Device Management
ManageEngine MDM
API integration
Ship Device Management features without building the integration. Full ManageEngine MDM API access via Proxy and 150+ MCP-ready tools for AI agents — extend models and mappings to fit your product.
Talk to usUse Cases
Why integrate with ManageEngine MDM
Common scenarios for SaaS companies building ManageEngine MDM integrations for their customers.
Automate employee lifecycle for device provisioning and offboarding
HRIS and identity platforms can trigger MDM group assignments on hire and remote wipes on termination, closing the loop between HR events and endpoint security without manual IT intervention.
Continuous endpoint compliance monitoring for GRC platforms
Compliance and security tools can nightly-sync device inventory, FileVault status, passcode restrictions, and installed certificates to prove SOC2, HIPAA, or ISO 27001 controls are enforced across the fleet.
Embed remote device actions inside helpdesk and ITSM workflows
Ticketing platforms can let agents lock, wipe, locate, or enable lost mode on a user's device directly from a ticket, eliminating console-switching and shortening resolution times.
Sync device inventory into ITAM and finance systems
Asset management platforms can maintain a live source of truth for hardware, OS versions, ownership, and app/VPP license consumption, helping finance reconcile spend and IT track warranty status.
Distribute apps, profiles, and content from external admin consoles
Security, LMS, or internal tooling platforms can push VPP apps, configuration profiles, and secure documents to specific devices or groups without their users leaving the parent product.
What You Can Build
Ship these features with Truto + ManageEngine MDM
Concrete product features your team can ship faster by leveraging Truto’s ManageEngine MDM integration instead of building from scratch.
One-click remote wipe and lock from your UI
Expose ManageEngine MDM device actions (lock, wipe, reboot, lost mode) as native buttons in your app using the perform_action endpoint.
Live device fleet dashboard
List and drill into every enrolled device with OS, hardware, security posture, and last-seen data pulled from the device and summary endpoints.
Automated group-based policy assignment
Move devices between MDM groups on HR or role changes to instantly apply the right profiles, apps, and compliance policies via the group membership endpoints.
FileVault and restriction compliance checks
Run scheduled scans against get_filevault and get_restrictions to flag non-compliant macOS and mobile devices in your GRC dashboard.
Geo-locate lost devices from a support ticket
Trigger a location request and fetch the latest address-resolved coordinates directly into your helpdesk thread using the location endpoints.
Blocklist app monitoring and remediation
Detect prohibited apps installed on devices via the blacklist status endpoint and push blocklist enforcement to devices or groups in a single call.
SuperAI
ManageEngine MDM AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_manage_engine_mdm_devices
List managed devices in ManageEngine MDM. Returns: device_id, os_version, is_lost_mode_enabled, owned_by, is_removed, product_name, device_name, platform_type, platform_type_id, udid, serial_number, model, user, imei, summary. Optional filters include search, group_id, platform, device_type, owned_by, email, imei, and serial_number.
get_single_manage_engine_mdm_device_by_id
Get detailed information about a specific managed device in ManageEngine MDM by id. Returns the full device object including model, serial_number, os, security, battery_level, network_usage, sims, knox_details, and summary. The optional summary query parameter includes profile/app/doc/group counts. Required: id.
update_a_manage_engine_mdm_device_by_id
Update device details such as name, asset tag, warranty, and purchase information in ManageEngine MDM by id. Returns the updated device object including model, serial_number, os, security, and summary. To revert fields to defaults, provide empty string and -1. Required: id.
manage_engine_mdm_devices_get_summary
Get a summary of a managed device in ManageEngine MDM. Returns: agent_version, device_name, doc_count, device_id, group_count, platform_type, last_contact_time, profile_count, app_count, group. Required: device_id.
manage_engine_mdm_devices_get_certificates
Get certificates installed on a managed device in ManageEngine MDM. Returns the certificates object containing managedcertificates and unmanagedcertificates arrays, each with certificatename, certificatesubjectname, certificateissuername, certificateexpiry, serialnumber, isidentity, signaturealgorithmoid, and signaturealgorithmname. Required: device_id.
manage_engine_mdm_devices_get_restrictions
Get device restrictions applied to a managed device in ManageEngine MDM. Returns: allow_inapp_purchase, developer_unlock, allow_app_removal, allow_news, show_notification_center, allow_radio_service, allow_profile_installation, request_to_leave_classroom, allow_managed_book_sync, allow_bluetooth_modification, allow_use_of_ibookstore, allow_open_doc_in_managed, allow_diagnostic_submission,…
manage_engine_mdm_devices_get_filevault
Get FileVault encryption details for a managed Mac device in ManageEngine MDM. Returns the filevault object including filevault_status, is_encryption_enabled, is_institution_recovery_key, is_personal_recovery_key, and resource_id. Required: device_id.
