An MCP server that provides tools for managing and monitoring your Fleet Device Management instance.
An MCP server that provides tools for managing and monitoring your Fleet Device Management instance.
A Model Context Protocol (MCP) server that enables AI assistants to interact with Fleet Device Management for device management, security monitoring, and compliance enforcement.
Before configuring any MCP client, ensure you have: 1. Install uv (recommended) or pip: 2. Fleet API Token: Generate an API token from your Fleet instance: Option 1) - Log into Fleet UI - Navigate to: My account → Get API token - Copy the token for use in configuration Option 2) - Create an API-Only user with fleetctl > Note: This API token and your fleet instance URL
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| fleet_list_hosts | List hosts with filtering, pagination, and search |
| fleet_get_host | Get detailed information about a specific host by ID |
| fleet_get_host_by_identifier | Get host by hostname, UUID, or hardware serial |
| fleet_search_hosts | Search hosts by hostname, UUID, serial number, or IP |
| fleet_list_host_upcoming_activities | List upcoming activities for a specific host |
| fleet_list_host_past_activities | List past activities for a specific host |
| fleet_get_host_mdm | Get MDM information for a specific host |
| fleet_list_host_certificates | List certificates for a specific host |
| fleet_get_host_macadmins | Get macadmins data (Munki, MDM profiles) for a host |
| fleet_get_host_device_mapping | Get device mapping information for a host |
| fleet_get_host_encryption_key | Get disk encryption recovery key for a host |
| fleet_list_queries | List all saved queries with pagination |
| fleet_get_query | Get details of a specific saved query |
| fleet_get_query_report | Get the latest results from a scheduled query |
| fleet_list_policies | List all compliance policies |
| fleet_get_policy_results | Get compliance results for a specific policy |
| fleet_list_software | List software inventory across the fleet |
| fleet_get_software | Get detailed information about a specific software item |
| fleet_get_host_software | Get software installed on a specific host |
| fleet_get_vulnerabilities | List known vulnerabilities with filtering |
| fleet_get_cve | Get detailed information about a specific CVE |
| fleet_search_software | Search for software by name |
| fleet_find_software_on_host | Find specific software on a host by hostname |
| fleet_get_software_install_result | Get the result of a software installation request |
| fleet_list_software_titles | List software titles across the fleet |
| fleet_get_software_title | Get detailed information about a specific software title |
| fleet_list_teams | List all teams |
| fleet_get_team | Get details of a specific team |
| fleet_list_team_users | List all users that are members of a specific team |
| fleet_get_team_secrets | List team-specific enroll secrets |
| fleet_list_users | List all users with filtering |
| fleet_get_user | Get details of a specific user |
| fleet_list_user_sessions | List active sessions for a user |
| fleet_get_session | Get session details by ID |
| fleet_list_labels | List all labels |
| fleet_get_label | Get detailed information about a specific label |
| fleet_list_packs | List all query packs |
| fleet_get_pack | Get detailed information about a specific pack |
| fleet_list_scheduled_queries | List scheduled queries in a specific pack |
| fleet_list_scripts | List all scripts available in Fleet |
| fleet_get_script | Get details of a specific script |
| fleet_get_script_result | Get the result of a script execution |
| fleet_list_batch_scripts | List batch script executions |
| fleet_get_batch_script | Get details of a batch script execution |
| fleet_list_batch_script_hosts | List hosts in a batch script execution |
| fleet_list_host_scripts | List scripts available for a specific host |
| fleet_list_mdm_commands | List MDM commands that have been executed |
| fleet_get_mdm_command_results | Get results of MDM commands |
| fleet_list_mdm_profiles | List MDM configuration profiles |
| fleet_get_host_mdm_profiles | Get MDM profiles installed on a specific host |
| fleet_get_mdm_profiles_summary | Get summary of MDM profile deployment status |
| fleet_get_filevault_summary | Get FileVault encryption summary |
| fleet_list_mdm_devices | List all MDM-enrolled Apple devices |
| fleet_get_bootstrap_metadata | Get metadata about a bootstrap package for a team |
| fleet_get_bootstrap_summary | Get aggregated summary about bootstrap package deployment |
| fleet_get_setup_assistant | Get the MDM Apple Setup Assistant configuration |
| fleet_list_mdm_apple_installers | List all Apple MDM installers |
| fleet_list_app_store_apps | List App Store apps available for installation |
| fleet_list_vpp_tokens | List VPP tokens configured in Fleet |
| fleet_get_config | Get the current Fleet application configuration |
| fleet_get_enroll_secrets | Get the enrollment secrets configuration |
| fleet_get_certificate | Get the Fleet server certificate chain |
| fleet_get_version | Get the Fleet server version information |
| fleet_list_secrets | List secret variables in Fleet |
| fleet_list_invites | List pending user invites |
| fleet_verify_invite | Verify an invite token and get invite details |
| fleet_list_carves | List file carve sessions |
| fleet_get_carve | Get detailed information about a specific carve session |
