An encryption audit
Maya Okafor, IT manager at Acme Ltd, asked which Macs had FileVault off ahead of an audit. Memtro listed four by name with their user, OS version and last seen date.
SimpleMDM + Memtro
Which Macs have FileVault off, and which devices have not been seen this week?
SimpleMDM connects Memtro to your Apple device management. It reads devices with OS, model, supervision, passcode, FileVault, Activation Lock, firewall and battery state, a device's installed apps and profiles, assignment groups, the app catalogue, the audit log, scripts and script jobs. When asked, and once an administrator has granted the action by name, it can lock, wipe, restart, shut down, update, unenrol or refresh a device, turn lost mode on or off, clear a passcode, disable Activation Lock, send a message, change assignment groups, and run or cancel a script on Macs. Serial numbers and locations are never returned.
In Memtro
What you can do with SimpleMDM in Memtro
Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right SimpleMDM tool, reads what it needs, and answers with the source cited.
What it does
- 01Lists devices by name with the user's managed Apple ID, model, OS version, last seen, supervision, passcode, FileVault, Activation Lock, firewall and battery state
- 02Reads one device in detail, with Find My, firmware and recovery lock enabled, SIP and update settings, and optionally its installed apps and profiles
- 03Lists assignment groups with their apps and devices, the app catalogue, and the audit log of admin and device events
- 04Lists macOS scripts and the last month's script jobs with each device's status and exit code
- 05When asked and granted, locks, restarts, shuts down, updates or refreshes a device, turns lost mode on or off, sends a message its user sees, and moves it between assignment groups
- 06When asked and granted, wipes a device permanently, unenrols it, clears its passcode, disables Activation Lock, and runs a script with administrator rights on Macs or cancels a job
Acts when asked
When you ask it to
These tools change something in SimpleMDM. The model is told to use them only when you ask for exactly that, and an administrator grants each one by name to the teams that may use it; a personal connection acts only after its owner allows it.
- 01Lock a device, optionally with a message and phone number on the lock screen (iPhone and iPad)
- 02Erase a device and unenrol it, returning it to factory settings (permanent)
- 03Restart a device
- 04Shut down a device
- 05Update a device's OS now
- 06Turn lost mode on for a device (locks it with a message)
- 07Turn lost mode off for a device
- 08Remove a device's passcode
- 09Disable Activation Lock on a device
- 10Unenrol a device from SimpleMDM
- 11Ask a device to refresh its inventory
- 12Send a push message to a device's SimpleMDM app
- 13Add a device to an assignment group
- 14Remove a device from an assignment group
- 15Run a script on Macs
- 16Cancel a script job that has not reached its devices
In practice
Ask it like you would a colleague
Once SimpleMDM is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.
SimpleMDM + MemtroWhich Macs have FileVault turned off?
Which devices have not been seen in the last week?
What apps are installed on Priya's MacBook?
Did last night's cleanup script succeed on every Mac?
Put Dan's iPhone into lost mode with my phone number
A lost phone
Tom Reilly, IT lead at Northwind, heard that Dan Fletcher had left his iPhone on a train. He asked Memtro to turn on lost mode with the office number. Memtro enabled lost mode in SimpleMDM, so the phone is locked and shows the message until lost mode is turned off.
Teams
Where it fits
The teams that lean on SimpleMDM most, a question each of them asks, and what they connect beside it.
- EngineeringKeep decisions from evaporatingEngineer, Tech lead, On call, New joiner“Who owns the billing migration, and what did we decide about retries?”Used alongside GitHub, Linear, Jira, Confluence, Slack and 5 more.
- ProductHear what customers actually ask forProduct manager, Researcher, Designer, Head of product“Which customers asked for SSO this quarter, and what is their combined ARR?”Used alongside Help Scout, HubSpot, Linear, Jira, Slack and 6 more.
- Agent buildersMemory and tools for the agents you buildSolo builder, Platform team, Automation engineer, Whoever signs it off“Search memtro for what we know about Acme before drafting the proposal”Used alongside GitHub, Linear and Slack.
Better together
Works with
A record in SimpleMDM is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.
- Work managementSimpleMDM with JiraJQL search, issue details and projects from Jira Cloud.
- Work managementSimpleMDM with Clio ManageAsk the matter: its client, its fee earner, the time on it and what is still unbilled.
- Work managementSimpleMDM with LinearIssues, projects and teams, synced hourly into memory.
- SupportSimpleMDM with Help ScoutAI that reads your support conversations and cross-references the customer everywhere else.
- SupportSimpleMDM with ZendeskEvery ticket, reply and internal note, ready to be asked about.
- SupportSimpleMDM with IntercomCustomer conversations and the people behind them, in your company memory.
- Documents and wikisSimpleMDM with NotionSearch pages and query databases, and write to them when you ask.
