# fleet-mcp [Health: Active]

**Category:** 📊 Monitoring  
**Repository:** https://github.com/SimplyMinimal/fleet-mcp  
**GitHub Stars:** 4  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/fleet-mcp

## Description
An MCP server that provides tools for managing and monitoring your Fleet Device Management instance.

## Tools
Capabilities this server exposes over MCP:

- **fleet_list_hosts** — List hosts with filtering, pagination, and search
- **fleet_get_host** — Get detailed information about a specific host by ID
- **fleet_get_host_by_identifier** — Get host by hostname, UUID, or hardware serial
- **fleet_search_hosts** — Search hosts by hostname, UUID, serial number, or IP
- **fleet_list_host_upcoming_activities** — List upcoming activities for a specific host
- **fleet_list_host_past_activities** — List past activities for a specific host
- **fleet_get_host_mdm** — Get MDM information for a specific host
- **fleet_list_host_certificates** — List certificates for a specific host
- **fleet_get_host_macadmins** — Get macadmins data (Munki, MDM profiles) for a host
- **fleet_get_host_device_mapping** — Get device mapping information for a host
- **fleet_get_host_encryption_key** — Get disk encryption recovery key for a host
- **fleet_list_queries** — List all saved queries with pagination
- **fleet_get_query** — Get details of a specific saved query
- **fleet_get_query_report** — Get the latest results from a scheduled query
- **fleet_list_policies** — List all compliance policies
- **fleet_get_policy_results** — Get compliance results for a specific policy
- **fleet_list_software** — List software inventory across the fleet
- **fleet_get_software** — Get detailed information about a specific software item
- **fleet_get_host_software** — Get software installed on a specific host
- **fleet_get_vulnerabilities** — List known vulnerabilities with filtering
- **fleet_get_cve** — Get detailed information about a specific CVE
- **fleet_search_software** — Search for software by name
- **fleet_find_software_on_host** — Find specific software on a host by hostname
- **fleet_get_software_install_result** — Get the result of a software installation request
- **fleet_list_software_titles** — List software titles across the fleet
- **fleet_get_software_title** — Get detailed information about a specific software title
- **fleet_list_teams** — List all teams
- **fleet_get_team** — Get details of a specific team
- **fleet_list_team_users** — List all users that are members of a specific team
- **fleet_get_team_secrets** — List team-specific enroll secrets
- **fleet_list_users** — List all users with filtering
- **fleet_get_user** — Get details of a specific user
- **fleet_list_user_sessions** — List active sessions for a user
- **fleet_get_session** — Get session details by ID
- **fleet_list_labels** — List all labels
- **fleet_get_label** — Get detailed information about a specific label
- **fleet_list_packs** — List all query packs
- **fleet_get_pack** — Get detailed information about a specific pack
- **fleet_list_scheduled_queries** — List scheduled queries in a specific pack
- **fleet_list_scripts** — List all scripts available in Fleet
- **fleet_get_script** — Get details of a specific script
- **fleet_get_script_result** — Get the result of a script execution
- **fleet_list_batch_scripts** — List batch script executions
- **fleet_get_batch_script** — Get details of a batch script execution
- **fleet_list_batch_script_hosts** — List hosts in a batch script execution
- **fleet_list_host_scripts** — List scripts available for a specific host
- **fleet_list_mdm_commands** — List MDM commands that have been executed
- **fleet_get_mdm_command_results** — Get results of MDM commands
- **fleet_list_mdm_profiles** — List MDM configuration profiles
- **fleet_get_host_mdm_profiles** — Get MDM profiles installed on a specific host
- **fleet_get_mdm_profiles_summary** — Get summary of MDM profile deployment status
- **fleet_get_filevault_summary** — Get FileVault encryption summary
- **fleet_list_mdm_devices** — List all MDM-enrolled Apple devices
- **fleet_get_bootstrap_metadata** — Get metadata about a bootstrap package for a team
- **fleet_get_bootstrap_summary** — Get aggregated summary about bootstrap package deployment
- **fleet_get_setup_assistant** — Get the MDM Apple Setup Assistant configuration
- **fleet_list_mdm_apple_installers** — List all Apple MDM installers
- **fleet_list_app_store_apps** — List App Store apps available for installation
- **fleet_list_vpp_tokens** — List VPP tokens configured in Fleet
- **fleet_get_config** — Get the current Fleet application configuration
- **fleet_get_enroll_secrets** — Get the enrollment secrets configuration
- **fleet_get_certificate** — Get the Fleet server certificate chain
- **fleet_get_version** — Get the Fleet server version information
- **fleet_list_secrets** — List secret variables in Fleet
- **fleet_list_invites** — List pending user invites
- **fleet_verify_invite** — Verify an invite token and get invite details
- **fleet_list_carves** — List file carve sessions
- **fleet_get_carve** — Get detailed information about a specific carve session
- **fleet_get_carve_block** — Get a specific block of data from a carve session
- **fleet_get_device_info** — Get device information using a device token
- **fleet_list_activities** — List Fleet activities and audit logs
- **fleet_list_osquery_tables** — List available osquery tables with dynamic discovery
- **fleet_get_osquery_table_schema** — Get detailed schema for a specific table
- **fleet_suggest_tables_for_query** — Get AI-powered table suggestions based on intent
- **fleet_health_check** — Check Fleet server connectivity and authentication
- **fleet_delete_host** — Remove a host from Fleet
- **fleet_transfer_hosts** — Transfer hosts to a different team
- **fleet_query_host** — Run an ad-hoc live query against a specific host
- **fleet_query_host_by_identifier** — Run a live query by hostname/UUID/serial
- **fleet_cancel_host_activity** — Cancel an upcoming activity for a specific host

