> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Jamf Pro

> Reference for the Tracecat Jamf Pro integration: registered actions, required secrets, expected inputs, and example workflow usage.

## Add serial numbers to computer PreStage scope

Action ID: `tools.jamf.add_computer_prestage_scope`

Add serial numbers to a computer PreStage scope; a 409 is an optimistic-locking conflict, so refetch the scope for the current versionLock and retry.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v2-computer-prestages-id-scope](https://developer.jamf.com/jamf-pro/reference/post_v2-computer-prestages-id-scope)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="prestage_id" type="string" required>
  Computer PreStage enrollment ID.
</ParamField>

<ParamField path="serial_numbers" type="array[string]" required>
  Serial numbers to add to the PreStage scope.
</ParamField>

<ParamField path="version_lock" type="integer" required>
  Current optimistic-lock version from the PreStage scope.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Delete computer

Action ID: `tools.jamf.delete_computer`

Permanently delete a computer's inventory record from Jamf Pro. The computer is not erased, but it stops being managed and its inventory history is lost. This cannot be undone.

Reference: [https://developer.jamf.com/jamf-pro/reference/delete\_v4-computers-inventory-id](https://developer.jamf.com/jamf-pro/reference/delete_v4-computers-inventory-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Erase computer

Action ID: `tools.jamf.erase_computer`

Irreversibly erase a Jamf Pro computer, optionally supplying command options such as a PIN.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v4-computers-inventory-id-erase](https://developer.jamf.com/jamf-pro/reference/post_v4-computers-inventory-id-erase)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="payload" type="object | null">
  Optional erase command fields such as pin.

  Default: `null`.
</ParamField>

## Get computer device lock PIN

Action ID: `tools.jamf.get_computer_device_lock_pin`

Get the device lock PIN for a Jamf Pro computer.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v4-computers-inventory-id-view-device-lock-pin](https://developer.jamf.com/jamf-pro/reference/get_v4-computers-inventory-id-view-device-lock-pin)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get computer FileVault recovery key

Action ID: `tools.jamf.get_computer_filevault_key`

Get the FileVault recovery key for a Jamf Pro computer.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v4-computers-inventory-id-filevault](https://developer.jamf.com/jamf-pro/reference/get_v4-computers-inventory-id-filevault)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get computer inventory detail

Action ID: `tools.jamf.get_computer_inventory_detail`

Get detailed inventory for a Jamf Pro computer.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v4-computers-inventory-detail-id](https://developer.jamf.com/jamf-pro/reference/get_v4-computers-inventory-detail-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get computer PreStage scope

Action ID: `tools.jamf.get_computer_prestage_scope`

Get the serial numbers and version lock in a Jamf Pro computer PreStage scope.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v2-computer-prestages-id-scope](https://developer.jamf.com/jamf-pro/reference/get_v2-computer-prestages-id-scope)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="prestage_id" type="string" required>
  Computer PreStage enrollment ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get computer recovery lock password

Action ID: `tools.jamf.get_computer_recovery_lock_password`

Get the recovery lock password for a Jamf Pro computer.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v4-computers-inventory-id-view-recovery-lock-password](https://developer.jamf.com/jamf-pro/reference/get_v4-computers-inventory-id-view-recovery-lock-password)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get mobile device detail

Action ID: `tools.jamf.get_mobile_device_detail`

Get detailed inventory for a Jamf Pro mobile device.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v2-mobile-devices-id-detail](https://developer.jamf.com/jamf-pro/reference/get_v2-mobile-devices-id-detail)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="mobile_device_id" type="string" required>
  Mobile device ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Get smart computer group membership

Action ID: `tools.jamf.get_smart_group_membership`

Get the computer membership of a Jamf Pro smart group.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v3-computer-groups-smart-group-membership-id](https://developer.jamf.com/jamf-pro/reference/get_v3-computer-groups-smart-group-membership-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="group_id" type="string" required>
  Smart computer group ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## List automated device enrollment devices

Action ID: `tools.jamf.list_device_enrollment_devices`

List devices associated with an Automated Device Enrollment instance.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v1-device-enrollments-id-devices](https://developer.jamf.com/jamf-pro/reference/get_v1-device-enrollments-id-devices)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="device_enrollment_id" type="string" required>
  Automated Device Enrollment instance ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## List computer groups

Action ID: `tools.jamf.list_computer_groups`

List Jamf Pro computer groups.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v1-computer-groups](https://developer.jamf.com/jamf-pro/reference/get_v1-computer-groups)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## List computer inventory

Action ID: `tools.jamf.list_computer_inventory`

Search Jamf Pro computer inventory. Use section to choose which detail sections are returned.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v4-computers-inventory](https://developer.jamf.com/jamf-pro/reference/get_v4-computers-inventory)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="filter" type="string | null">
  RSQL filter expression. See [https://developer.jamf.com/jamf-pro/docs/filtering-with-rsql](https://developer.jamf.com/jamf-pro/docs/filtering-with-rsql).

