://actionlake.com/connectors/jumpcloud)
- [Veeam Backup & Replication 3](https://actionlake.com/connectors/veeam-backup-and-replication)
- [RingCentral 3](https://actionlake.com/connectors/ringcentral)
- [Google Workspace Directory 3](https://actionlake.com/connectors/google-workspace-directory)

Browse

- [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by Jamf Pro; the name is the vendor's own. Counts are from the Jamf Pro service file, version 1.0.0.

## Give your agent Jamf Pro today.

[Connect Jamf Pro free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/jamf-pro
More: https://actionlake.com/llms.txt