manage_engine_mdm_devices_get_firmware
Get firmware details for a managed Mac machine in ManageEngine MDM. Returns: is_firmware_change_pending, is_roms_allowed, is_firmware_password_exists, firmware_mode, managed_password_id. Required: device_id.
manage_engine_mdm_devices_get_firmware_password
Get the firmware password of a managed Mac machine in ManageEngine MDM. Returns: firmware_password, resource_id. Required: device_id.
manage_engine_mdm_devices_get_locations_all
Get the location details of all managed devices in ManageEngine MDM. Returns the deviceLocationMap containing per-device arrays of location records with added_time, latitude, longitude, and located_time.
manage_engine_mdm_devices_get_location
Get the location history of a managed device in ManageEngine MDM. Returns: locations. Required: device_id.
manage_engine_mdm_devices_get_location_with_address
Get device location history with resolved addresses from a prior location request in ManageEngine MDM. Returns: locations. Required: device_id.
manage_engine_mdm_devices_request_location
Request device location with address details in ManageEngine MDM. By default, the last 3 days of location data is provided in the professional edition and the last known location in the standard edition. Returns: export_batch_id, wait, status. Required: device_id.
manage_engine_mdm_devices_list_profiles
List the profiles installed on a ManageEngine MDM device. Returns: profile_id, profile_name, profile_description, status, platform_type, latest_version, executed_version, associated_by_user_name, associated_by_user_id, associated_on, applied_time, created_time, created_user, last_modified_time, last_modified_user, remark, localized_remarks. Required: device_id.
manage_engine_mdm_devices_associate_profiles
Associate one or more MDM profiles to a device in ManageEngine MDM. Returns an empty 204 response on success. Required: device_id, profile_ids.
manage_engine_mdm_devices_disassociate_profiles
Disassociate one or more profiles from a device in ManageEngine MDM. Returns an empty 204 response on success. Required: device_id.
manage_engine_mdm_devices_get_profile_details
Get details of a specific profile associated to a device in ManageEngine MDM. Returns: created_time, last_modified_user, last_modified_time, created_user, associated_by_user_name, remark, applied_time, profile_description, associated_by_user_id, localized_remarks, profile_name, platform_type, latest_version, executed_version, profile_id, associated_on, status. Required: device_id, profile_id.
manage_engine_mdm_devices_get_configuration_profiles
List all installed configuration profiles on a device in ManageEngine MDM, including both user-installed and MDM-installed profiles. Returns: payload_uuid, payload_identifier, payload_description, payload_organization, payload_type, payload_version, payload_has_rem_password, payload_is_encrypted, payload_display_name, payload_unremovable, payloadcontent. Required: device_id.
manage_engine_mdm_devices_list_apps
List the apps installed on a ManageEngine MDM device. Returns: app_id, app_name, app_type, app_category_name, is_paid_app, platform_type, latest_version, executed_version, islatestver, associated_by, associated_on, remarks, localized_remark, status, release_label_details. Required: device_id.
manage_engine_mdm_devices_associate_apps
Associate one or more apps to a specific device in ManageEngine MDM. Returns a status response confirming the app-to-device association. Required: device_id.
manage_engine_mdm_devices_disassociate_apps
Dissociate apps from a device in ManageEngine MDM. Returns an empty 204 response on success. Required: device_id.
manage_engine_mdm_devices_get_app_details
Get details of a specific app distributed to a device in ManageEngine MDM. Returns the app object including app_id, app_name, status, platform_type, associated_by, associated_on, release_label_details, latest_version, and remarks. Required: device_id, app_id.
manage_engine_mdm_devices_refresh_app_status
Refresh the app installation status for a device in ManageEngine MDM. Returns an empty 204 response on success. Required: device_id.
manage_engine_mdm_devices_get_polltime
Get the next poll time for a ManageEngine MDM device. Returns: next_poll_time. Required: device_id.
manage_engine_mdm_devices_get_applicable_actions
Get applicable remote actions for a ManageEngine MDM device. Returns: knox_actions, actions. Required: device_id.
manage_engine_mdm_devices_perform_action
Perform an action on a ManageEngine MDM device such as scan, lock, remote control, complete wipe, or enable lost mode. Returns an empty 202 Accepted response on success. Required: device_id, action_name.
manage_engine_mdm_devices_get_scan_status
Get the last scan status for a ManageEngine MDM device. Returns: status_description, status_code, kb_url. Required: device_id.