| fleet_get_carve_block | Get a specific block of data from a carve session |
| fleet_get_device_info | Get device information using a device token |
| fleet_list_activities | List Fleet activities and audit logs |
| fleet_list_osquery_tables | List available osquery tables with dynamic discovery |
| fleet_get_osquery_table_schema | Get detailed schema for a specific table |
| fleet_suggest_tables_for_query | Get AI-powered table suggestions based on intent |
| fleet_health_check | Check Fleet server connectivity and authentication |
| fleet_delete_host | Remove a host from Fleet |
| fleet_transfer_hosts | Transfer hosts to a different team |
| fleet_query_host | Run an ad-hoc live query against a specific host |
| fleet_query_host_by_identifier | Run a live query by hostname/UUID/serial |
| fleet_cancel_host_activity | Cancel an upcoming activity for a specific host |
| fleet_lock_host | Lock a host device remotely |
| fleet_unlock_host | Unlock a host device remotely |
| fleet_unenroll_host_mdm | Unenroll a host from MDM |
| fleet_add_labels_to_host | Add labels to a host |
| fleet_remove_labels_from_host | Remove labels from a host |
| fleet_refetch_host | Force a host to refetch and update its data immediately |
| fleet_create_query | Create a new saved query |
| fleet_delete_query | Delete a saved query |
| fleet_run_live_query_with_results | Execute a live query and collect results |
| fleet_run_saved_query | Run a saved query against hosts |
| fleet_create_policy | Create a new compliance policy |
| fleet_update_policy | Update an existing policy |
| fleet_delete_policy | Delete a policy |
| fleet_install_software | Install software on a specific host |
| fleet_batch_set_software | Batch upload/set software installers for a team |
| fleet_create_team | Create a new team |
| fleet_add_team_users | Add one or more users to a specific team |
| fleet_remove_team_user | Remove a specific user from a team |
| fleet_create_user | Create a new user |
| fleet_update_user | Update an existing user |
| fleet_delete_session | Delete/invalidate a specific session |
| fleet_delete_user_sessions | Delete all sessions for a specific user |
| fleet_create_label | Create a new label |
| fleet_update_label | Update an existing label |
| fleet_delete_label | Delete a label by name |
| fleet_create_pack | Create a new query pack |
| fleet_update_pack | Update an existing pack |
| fleet_delete_pack | Delete a pack by name |
| fleet_run_script | Run a script on a specific host |
| fleet_run_batch_script | Run a script on multiple hosts |
| fleet_cancel_batch_script | Cancel a batch script execution |
| fleet_create_script | Create and upload a new script |
| fleet_modify_script | Modify an existing script |
| fleet_delete_script | Delete a script |
| fleet_upload_mdm_profile | Upload a new MDM configuration profile |
| fleet_delete_mdm_profile | Delete an MDM configuration profile |
| fleet_lock_device | Lock an MDM-enrolled device remotely |
| fleet_upload_bootstrap_package | Upload a bootstrap package for MDM enrollment |
| fleet_delete_bootstrap_package | Delete a bootstrap package for a team |
| fleet_create_setup_assistant | Create or update an MDM Apple Setup Assistant |
| fleet_delete_setup_assistant | Delete the MDM Apple Setup Assistant |
| fleet_upload_mdm_apple_installer | Upload a new Apple MDM installer package |
| fleet_add_app_store_app | Add an App Store app for distribution |
| fleet_update_app_store_app | Update App Store app settings |
| fleet_delete_vpp_token | Delete a VPP token |
| fleet_update_config | Update the Fleet application configuration |
| fleet_update_enroll_secrets | Update the enrollment secrets configuration |
| fleet_create_secret | Create a new secret variable |
| fleet_delete_secret | Delete a secret variable by ID |
| fleet_create_invite | Create a new user invite |
| fleet_update_invite | Update a pending invite |
| fleet_delete_invite | Delete a pending invite |
{
"mcpServers": {
"fleet": {
"command": "uvx",
"args": [
"fleet-mcp",
"run"
],
"env": {
"FLEET_SERVER_URL": "https://your-fleet-instance.com",
"FLEET_API_TOKEN": "YOUR_FLEET_API_TOKEN",
"FLEET_READONLY": "true",
"FLEET_ALLOW_SELECT_QUERIES": "true"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Before configuring any MCP client, ensure you have: 1. Install uv (recommended) or pip: 2. Fleet API Token: Generate an API token from your Fleet instance: Option 1) - Log into Fleet UI - Navigate to: My account → Get API token - Copy the token for use in configuration Option 2) - Create an API-Only user with fleetctl > Note: This API token and your fleet instance URL
| Variable | Description | Required |
|---|---|---|
| FLEET_SERVER_URL | Declared in the maintainer’s client configuration. | Check documentation |
| FLEET_API_TOKEN | Declared in the maintainer’s client configuration. | Check documentation |
| FLEET_READONLY | Declared in the maintainer’s client configuration. | Check documentation |
| FLEET_ALLOW_SELECT_QUERIES | Declared in the maintainer’s client configuration. | Check documentation |
Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Read-only GCP tools for debugging incidents and finding cost savings
A complete MCP for the CoinMarketCap API
AI-powered news intelligence — 21 tools for personalized monitoring, briefings, and semantic search
1. **Ask** — Tell your agent what to do 2. **Delegate** — Your agent routes work to specialists, paying with AVB tokens 3. **Verify** — Every step is