  Default: `null`.
</ParamField>

<ParamField path="page" type="integer | null">
  Zero-indexed page number.

  Default: `null`.
</ParamField>

<ParamField path="page_size" type="integer | null">
  Number of results per page.

  Default: `null`.
</ParamField>

<ParamField path="section" type="array[string] | null">
  Inventory sections to return. Defaults to GENERAL when omitted. Accepted values: GENERAL, DISK\_ENCRYPTION, PURCHASING, APPLICATIONS, STORAGE, USER\_AND\_LOCATION, CONFIGURATION\_PROFILES, PRINTERS, SERVICES, HARDWARE, LOCAL\_USER\_ACCOUNTS, CERTIFICATES, ATTACHMENTS, PACKAGE\_RECEIPTS, SECURITY, OPERATING\_SYSTEM, LICENSED\_SOFTWARE, IBEACONS, SOFTWARE\_UPDATES, EXTENSION\_ATTRIBUTES, CONTENT\_CACHING, GROUP\_MEMBERSHIPS.

  Default: `null`.
</ParamField>

<ParamField path="sort" type="array[string] | null">
  Sort expressions in property:asc or property:desc format.

  Default: `null`.
</ParamField>

## List computer PreStage enrollments

Action ID: `tools.jamf.list_computer_prestages`

List Jamf Pro computer PreStage enrollment objects.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v3-computer-prestages](https://developer.jamf.com/jamf-pro/reference/get_v3-computer-prestages)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="page" type="integer | null">
  Zero-indexed page number. Loop over this to walk every page.

  Default: `null`.
</ParamField>

<ParamField path="page_size" type="integer | null">
  Results per page. Defaults to 100 when omitted.

  Default: `null`.
</ParamField>

<ParamField path="sort" type="array[string] | null">
  Sort expressions in property:asc or property:desc format. Defaults to id:desc.

  Default: `null`.
</ParamField>

## List MDM commands

Action ID: `tools.jamf.list_mdm_commands`

List Jamf Pro MDM commands matching a required RSQL filter.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v2-mdm-commands](https://developer.jamf.com/jamf-pro/reference/get_v2-mdm-commands)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="filter" type="string" required>
  Required RSQL filter. Filterable fields: uuid, clientManagementId, command, status, clientType, dateSent, validAfter, dateCompleted, profileId, profileIdentifier, active. See [https://developer.jamf.com/jamf-pro/docs/filtering-with-rsql](https://developer.jamf.com/jamf-pro/docs/filtering-with-rsql).
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="page" type="integer | null">
  Zero-indexed page number.

  Default: `null`.
</ParamField>

<ParamField path="page_size" type="integer | null">
  Number of results per page.

  Default: `null`.
</ParamField>

<ParamField path="sort" type="array[string] | null">
  Sort expressions in property:asc or property:desc format. Defaults to dateSent:asc.

  Default: `null`.
</ParamField>

## List mobile devices

Action ID: `tools.jamf.list_mobile_devices`

List mobile devices in Jamf Pro.

Reference: [https://developer.jamf.com/jamf-pro/reference/get\_v2-mobile-devices](https://developer.jamf.com/jamf-pro/reference/get_v2-mobile-devices)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="page" type="integer | null">
  Zero-indexed page number.

  Default: `null`.
</ParamField>

<ParamField path="page_size" type="integer | null">
  Number of results per page.

  Default: `null`.
</ParamField>

<ParamField path="sort" type="array[string] | null">
  Sort expressions in property:asc or property:desc format. Defaults to id:asc.

  Default: `null`.
</ParamField>

## Redeploy Jamf management framework

Action ID: `tools.jamf.redeploy_management_framework`

Reinstall the Jamf management framework on a computer. Returns 202 with a deviceId and commandUuid.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v1-jamf-management-framework-redeploy-id](https://developer.jamf.com/jamf-pro/reference/post_v1-jamf-management-framework-redeploy-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Remove computer MDM profile

Action ID: `tools.jamf.remove_computer_mdm_profile`

Remove the MDM profile from a Jamf Pro computer.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v4-computers-inventory-id-remove-mdm-profile](https://developer.jamf.com/jamf-pro/reference/post_v4-computers-inventory-id-remove-mdm-profile)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Remove serial numbers from computer PreStage scope