manage_engine_mdm_devices_get_privacy
Get privacy settings for a ManageEngine MDM device. Returns: fetch_location, view_privacy_settings, disable_wipe, fetch_device_name, fetch_installed_app, disable_bug_report, applicable_for, disable_remote_control, fetch_phone_number. Required: device_id.
manage_engine_mdm_devices_execute_bulk_command
Execute a bulk device command in ManageEngine MDM by command name. The response payload is command-specific and cannot be enumerated from the available source documentation. Required: command_name.
manage_engine_mdm_devices_get_command_history
Get command history for a specific device in ManageEngine MDM. Returns: command_status, managed_status, command_id, command_name, added_time, device_id, added_by, command_history_id, added_by_name, command_life, remarks_args, remarks. Required: device_id.
manage_engine_mdm_devices_get_recent_command
Get the last initiated command status for a ManageEngine MDM device. Returns: status_description, status_code, command_name, kb_url. Required: device_id.
manage_engine_mdm_devices_apply_knox_action
Apply a Knox action to a ManageEngine MDM device. Returns: status_description, status_code, command_name, kb_url. Required: device_id, action_name.
manage_engine_mdm_devices_remove_action
Remove a pending action from a ManageEngine MDM device if it has not yet been performed. Returns an empty 204 response on success. Required: device_id, action_name.
list_all_manage_engine_mdm_groups
List Manage Engine MDM groups available in MDM. Returns: group_id, name, group_type, domain, description.
create_a_manage_engine_mdm_group
Create a Manage Engine MDM group for managing devices. Returns: group_id, name, group_type, domain, description. Required: name, group_type.
get_single_manage_engine_mdm_group_by_id
Get details of a specific Manage Engine MDM group by id. Returns: group_id, name, group_type, domain, description. Required: id.
delete_a_manage_engine_mdm_group_by_id
Delete a Manage Engine MDM group by id. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_groups_list_members
List members present in a ManageEngine MDM group. Returns: member_ids. Required: group_id. Use the include=memberdetails query parameter to request expanded member detail in the response.
manage_engine_mdm_groups_add_members
Add multiple members simultaneously to an existing ManageEngine MDM group. Returns: member_ids. Required: group_id, member_ids.
manage_engine_mdm_groups_add_member
Add a particular member to a selected ManageEngine MDM group. Returns an empty 202 response on success. Required: group_id, member_id.
manage_engine_mdm_groups_remove_member
Remove a member from a particular ManageEngine MDM group. Returns an empty 204 response on success. Required: group_id, member_id.
manage_engine_mdm_groups_associate_apps
Associate one or more apps to a ManageEngine MDM group by providing a list of app IDs. Returns an empty response on success. Required: group_id, app_ids.
manage_engine_mdm_groups_disassociate_apps
Disassociate all apps from a ManageEngine MDM group. Returns an empty 204 response on success. Required: group_id.
manage_engine_mdm_groups_associate_profiles
Associate configuration profiles to a ManageEngine MDM group. Returns an empty response on success. Required: group_id, profile_ids.
manage_engine_mdm_groups_disassociate_profiles
Disassociate configuration profiles from a ManageEngine MDM group. Returns an empty response on success. Required: group_id, profile_ids.
manage_engine_mdm_groups_move_devices
Move a set of members from one ManageEngine MDM group to other target groups. Returns: success. Required: group_id, member_ids, target_group_ids.
manage_engine_mdm_groups_move_devices_to_target
Move a set of members from one ManageEngine MDM group to other target groups. Returns: success. Required: group_id, member_ids, target_group_ids.
list_all_manage_engine_mdm_profiles
List MDM profiles in ManageEngine Mobile Device Manager Plus. Returns: creation_time, last_modified_time, profile_version, payloads, last_modified_by, profile_description, created_by, collection_id, profile_name, profile_status, platform_type, is_moved_to_trash, profile_id, scope, profile_status_id, provider_type, connection_type, ondemandrule, proxy_type, send_all_nw_traffic, proxy_server_port,…
create_a_manage_engine_mdm_profile
Create a new MDM profile in ManageEngine Mobile Device Manager Plus. Returns the created profile including profile_id, profile_name, profile_status, platform_type, and payloads. Required: profile_name, platform_type.
manage_engine_mdm_profiles_trash
Trash or permanently delete MDM profiles in ManageEngine Mobile Device Manager Plus. On first call the profile is trashed; if already trashed it is deleted permanently. Returns an empty 204 response on success. Required: profile_ids.