- Documents and wikisSimpleMDM with Google DriveSearch Drive and read Docs, Sheets and Slides as text, and write a Doc when you ask.
- Documents and wikisSimpleMDM with ConfluenceSearch and read wiki pages, and write them when you ask.
Also in Engineering and operations
Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.
- GitHub
- AWS CloudWatch
- Sentry
- ServiceNow
- Okta
- Twilio
- AWS CloudTrail
- GitLab
- Bitbucket
- Vercel
- PagerDuty
- Datadog
- Grafana
- incident.io
- Azure DevOps
- CircleCI
- Cloudflare
- LaunchDarkly
- New Relic
- Rollbar
- Snyk
- Better Stack
- Buildkite
- DigitalOcean
- Heroku
- Netlify
- SonarQube Cloud
- Statuspage
UptimeRobot- Axiom
- BugSnag
- Checkly
- Hetzner Cloud
Honeycomb- Pingdom
- Render
- Statsig
- Sumo Logic
- Supabase
- HCP Terraform
- Vultr
- Airbrake
- Codecov
Cronitor- Dynatrace
FireHydrant- Fly.io
- Honeybadger
- Akamai Linode
- Octopus Deploy
- Pulumi
- Rootly
- Semgrep
- Splunk
StatusCake- Tailscale
- Argo CD
- authentik
- Coolify
- Gitea
GlitchTip
GLPI- Jenkins
Langfuse
LibreNMS- n8n
NetBox- Portainer
- Prefect
Snipe-IT
Woodpecker CI
Zabbix
LangSmith
Helicone- OpenAI (usage and cost)
- Anthropic (usage and cost)
- Algolia
- Flagsmith
- Unleash
GrowthBook
Drata
Intruder
GitGuardian
Secureframe
ilert- KnowBe4
JumpCloud
ConfigCat- Railway
- Fastly
- Postman
- Make
- Braintrust
- OpenRouter
- ElevenLabs
Split- Scaleway
Aikido Security- AssemblyAI
Astronomer- Bamboo
- Baseten
- Bitrise
- Bitwarden
- BrowserStack
- bunny.net
- Cachet
- Checkmk
- Civo
- Cloudsmith
- Codacy
- Codemagic
Comet Opik- Coralogix
CrowdStrike Falcon- Dagster+
- DeepSource
Detectify- Docker Hub
Domotz- Grafana OnCall
- Harness
- Hugging Face
- Instatus
- Koyeb
- Lambda Cloud
LambdaTest
LangWatch
LlamaCloud
Logz.io
Lunary- Mezmo
NinjaOne- Nomad
Northflank- Oh Dear
- OVHcloud
Portkey- Probely (Snyk API & Web)
PromptLayer- Proxmox VE
PRTG Network Monitor- Qase
Raygun
Retell AI- Retool
Runpod- SecurityScorecard
- Semaphore CI
Shodan- SigNoz
- Socket
Spike.sh
Squadcast- SwaggerHub
- TeamCity
Tenable- Together AI
- Travis CI
UpGuard
Uptime.com
Vanta- Vapi
- Windmill
Zenduty- OpsLevel
Cortex- Auth0
- Clerk
WorkOS
Kandji
Automox
Huntress- HackerOne
- AppSignal
Healthchecks.io
Rapid7 InsightVM- 1Password Events
- JFrog Artifactory
- Sauce Labs
Zenhub- Deepgram
- Replicate
Setup
How to connect
Connect withAPI key
- 1
In SimpleMDM, open Settings → API and add an API key named Memtro.
- 2
Leave the Device Secrets permission off. Memtro never reads FileVault keys, lock PINs or Activation Lock bypass codes. Copy the key.
- 3
In Memtro, open Connections → SimpleMDM and paste it into API key.
- 4
Ask your first question: which Macs have FileVault turned off?
Also works from
Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The SimpleMDM tools are the same everywhere.
FAQ
Questions
Can Memtro change anything in SimpleMDM?+
Only when you ask, and only what it has been granted: lock a device, optionally with a message and phone number on the lock screen (iPhone and iPad); erase a device and unenrol it, returning it to factory settings (permanent); restart a device; shut down a device; update a device's OS now; turn lost mode on for a device (locks it with a message); turn lost mode off for a device; remove a device's passcode; disable Activation Lock on a device; unenrol a device from SimpleMDM; ask a device to refresh its inventory; send a push message to a device's SimpleMDM app; add a device to an assignment group; remove a device from an assignment group; run a script on Macs; cancel a script job that has not reached its devices. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.
Who can use a SimpleMDM connection?+
A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.
Does Memtro store my SimpleMDM data?+
Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.
How do I connect SimpleMDM?+
API key. In SimpleMDM, open Settings → API and add an API key named Memtro.
Connect SimpleMDM in a few minutes
Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.