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `uvx` (confidence: high):

```json
"mcpServers": {
  "fleet-mcp": {
    "command": "uvx",
    "args": ["fleet-mcp"],
    "env": {
      "FLEET_SERVER_URL": "",
      "FLEET_API_TOKEN": ""
    }
  }
}
```

**Requires environment variables:** `FLEET_SERVER_URL`, `FLEET_API_TOKEN` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What fleet-mcp does

The fleet-mcp MCP server gives an AI assistant access to information managed by Fleet Device Management. It is suited to device inventory, endpoint investigation, software tracking, vulnerability review, compliance checks, and team administration. The available operations are centered on listing, searching, and retrieving Fleet records rather than presenting a separate local data store.

Host tools can list devices with filters, pagination, and search, or retrieve a host by ID, hostname, UUID, hardware serial, or IP-related search criteria. Host-specific lookups cover upcoming and past activities, MDM information, certificates, macadmins data, device mappings, and disk-encryption recovery keys.

## How it works

The server runs as an MCP process and uses a Fleet server URL plus an API token to access the configured Fleet instance. A client starts it with the `fleet-mcp run` command; the example configuration uses `uvx` to launch the package. The assistant can then call individual Fleet tools and receive the corresponding records or reports.

## Setup and configuration

Install `uv` or install the package with `pip`, then add the server to an MCP client configuration. Set `FLEET_SERVER_URL` to the Fleet instance URL and `FLEET_API_TOKEN` to a token generated in Fleet. The documented examples also set `FLEET_READONLY` and `FLEET_ALLOW_SELECT_QUERIES`.

Configuration examples are provided for Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, and VS Code. The examples use stdio with `uvx fleet-mcp run`. The token can be obtained from the Fleet UI or by creating an API-only user with `fleetctl`.

## Tools and capabilities

The fleet-mcp MCP server exposes tools for:

- Listing and searching hosts, then retrieving detailed host records.
- Reviewing host activities, MDM data, certificates, macadmins data, mappings, and encryption keys.
- Listing saved queries and policies, retrieving query details, and reading scheduled-query reports.
- Listing software, retrieving software details, checking host installations, searching software, and reading installation results.
- Listing software titles and retrieving individual title details.
- Listing vulnerabilities and retrieving information for a specific CVE.
- Listing teams, retrieving team details, listing team users, and reading team enrollment secrets.

## Limitations and notes

The material documents Fleet access through an API token, so the token's Fleet permissions affect what the assistant can retrieve. Read-only mode and SELECT-query permission are configurable safeguards. The listed tools describe retrieval and search operations; they do not document create or update operations for policies, hosts, teams, or software.

The README includes client-specific configuration examples, but it does not document a remote HTTP deployment mode. Keep Fleet credentials in the client configuration or another protected configuration mechanism rather than exposing them in prompts.

_Full upstream README: https://allmcps.com/mcp/fleet-mcp/readme_