get_single_manage_engine_mdm_profile_by_id
Get a single MDM profile by id in ManageEngine Mobile Device Manager Plus. Returns: creation_time, last_modified_time, profile_version, payloads, last_modified_by, profile_description, created_by, collection_id, profile_name, profile_status, platform_type, is_moved_to_trash, profile_id, scope, profile_status_id, provider_type, connection_type, ondemandrule, proxy_type, send_all_nw_traffic,…
update_a_manage_engine_mdm_profile_by_id
Modify an existing MDM profile in ManageEngine Mobile Device Manager Plus. Returns an empty 202 response on success. Required: id.
manage_engine_mdm_profiles_list_payloads
List all payload types configured within a ManageEngine MDM profile. Returns: payloads, provider_type, connection_type, ondemandrule, proxy_type, send_all_nw_traffic, proxy_server_port, proxy_server, vpn_type, sub_config, config_id, ondemand_match_app_enabled, proxy_pac_url, config_type, config_name, ikev2, connection_name, enable_vpn_on_demand, proxy_user_name, certificate_uuid, proxy_password.…
manage_engine_mdm_profiles_get_payload_ids
Get the payload item IDs for a specific payload type within a ManageEngine MDM profile. Returns: payload_name, payloaditems, provider_type, connection_type, ondemandrule, proxy_type, send_all_nw_traffic, proxy_server_port, proxy_server, vpn_type, sub_config, config_id, ondemand_match_app_enabled, proxy_pac_url, config_type, config_name, ikev2, connection_name, enable_vpn_on_demand,…
manage_engine_mdm_profiles_add_payload
Add a payload of a specific type to a ManageEngine MDM profile. Returns the created payload configuration including payload_id, max_passcode_age, require_alphanumeric, min_passcode_length, and payload-type-specific fields. Required: profile_id, payload_name. The request body structure varies by payload type.
manage_engine_mdm_profiles_remove_payload
Remove a payload type and all its items from a ManageEngine MDM profile. Returns an empty 204 response on success. Required: profile_id, payload_name.
manage_engine_mdm_profiles_get_payload_details
Get detailed configuration for a specific payload item in a ManageEngine MDM profile. Returns: max_passcode_age, require_alphanumeric, max_failed_attempts, min_passcode_length, min_complex_chars, no_of_passcode_maintained, allow_simple_value, auto_lock_idle_for, max_grace_period, payload_id, provider_type, connection_type, ondemandrule, proxy_type, send_all_nw_traffic, proxy_server_port,…
manage_engine_mdm_profiles_remove_payload_item
Remove a specific payload item from a ManageEngine MDM profile. Returns an empty 204 response on success. Required: profile_id, payload_name, payload_id.
manage_engine_mdm_profiles_publish
Publish a ManageEngine MDM profile so it can be distributed to devices and groups. Every profile needs to be published before it can be distributed. Returns an empty 204 response on success. Required: profile_id.
manage_engine_mdm_profiles_update_all
Update a ManageEngine MDM profile to all associated devices and groups. Returns an empty 202 response on success. Required: profile_id.
manage_engine_mdm_profiles_bulk_update
Update a specific payload item within a ManageEngine MDM profile by replacing its configuration. Returns the payload configuration object with payload-type-specific fields. Required: profile_id, payload_name, payload_id. The request body structure varies by payload type — refer to the ManageEngine MDM Profile API Help page for the payload-specific JSON format of each type.
list_all_manage_engine_mdm_apps
List apps available in the ManageEngine MDM App Repository. Returns: app_id, app_name, app_category, app_type, bundle_identifier, version, platform_type, description, icon, store_url, is_app_paid, country_code, store_id, added_time, modified_time, release_labels.
create_a_manage_engine_mdm_app
Add a Store or enterprise app to the ManageEngine MDM server. Returns: app_id, app_name, app_category, app_type, bundle_identifier, version, platform_type, description, icon, store_url, is_app_paid, country_code, store_id, added_time, modified_time, release_labels. Required: app_name, app_type, app_file, app_category_id, supported_devices, release_label_id.
get_single_manage_engine_mdm_app_by_id
Get details of a specific app version in ManageEngine MDM by app and release label. Returns: app_id, app_name, app_category, app_type, bundle_identifier, version, platform_type, description, icon, store_url, is_app_paid, country_code, store_id, added_time, modified_time, release_labels. Required: app_id, id.
manage_engine_mdm_apps_create_app_channel
Create a release label channel for maintaining multiple versions of enterprise apps in ManageEngine MDM. Returns: release_label_id. Required: channel_name.
manage_engine_mdm_apps_associate_to_devices
Associate an app to specific devices in ManageEngine MDM. Returns an empty 202 response on success. Required: app_id, release_label_id, device_ids.
manage_engine_mdm_apps_associate_to_groups
Associate a ManageEngine MDM app to one or more groups for a specific release label. Returns an empty 202 response on success. Required: app_id, release_label_id, group_ids.
