RMM 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Jamf
Jamf
Jamf Pro - Mac and iOS inventory, FileVault and passcode compliance, patch posture, onboarding, and admin-gated lock/wipe/unmanage
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin jamf Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Device Compliance
- Device Offboarding
- Patch Management
- User Onboarding
Skills
This plugin provides 5 skills that teach Claude about Jamf:
| Skill | Description |
|---|---|
device-compliance | Fleet compliance review for Jamf Pro: what jamf_backup_check measures on Macs (FileVault, recovery key escrow, managed state, inventory and check-in age) and iOS/iPadOS (passcode, data protection, device-reported iCloud Backup), its finding codes and severities, drilling into single devices, safe remediation with the write-tier tools, and smart groups for ongoing visibility. |
device-offboarding | Lost, stolen, and leaver device handling in Jamf Pro, almost all of it in the admin tier: operator-only Mac locking through jamf_prepare_computer_lock, mobile device lock, wipe, unmanage, record deletion, static group removal (write tier), and the read-only evidence to gather before any of them. |
patch-management | OS and third-party patch posture in Jamf Pro: which macOS and iOS versions Jamf can deploy, measuring OS version spread from inventory, managed software update plans and their status, patch management titles and per-title patch reports, the policies that deliver patches, and scheduling OS updates without forcing restarts. |
user-onboarding | New-hire setup in Jamf Pro: user records and how to avoid duplicates, scoping a new Mac's serial to a computer PreStage enrollment for Automated Device Enrollment, assigning computers and mobile devices to a user, building, department, and site, and adding Macs to static groups so the right policies and profiles apply. |
api-patterns | Jamf Pro MCP fundamentals through Conduit: the three X-Jamf-* credential headers and the API client they come from, the read/write/admin tool tiers and how Conduit and the sidecar each gate them, zero-based paging and RSQL filters on the Jamf Pro API tools, contains/limit on the Classic API list tools, inventory sections, response caps, and the error and rate-limit messages the sidecar returns. |
Agents
This plugin provides 1 agent for autonomous task execution:
| Agent | Description |
|---|---|
jamf-posture-auditor | Use this agent when an MSP technician or vCIO needs a read-only posture review of a client's Jamf Pro fleet: encryption and recovery key escrow, managed state, stale check-ins, OS currency, and third-party app patch currency, written up for a QBR or a cyber-insurance questionnaire. |
Commands
Available slash commands:
| Command | Description |
|---|
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
Using Skills
/skill jamf:device-compliance
Fleet compliance review for Jamf Pro: what jamf_backup_check measures on Macs (FileVault, recovery key escrow, managed state, inventory and check-in age) and iOS/iPadOS (passcode, data protection, device-reported iCloud Backup), its finding codes and severities, drilling into single devices, safe remediation with the write-tier tools, and smart groups for ongoing visibility.