Fleet

Fleet MCP lets you connect an AI assistant to Fleet Device Management, enabling you to manage devices, monitor security, and enforce compliance through a safe, configurable bridge. It exposes read-only visibility by default, with options to run SELECT queries and, in controlled modes, perform write operations to Fleet when you authorize them.

How to use

You use Fleet MCP by running it as a local server that your AI assistant can talk to. Start in read-only mode for safe exploration, then enable SELECT queries to monitor fleet state without modifying it. If you need full control, switch to write-enabled mode, but only after assessing risks and permissions.

How to install

Prerequisites you need before starting include a runtime to execute the MCP server and a method to run the MCP process. You will install a runtime helper and then configure the MCP connection to Fleet.

{
  "mcpServers": {
    "fleet": {
      "command": "uvx",
      "args": ["fleet-mcp", "run"],
      "env": {
        "FLEET_SERVER_URL": "https://your-fleet-instance.com",
        "FLEET_API_TOKEN": "your-api-token",
        "FLEET_READONLY": "true",
        "FLEET_ALLOW_SELECT_QUERIES": "true"
      }
    }
  }
}

Additional setup steps

Install the MCP client runner (uvx) or use an equivalent MCP runner that supports the same environment variable pattern. Ensure you have access to the Fleet instance URL and an API token with appropriate permissions. You can reuse the same environment variables shown above when you configure clients or scripts that will connect to Fleet MCP.

Configuration and usage notes

Fleet MCP supports three configuration methods: command-line arguments, environment variables with the FLEET_ prefix, and a configuration file. The configuration file is the recommended approach for security and versioning. Start with read-only mode, then enable additional capabilities as needed.

Security and best practices

• Use a config file to store tokens securely and restrict file permissions.
• Start in strict read-only mode by default, and only enable SELECT queries if you need them.
• Rotate Fleet API tokens regularly and limit permissions to the minimum required for your use case.

Usage examples

Typical interactions include listing hosts, running read-only queries, inspecting software inventories, and checking policy results. When you are ready to modify Fleet, switch to a non-read-only mode and provide explicit confirmation prompts for any write operations.

Troubleshooting quick starts

If you cannot reach Fleet MCP from your client, verify the server URL, token validity, and network connectivity. If a 401 authentication error occurs, ensure the API token is correct and has the necessary permissions. For connection issues, retry with increased timeouts and verify SSL settings if you are using self-signed certificates.

Examples of common commands and flows

• Start with a read-only configuration to explore fleet state and run SELECT queries if enabled.
• When ready, switch to non-read-only mode to perform write operations like creating teams, policies, or scripts (only if your security policy allows it).
• Use the provided environment variables to point Fleet MCP at your Fleet instance and to authorize access.

What you can accomplish with Fleet MCP

You can list and search hosts, run real-time queries against devices, manage policies, inventory software, organize teams and users, and discover Osquery tables. You also get auditing and activity monitoring features to track Fleet actions.

Available tools

fleet_list_hosts

List hosts with filtering, pagination, and search

fleet_get_host

Get detailed information about a specific host by ID

fleet_get_host_by_identifier

Get a host by hostname, UUID, or hardware serial

fleet_search_hosts

Search hosts by hostname, UUID, serial number, or IP

fleet_list_host_upcoming_activities

List upcoming activities for a specific host

fleet_list_host_past_activities

List past activities for a specific host

fleet_get_host_mdm

Get MDM information for a specific host

fleet_list_host_certificates

List certificates for a specific host

fleet_get_host_macadmins

Get macadmins data for a host

fleet_get_host_device_mapping

Get device mapping information for a host

fleet_get_host_encryption_key

Get disk encryption recovery key for a host

fleet_list_queries

List all saved queries with pagination

fleet_get_query

Get details of a specific saved query

fleet_get_query_report

Get latest results from a scheduled query

fleet_list_policies

List all compliance policies

fleet_get_policy_results

Get compliance results for a specific policy

fleet_list_software

List software inventory across the fleet

fleet_get_software

Get detailed information about a specific software item

fleet_get_host_software

Get software installed on a specific host

fleet_get_vulnerabilities

List known vulnerabilities with filtering

fleet_get_cve

Get detailed information about a specific CVE

fleet_search_software

Search for software by name

fleet_find_software_on_host

Find specific software on a host by hostname

fleet_get_software_install_result

Get the result of a software installation request

fleet_list_software_titles

List software titles across the fleet

fleet_get_software_title

Get detailed information about a specific software title

fleet_list_teams

List all teams

fleet_get_team

Get details of a specific team

fleet_list_team_users

List all users in a team

fleet_get_team_secrets

List team enroll secrets

fleet_list_users

List all users with filtering

fleet_get_user

Get details of a specific user

fleet_list_user_sessions

List active sessions for a user

fleet_get_session

Get session details by ID

fleet_list_labels

List all labels

fleet_get_label

Get details of a specific label

fleet_list_packs

List all query packs

fleet_get_pack

Get detailed information about a specific pack

fleet_list_scheduled_queries

List scheduled queries in a pack

fleet_list_scripts

List all scripts available in Fleet

fleet_get_script

Get details of a specific script

fleet_get_script_result

Get the result of a script execution

fleet_list_batch_scripts

List batch script executions

fleet_get_batch_script

Get details of a batch script execution

fleet_get_batch_script_hosts

List hosts in a batch script execution

fleet_list_host_scripts

List scripts available for a host

fleet_list_mdm_commands

List MDM commands that have been executed

fleet_get_mdm_command_results

Get results of MDM commands

fleet_list_mdm_profiles

List MDM configuration profiles

fleet_get_host_mdm_profiles

Get MDM profiles installed on a host

fleet_get_mdm_profiles_summary

Get summary of MDM profile deployment status

fleet_get_filevault_summary

Get FileVault encryption summary

fleet_list_mdm_devices

List all MDM-enrolled Apple devices

fleet_get_bootstrap_metadata

Get metadata about a bootstrap package for a team

fleet_get_bootstrap_summary

Get summary about bootstrap package deployment

fleet_get_setup_assistant

Get the MDM Apple Setup Assistant configuration

fleet_list_mdm_apple_installers

List all Apple MDM installers

fleet_list_app_store_apps

List App Store apps available for installation

fleet_list_vpp_tokens

List VPP tokens configured in Fleet

fleet_get_config

Get the current Fleet application configuration

fleet_get_enroll_secrets

Get enrollment secrets configuration

fleet_get_certificate

Get the Fleet server certificate chain

fleet_get_version

Get Fleet server version information

fleet_list_secrets

List secret variables in Fleet

fleet_list_invites

List pending user invites

fleet_verify_invite

Verify an invite token and get invite details

fleet_list_carves

List file carve sessions

fleet_get_carve

Get details of a carve session

fleet_get_carve_block

Get a data block from a carve session

fleet_get_device_info

Get device information using a device token

fleet_list_activities

List Fleet activities and audit logs

fleet_list_osquery_tables

List available osquery tables with dynamic discovery

fleet_get_osquery_table_schema

Get detailed schema for a specific table

fleet_suggest_tables_for_query

Get AI-powered table suggestions based on intent

fleet_health_check

Check Fleet server connectivity and authentication