update_a_manage_engine_mdm_app_by_id
Update a ManageEngine MDM app's details or app version within a specific release label. Returns the updated app object including app_id, app_name, version, platform_type, app_type, and release_labels. Required: app_id, id.
manage_engine_mdm_apps_approve_version
Approve a specific app version within a release label in ManageEngine MDM. Returns the app object including app_id, app_name, version, platform_type, and release_labels. Required: app_id, release_label_id.
manage_engine_mdm_apps_disassociate_from_device
Disassociate a ManageEngine MDM app from a specific device. Returns an empty 204 response on success. Required: app_id, device_id.
manage_engine_mdm_apps_disassociate_from_group
Disassociate a ManageEngine MDM app from a specific group. Returns an empty 204 response on success. Required: app_id, group_id.
delete_a_manage_engine_mdm_app_by_id
Delete an existing app from the ManageEngine MDM App Repository by id. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_apps_delete_version
Delete a specific version of an app from the ManageEngine MDM App Repository. Approved app versions cannot be deleted. Returns an empty 204 response on success. Required: app_id, release_label_id.
list_all_manage_engine_mdm_blacklist_apps
List apps available for blocklisting in the ManageEngine MDM inventory. Returns: identifier, appgroupid, platform, appname.
manage_engine_mdm_blacklist_apps_add
Add a new app to the blocklist repository in ManageEngine MDM. Returns: identifier, appgroupid, platform, appname. Required: apps.
manage_engine_mdm_blacklist_apps_blocklist_devices
Blocklist apps on managed devices in ManageEngine MDM. Returns: resource_ids. Required: resource_ids, app_group_ids.
manage_engine_mdm_blacklist_apps_remove_from_devices
Remove blocklisted apps from managed devices in ManageEngine MDM. Returns: resource_ids. Required: resource_ids, app_group_ids.
manage_engine_mdm_blacklist_apps_blocklist_groups
Blocklist apps from device groups in ManageEngine MDM. Returns: resource_ids. Required: resource_ids, app_group_ids.
manage_engine_mdm_blacklist_apps_remove_from_groups
Remove blocklisted apps from groups in ManageEngine MDM. Returns: resource_ids. Required: resource_ids, app_group_ids.
manage_engine_mdm_blacklist_apps_get_status
Get the blocklist status of apps on devices managed by ManageEngine MDM. Returns the Blackliststatus array with each entry containing status, resourceId, identifier, and appname.
list_all_manage_engine_mdm_content
List content (documents and media) available on the ManageEngine MDM server. Returns: doc_id, doc_name, added_time, updated_time, last_modified_by_name, last_modified_by, created_by_name, created_by, size, doc_type, repository_type, description.
create_a_manage_engine_mdm_content
Add a document or media file to the ManageEngine MDM server. Returns: doc_id, doc_name, added_time, updated_time, last_modified_by_name, last_modified_by, created_by_name, created_by, size, doc_type, repository_type, description. Required: tags, description, file_id.
get_single_manage_engine_mdm_content_by_id
Get details of a specific document or media file in ManageEngine MDM by id. Returns: doc_id, doc_name, added_time, updated_time, last_modified_by_name, last_modified_by, created_by_name, created_by, size, doc_type, repository_type, description. Required: id.
update_a_manage_engine_mdm_content_by_id
Update content on the ManageEngine MDM server by id. Returns: doc_id, doc_name, added_time, updated_time, last_modified_by_name, last_modified_by, created_by_name, created_by, size, doc_type, repository_type, description. Required: id, tags, description, file_id.
delete_a_manage_engine_mdm_content_by_id
Delete a document or media file from the ManageEngine MDM server by id. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_content_associate_to_devices
Associate ManageEngine MDM content to one or more devices by device ID. Returns an empty 204 response on success. Required: doc_id, devices.
manage_engine_mdm_content_disassociate_from_devices
Disassociate ManageEngine MDM content from one or more devices by device ID. Returns an empty 204 response on success. Required: doc_id, devices.
manage_engine_mdm_content_associate_to_groups
Associate ManageEngine MDM content to one or more groups by group ID. Returns an empty 204 response on success. Required: doc_id, groups.
manage_engine_mdm_content_disassociate_from_groups
Disassociate ManageEngine MDM content from one or more groups by group ID. Returns an empty 204 response on success. Required: doc_id, groups.
manage_engine_mdm_content_associate_to_users
Associate ManageEngine MDM content to one or more users by user ID. Returns an empty 204 response on success. Required: doc_id, users.