Action ID: `tools.jamf.remove_computer_prestage_scope`

Remove serial numbers from a computer PreStage scope; a 409 is an optimistic-locking conflict, so refetch the scope for the current versionLock and retry.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v2-computer-prestages-id-scope-delete-multiple](https://developer.jamf.com/jamf-pro/reference/post_v2-computer-prestages-id-scope-delete-multiple)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="prestage_id" type="string" required>
  Computer PreStage enrollment ID.
</ParamField>

<ParamField path="serial_numbers" type="array[string]" required>
  Serial numbers to remove from the PreStage scope.
</ParamField>

<ParamField path="version_lock" type="integer" required>
  Current optimistic-lock version from the PreStage scope.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Send MDM command

Action ID: `tools.jamf.send_mdm_command`

Send an MDM command to one or more Jamf Pro clients; returns 201 with each command ID and href.

Reference: [https://developer.jamf.com/jamf-pro/reference/post\_v2-mdm-commands](https://developer.jamf.com/jamf-pro/reference/post_v2-mdm-commands)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="client_data" type="array[object]" required>
  Target clients. Each entry is an object with a managementId UUID.
</ParamField>

<ParamField path="command_data" type="object" required>
  Command fields including commandType. Accepted command types: APPLY\_REDEMPTION\_CODE, CANCEL\_ENHANCED\_LOG\_COLLECTION, CERTIFICATE\_LIST, CLEAR\_PASSCODE, CLEAR\_RESTRICTIONS\_PASSWORD, DECLARATIVE\_MANAGEMENT, DELETE\_USER, DEVICE\_INFORMATION, DEVICE\_LOCATION, DEVICE\_LOCK, DISABLE\_LOST\_MODE, DISABLE\_REMOTE\_DESKTOP, ENABLE\_LOST\_MODE, ENABLE\_REMOTE\_DESKTOP, ERASE\_DEVICE, INSTALLED\_APPLICATION\_LIST, LOG\_OUT\_USER, MANAGED\_APPLICATION\_LIST, MANAGED\_MEDIA\_LIST, REFRESH\_CELLULAR\_PLANS, PLAY\_LOST\_MODE\_SOUND, PROFILE\_LIST, PROVISIONING\_PROFILE\_LIST, RESTART\_DEVICE, REQUEST\_MIRRORING, SECURITY\_INFO, SETTINGS, SET\_AUTO\_ADMIN\_PASSWORD, SET\_RECOVERY\_LOCK, SHUT\_DOWN\_DEVICE, STOP\_MIRRORING, TRIGGER\_ENHANCED\_LOG\_COLLECTION, UNLOCK\_USER\_ACCOUNT, VALIDATE\_APPLICATIONS, VERIFY\_RECOVERY\_LOCK.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Update computer inventory detail

Action ID: `tools.jamf.update_computer_inventory_detail`

Partially update computer inventory detail; use the userAndLocation section to assign the device to a user.

Reference: [https://developer.jamf.com/jamf-pro/reference/patch\_v4-computers-inventory-detail-id](https://developer.jamf.com/jamf-pro/reference/patch_v4-computers-inventory-detail-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="computer_id" type="string" required>
  Computer ID.
</ParamField>

<ParamField path="payload" type="object" required>
  Partial inventory update; the userAndLocation section assigns the device to a user.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

## Update static computer group

Action ID: `tools.jamf.update_static_group`

Update a Jamf Pro static computer group. Replaces the entire membership, so assignments must be the full desired set of computer IDs rather than only the additions.

Reference: [https://developer.jamf.com/jamf-pro/reference/put\_v3-computer-groups-static-groups-id](https://developer.jamf.com/jamf-pro/reference/put_v3-computer-groups-static-groups-id)

### Secrets

Optional secrets:

* `jamf_oauth`: OAuth token `JAMF_SERVICE_TOKEN`.
* `jamf`: required values `JAMF_API_TOKEN`.

### Input fields

<ParamField path="group_id" type="string" required>
  Static computer group ID.
</ParamField>

<ParamField path="name" type="string" required>
  Group name, from 1 to 255 characters.
</ParamField>

<ParamField path="assignments" type="array[string] | null">
  Full desired set of computer IDs, replacing the entire current membership.

  Default: `null`.
</ParamField>

<ParamField path="base_url" type="string | null">
  Jamf Pro base URL (e.g. [https://acme.jamfcloud.com](https://acme.jamfcloud.com)).

  Default: `null`.
</ParamField>

<ParamField path="description" type="string | null">
  Group description.

  Default: `null`.
</ParamField>

<ParamField path="site_id" type="string | null">
  Jamf Pro site ID.

  Default: `null`.
</ParamField>