Kandji MCP server

What the model can do

Kandji (Iru) Apple device management: devices with model, platform, OS version, last check-in, assigned user, asset tag, blueprint, agent and Lost Mode state, and tags; a device's notes; directory users with their device counts; the audit log; blueprints; threat detections; and vulnerability detections by CVE. Can lock, erase, restart or shut down a device, turn Lost Mode on or off, clear a passcode, unlock a local account, refresh inventory, rename it, add a note, change its asset tag, user or tags, move it to another blueprint, or delete its record, each only when asked.

Reads

• kandji_list_devicesKandji devices: id, name, model, platform, OS version, last check-in, assigned user (name and email), asset tag, blueprint, MDM and agent state…
• kandji_get_deviceOne Kandji device by id: the same fields as the device list.
• kandji_device_notesThe notes administrators have left on a Kandji device: author, text and when they were written.
• kandji_list_usersUsers Kandji has from its directory integrations (e.g. Microsoft 365): id, name, work email, department, job title, active or archived…
• kandji_audit_eventsThe Kandji audit log: who (by actor id and type) did what (create, update, delete …) to which target (blueprint, library item, device, user…
• kandji_list_blueprintsKandji blueprints (the sets of apps and settings devices get): id, name, description, type and how many computers use each.
• kandji_list_threatsKandji EDR threat detections: threat name, malware or potentially unwanted program, status (quarantined, not quarantined, released), device…
• kandji_list_vulnerabilitiesKandji vulnerability detections across the fleet: device, OS version, blueprint, the vulnerable app and version, CVE id, CVSS score and severity…

Acts, when you ask

These change something in Kandji. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• kandji_lock_deviceLock a Kandji device remotely: whoever holds it cannot use it until it is unlocked.
• kandji_erase_deviceErase a Kandji device: every app, file and setting on it is wiped.
• kandji_restart_deviceRestart a Kandji device.
• kandji_shutdown_deviceShut down a Kandji device.
• kandji_enable_lost_modeTurn on Lost Mode on a Kandji-managed iPhone or iPad: it is locked and shows the message, phone number and footnote until Lost Mode is turned off.
• kandji_disable_lost_modeTurn Lost Mode off on a Kandji-managed iPhone or iPad, so whoever holds it can use it again.
• kandji_clear_passcodeClear the passcode on a Kandji-managed iPhone or iPad: anyone holding it can then open it until a new passcode is set.
• kandji_unlock_accountUnlock a local user account on a Kandji-managed Mac that the system locked after too many failed password attempts.
• kandji_delete_deviceDelete a device record from Kandji.
• kandji_update_inventoryAsk a Kandji device to check in now and report fresh inventory.
• kandji_set_device_nameRename a Kandji device: the name is set on the device itself by an MDM command and shows in Kandji after its next check-in.
• kandji_add_device_noteAdd a note to a Kandji device, visible to the tenant's administrators.
• kandji_update_deviceChange a Kandji device's asset tag, assigned user (a user id from kandji_list_users) or tags.
• kandji_assign_blueprintMove a Kandji device to another blueprint.

Connect it

First connect Kandji on Dashboard → Connections, then add Memtro to your client once. The Kandji tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Kandji connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which Macs have not checked in this week?
• › Which devices are still on an old macOS version?
• › Which critical vulnerabilities are open across the fleet?
• › Who changed the engineering blueprint last week?
• › Lock Tom's MacBook and show our support number

Questions

Is this an official Kandji MCP server?

No. It is Memtro's MCP server with Memtro's Kandji connector behind it: the connector reads Kandji through its API with the credentials you connect on Dashboard → Connections, and Kandji publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Kandji?

Only when you ask, and only what it has been granted: lock a device (the unlock PIN stays in the Kandji console); erase a device (all data lost, permanent); restart a device; shut down a device; turn on Lost Mode on an iPhone or iPad; turn off Lost Mode; clear an iPhone or iPad passcode; unlock a Mac's locked local account; delete a device record (it stops being managed); ask a device to check in and refresh its inventory; rename a device; add a note to a device; change a device's asset tag, assigned user or tags; move a device to another blueprint (changes its apps and settings). Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server