manage_engine_mdm_content_disassociate_from_users
Disassociate content (document or media) from a list of users in ManageEngine MDM. Returns an empty 204 response on success. Required: doc_id.
list_all_manage_engine_mdm_announcements
List all announcements in ManageEngine MDM. Returns: announcement_name, announcement_format, creation_time, created_by_user, last_modified_time, collection_id, profile_id, last_modified_by_user, ack_button, announcement_id, is_moved_to_trash, needs_acknowledgement, announcement_detail, no_of_devices_distributed, no_of_groups_distributed.
create_a_manage_engine_mdm_announcement
Create a new announcement in ManageEngine MDM. Returns an empty 204 response on success. Required: announcement_name, announcement_format, announcement_detail.
manage_engine_mdm_announcements_delete_bulk
Delete one or more announcements in ManageEngine MDM. Returns an empty 204 response on success.
get_single_manage_engine_mdm_announcement_by_id
Get details of a specific announcement in ManageEngine MDM by id. Returns: announcement_name, announcement_format, creation_time, created_by_user, last_modified_time, collection_id, profile_id, last_modified_by_user, ack_button, announcement_id, is_moved_to_trash, needs_acknowledgement, announcement_detail, no_of_devices_distributed, no_of_groups_distributed. Required: id.
update_a_manage_engine_mdm_announcement_by_id
Modify an existing announcement in ManageEngine MDM by id. Returns an empty 204 response on success. Required: id, announcement_name, announcement_format, announcement_detail.
delete_a_manage_engine_mdm_announcement_by_id
Delete an announcement by id in ManageEngine MDM. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_announcements_get_group_distribution
Get the group IDs to which a ManageEngine MDM announcement is distributed. Returns: groups. Required: announcement_id.
manage_engine_mdm_announcements_distribute_to_groups
Distribute an announcement to specified groups in ManageEngine MDM. Returns an empty 204 response on success. Required: announcement_id, group_ids.
manage_engine_mdm_announcements_remove_from_groups
Disassociate a ManageEngine MDM announcement from the specified groups. Returns an empty 204 response on success. Required: announcement_id, group_ids.
manage_engine_mdm_announcements_distribute_to_devices
Distribute an announcement to specific devices in ManageEngine MDM by providing a list of device IDs. Returns an empty 204 response on success. Required: announcement_id, device_ids.
manage_engine_mdm_announcements_remove_from_devices
Remove an announcement from specific devices in ManageEngine MDM by disassociating it from the given device IDs. Returns an empty 204 response on success. Required: announcement_id, device_ids.
manage_engine_mdm_announcements_get_device_distribution
Get the device IDs to which an announcement is distributed in ManageEngine MDM. Returns: devices. Required: announcement_id.
list_all_manage_engine_mdm_enrollment_settings
Get ManageEngine MDM enrollment settings configuration. Returns: is_authentication_handling_available, selected_ad, directory_authentication, auth_mode, email_unmanaged_alerts, notify_device_unmanaged, is_ad_integrated.
manage_engine_mdm_enrollment_settings_save
Save ManageEngine MDM enrollment settings for on-premises. Returns: status. Required: auth_mode, email_unmanaged_alerts, notify_device_unmanaged.
manage_engine_mdm_enrollment_settings_save_inactive_policy
Save ManageEngine MDM inactive device policy settings, configuring the action type and inactivity thresholds for devices that have not contacted the MDM server. Returns: status. Required: action_type, action_threshold, inactive_threshold.
manage_engine_mdm_enrollment_settings_delete_inactive_policy
Delete ManageEngine MDM inactive device policy settings for devices that have not contacted the MDM server. Returns an empty 204 response on success.
list_all_manage_engine_mdm_users
List managed users in ManageEngine MDM with optional filtering by group, user type, or search keyword. Returns: email_address, user_id, name, phone_number, domain.
manage_engine_mdm_users_remove_multiple
Remove multiple managed users from ManageEngine MDM by providing their user IDs. Returns an empty 204 response on success. Required: user_ids.
get_single_manage_engine_mdm_user_by_id
Get details of a specific managed user in ManageEngine MDM by id. Returns: user_email, user_id, name, phone_number, device_count. Required: id.
manage_engine_mdm_users_remove
Remove a specific managed user from ManageEngine MDM. Returns an empty 204 response on success. Required: user_id.
update_a_manage_engine_mdm_user_by_id
Modify a managed user in ManageEngine MDM by updating their email, name, and phone number. Returns an empty 202 response on success. Required: id, user_email, user_name, phone_number.
manage_engine_mdm_users_get_devices
Get device IDs associated with a user in ManageEngine MDM by filtering on email and domain. Returns: device_ids. Optional: email_id, domain_name.
