/ 100

14 days ago

glama

Jamf Pro MCP Server

Enables AI assistants to interact with Jamf Pro for comprehensive Apple device management, including device inventory, policy deployment, configuration profiles, script execution, and compliance reporting.

→ dbankscard/jamf-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 17 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 9 credentials: AGENT_AI_API_KEY, AUTH0_CLIENT_SECRET, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, JAMF_CLIENT_SECRET, JAMF_PASSWORD, JWT_SECRET, OKTA_CLIENT_SECRET, OPENAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAGENT_AI_API_KEY

configAGENT_AI_MODEL

configAGENT_AI_PROVIDER

configAGENT_AI_TEMPERATURE

configAGENT_ENABLE_METRICS

configAGENT_LOG_LEVEL

configAGENT_MCP_HOST

configAGENT_MCP_PORT

configAGENT_MCP_TRANSPORT

configAGENT_READ_ONLY

configAGENT_REQUIRE_CONFIRMATION

configAGENT_SAFETY_MODE

configALLOWED_ORIGINS

configAUTH0_AUDIENCE

configAUTH0_CLIENT_ID

🔐 secretAUTH0_CLIENT_SECRET

configAUTH0_DOMAIN

configAUTH0_SCOPE

configAWS_ACCESS_KEY_ID

configAWS_REGION

🔐 secretAWS_SECRET_ACCESS_KEY

🔐 secretAWS_SESSION_TOKEN

configHTTP_ENABLE_METRICS

configHTTP_KEEPALIVE_TIMEOUT

configHTTP_MAX_FREE_SOCKETS

configHTTP_MAX_SOCKETS

configHTTP_TIMEOUT

configJAMF_ALLOW_INSECURE

configJAMF_CLIENT_ID— "": "your-api-client-id",

🔐 secretJAMF_CLIENT_SECRET— "": "your-api-client-secret"

configJAMF_CODE_MODE

configJAMF_CODE_MODE_COMMAND_BUDGET

configJAMF_CODE_MODE_READ_BUDGET

configJAMF_CODE_MODE_TIMEOUT

configJAMF_CODE_MODE_WRITE_BUDGET

configJAMF_DEBUG_MODE— "": "false",

configJAMF_ENABLE_CIRCUIT_BREAKER— "": "false",

configJAMF_ENABLE_RATE_LIMITING— "": "false",

configJAMF_ENABLE_RETRY— "": "true",

configJAMF_MAX_CONCURRENCY— Concurrency limiting — semaphore-style ConcurrencyLimiter (default 5, configurable via ) prevents 429 rate-limit errors. Applied to both the core API client and Code Mode sandbox.

configJAMF_MAX_RETRIES

🔐 secretJAMF_PASSWORD

configJAMF_READ_ONLY— "": "false"

configJAMF_RETRY_BACKOFF_MULTIPLIER

configJAMF_RETRY_DELAY— "": "1000",

configJAMF_RETRY_MAX_DELAY— "": "10000",

configJAMF_URL— "": "https://your-instance.jamfcloud.com",

configJAMF_USERNAME

configJAMF_USE_ENHANCED_MODE— "": "true",

🔐 secretJWT_SECRET

configLOG_DIR

configLOG_LEVEL

configMCP_MODE

configOAUTH_PROVIDER

configOAUTH_REDIRECT_URI

configOKTA_CLIENT_ID

🔐 secretOKTA_CLIENT_SECRET

configOKTA_DOMAIN

configOKTA_SCOPE

🔐 secretOPENAI_API_KEY

configPORT

configRATE_LIMIT_MAX

configRATE_LIMIT_WINDOW

configREQUIRED_SCOPES

configSERVER_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/dbankscard-jamf-mcp-server-1ujt0z)](https://m8ven.ai/mcp/dbankscard-jamf-mcp-server-1ujt0z)

commit: 51900dc0811ac8ba7f7c97423d3118820224ffd1

code hash: 003d6f2af6f56553e7d5a45368ae4098bcab440505473867441ed6f986f6ebba

verified: 6/9/2026, 10:18:06 AM

view raw JSON →