Workspace_one_uem

You can deploy this MCP server to access Workspace ONE UEM APIs from an AI assistant. It provides a standardized interface for device management, user administration, and system operations, enabling automated workflows and easier integrations with your UEM environment.

How to use

You interact with the MCP server from your MCP client to perform common Workspace ONE UEM tasks. Start by configuring the MCP client to point to the local or remote MCP server, then use the available tools to manage devices, users, organization groups, tags, applications, smart groups, and events. The client sends authenticated requests, handles responses, and surfaces results in a usable format for automation or conversational prompts. You can perform bulk operations, query device details, manage user devices, tag devices, and inspect audit events through designed tool endpoints.

How to install

Prerequisites you need before installing the MCP server are Python 3.10 or higher and access to your Workspace ONE UEM environment with API credentials. You also need a compatible MCP client like Claude Desktop to load the server configuration.

# 1. Clone the MCP project
cd /path/to/your/projects
git clone <repository-url>
cd workspace-one-uem-mcp

# 2. Install Python dependencies
pip install -r requirements.txt

Additional setup notes

The server relies on environment configuration to connect to Workspace ONE UEM. You’ll typically provide the base URL, API key, and authentication credentials (OAuth or Basic) in an environment file or through your MCP client. A sample configuration snippet illustrates how to run the server locally with Python and the path to the server script.

Available tools

search_devices

Query devices with filters and return matching results such as status, platform, and last seen time.

get_device_details

Retrieve comprehensive information for a specific device by identifier such as serial or UDID.

send_device_command

Issue commands to a device, like lock, wipe, or query status.

bulk_device_command

Execute commands across multiple devices in a single operation.

get_device_compliance

Check the compliance status of a device against defined policies.

get_device_profiles

List profiles assigned to a device to understand configuration context.

get_device_apps

List applications installed on a device.

get_device_events

View the event history for a device.

search_users

Find users based on various attributes such as email or name.

get_user_details

Fetch detailed information for a specific user.

get_user_devices

Show devices enrolled to a specific user.

search_organization_groups

Search organization groups to locate a specific OG structure.

get_organization_group_details

Retrieve details for a particular organization group.

get_tags

List available tags that can be associated with devices.

add_device_tag

Apply a tag to a device for categorization.

remove_device_tag

Remove a tag from a device.

search_apps

Search for applications managed by Workspace ONE UEM.

get_smart_groups

List smart groups defined in UEM.

get_smart_group_devices

Get devices that belong to a specific smart group.

search_events

Query system or admin events within the MCP-enabled environment.

get_api_version

Verify the MCP API connectivity and version compatibility.