list_all_manage_engine_mdm_compliance
List all fence policies (compliance profiles) in ManageEngine MDM. Returns: compliance_id, collection_id, compliance_status, compliance_name, platform_type, created_by, created_by_name, creation_time, last_modified_by, last_modified_by_name, last_modified_time, total_count, yet_to_evaluate_count, compliant_devices_count, non_compliant_devices_count, not_applicable_count, notification_sent_count.
create_a_manage_engine_mdm_compliance
Create a new fence policy (compliance profile) in ManageEngine MDM with geofence rules and violation actions. Returns: policies, description, rule, compliance_name, collection_id, is_moved_to_trash, compliance_id. Required: policies, description, compliance_name.
manage_engine_mdm_compliance_delete_multiple
Delete multiple fence policies in ManageEngine MDM. Returns an empty 204 response on success.
get_single_manage_engine_mdm_compliance_by_id
Get a specific fence policy (compliance profile) by id in ManageEngine MDM. Returns: policies, description, rule, compliance_name, collection_id, is_moved_to_trash, compliance_id. Required: id.
update_a_manage_engine_mdm_compliance_by_id
Modify an existing fence policy (compliance profile) by id in ManageEngine MDM with updated geofence rules and violation actions. Returns: policies, description, rule, compliance_name, collection_id, is_moved_to_trash, compliance_id. Required: id, policies, description, compliance_name.
delete_a_manage_engine_mdm_compliance_by_id
Delete a Fence Policy (compliance profile) in ManageEngine MDM by id. Returns an empty 204 response on success. Required: id.
list_all_manage_engine_mdm_compliance_groups
List Fence Policy groups associated with compliance policies in ManageEngine MDM. Returns: group_id, group_name, group_type, member_count.
create_a_manage_engine_mdm_compliance_group
Associate a Fence Policy to multiple device groups in ManageEngine MDM. Returns an empty 204 response on success. Required: group_ids.
get_single_manage_engine_mdm_compliance_group_by_id
Get details of a specific Fence Policy group by id in ManageEngine MDM. Returns: group_id, group_name, group_type, member_count. Required: id.
update_a_manage_engine_mdm_compliance_group_by_id
Modify a Fence Policy group by id in ManageEngine MDM. Returns: group_id, group_name, group_type, member_count. Required: id.
delete_a_manage_engine_mdm_compliance_group_by_id
Delete a Fence Policy group by id in ManageEngine MDM. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_compliance_groups_associate
Associate a Fence Policy to multiple device groups in ManageEngine MDM. Returns an empty 204 response on success. Required: compliance_id, group_ids.
manage_engine_mdm_compliance_groups_disassociate
Disassociate a Fence Policy from multiple device groups in ManageEngine MDM. Returns an empty 204 response on success. Required: compliance_id.
list_all_manage_engine_mdm_scheduled_actions
List scheduled actions in ManageEngine MDM. Returns an empty 202 Accepted response on success.
create_a_manage_engine_mdm_scheduled_action
Create a scheduled action in ManageEngine MDM to execute Remote Restart or Shutdown on devices in groups at a specific date, time, week, or day. Returns an empty 202 Accepted response on success. Required: groups, time_zone, schedule_params, reason_message, execution_type, expiry, schedule_once_time.
get_single_manage_engine_mdm_scheduled_action_by_id
Get a scheduled action by id in ManageEngine MDM. Returns an empty 202 Accepted response on success. Required: id.
update_a_manage_engine_mdm_scheduled_action_by_id
Update an existing scheduled action in ManageEngine MDM. Returns an empty 202 Accepted response on success. Required: id, group_action_id, groups, time_zone, schedule_params, reason_message, execution_type, expiry, schedule_once_time.
delete_a_manage_engine_mdm_scheduled_action_by_id
Delete (suspend) a scheduled action in ManageEngine MDM, stopping it from being executed on devices in groups. Returns an empty 202 Accepted response on success. Required: id, group_action_id.
manage_engine_mdm_scheduled_actions_suspend
Suspend a scheduled action in ManageEngine MDM to stop it from being executed on devices in groups. Returns an empty 202 response on success. Required: action_id.
manage_engine_mdm_scheduled_actions_validate_group
Validate groups on which a scheduled action needs to be executed in ManageEngine MDM before scheduling. Returns an empty 202 Accepted response on success. Required: groups, action_name.
list_all_manage_engine_mdm_vpp
List all VPP (Volume Purchase Program) location tokens added to ManageEngine MDM. Returns: non_vpp_app_count, vpp_token_details, trash_count.
create_a_manage_engine_mdm_vpp
Add a new VPP location token (server token) to ManageEngine MDM. Returns: location_name, expired, businessstore_id, organisation_name, expiry_date. Required: vpp_token_file, email_address.
get_single_manage_engine_mdm_vpp_by_id
Get details of a specific VPP location token in ManageEngine MDM by id. Returns: non_vpp_apps_count, location_name, total_apps_count, expiry_date, last_sync_time, org_type, organization_name, businessstore_id, license_assign_type. Required: id.
update_a_manage_engine_mdm_vpp_by_id
Modify an existing VPP location token in ManageEngine MDM by id. Returns an empty 202 response on success. Required: id, vpp_token_file, email_address.
delete_a_manage_engine_mdm_vpp_by_id
Delete a specific VPP location token from ManageEngine MDM by id. Returns an empty 202 response on success. Required: id.
manage_engine_mdm_vpp_get_apps
Get the list of VPP apps for a specific VPP token in ManageEngine MDM. Returns the apps array where each item includes appgroupid, appname, displayimageloc, licensecount, packageid, and resourcecount. Required: vpp_id.
manage_engine_mdm_vpp_associate_apps
Associate VPP apps to devices for a specific VPP token in ManageEngine MDM. Returns an empty 204 response on success. Required: vpp_id.
manage_engine_mdm_vpp_disassociate_apps
Disassociate VPP apps from devices for a specific VPP token in ManageEngine MDM. Returns an empty 204 response on success. Required: vpp_id.
manage_engine_mdm_vpp_delete_all
Delete all VPP location tokens from ManageEngine MDM. Associated apps are also removed once the tokens are deleted. Returns an empty 202 response on success.
manage_engine_mdm_vpp_get_all_sync_status
Get the sync status of all VPP location tokens in ManageEngine MDM. Returns the vpp_sync_details array where each item includes businessstore_id, if_sync_failed, status, failed_apps_count, total_apps_count, completed_apps_count, successful_apps_count, remarks, and other_mdm_hostname.
manage_engine_mdm_vpp_sync_all
Sync all VPP location tokens with the ManageEngine MDM server. Returns an empty 202 response on success.
manage_engine_mdm_vpp_get_failure_details
Get failure details for apps that failed to sync under a specific VPP location token in ManageEngine MDM. Returns the apps list including appgroupid, appname, displayimageloc, licensecount, packageid, and resourcecount for each failed app. Required: vpp_id.
manage_engine_mdm_vpp_get_sync_status
Get the sync status of a specific VPP location token in ManageEngine MDM. Returns: if_license_insufficient, if_sync_failed, apps_with_insufficient_licenses, failed_apps_count, total_apps_count, successful_apps_count, last_sync_time, completed_apps_count, remarks, status, other_mdm_hostname. Required: vpp_id.
manage_engine_mdm_vpp_sync
Sync a specific VPP location token with the ManageEngine MDM console. Returns an empty 202 response on success. Required: vpp_id.
list_all_manage_engine_mdm_files
List files uploaded to ManageEngine MDM. Returns: content_type, file_name, file_id, expiry_time, content_length.
create_a_manage_engine_mdm_file
Upload a file to ManageEngine MDM for usage in other API calls. Returns: content_type, file_name, file_id, expiry_time, content_length. Required: content_disposition, stream. The /api/v1/mdm/files endpoint is deprecated.
get_single_manage_engine_mdm_file_by_id
Get details of a specific file in ManageEngine MDM by id. Returns: content_type, file_name, file_id, expiry_time, content_length. Required: id.
delete_a_manage_engine_mdm_file_by_id
Delete a file from ManageEngine MDM by id. Returns an empty 204 response on success. Required: id.
manage_engine_mdm_files_associate_to_devices
Associate a file to one or more devices in ManageEngine MDM. Returns an empty 204 response on success. Required: file_id.
manage_engine_mdm_files_disassociate_from_devices
Disassociate a file from devices in ManageEngine MDM. Returns an empty 204 response on success. Required: file_id.
manage_engine_mdm_files_associate_to_groups
Associate a file to one or more groups in ManageEngine MDM. Returns an empty 204 response on success. Required: file_id, groups.
manage_engine_mdm_files_disassociate_from_groups
Disassociate a file from groups in ManageEngine MDM. Returns an empty 204 response on success. Required: file_id.
manage_engine_mdm_files_distribute_to_devices
Distribute a file to specific devices in ManageEngine MDM. Returns an empty 204 response on success. Required: file_id.
manage_engine_mdm_files_distribute_to_groups
Distribute a file to one or more device groups in ManageEngine MDM. Returns a distribution status response confirming the file was sent to the specified groups. Required: file_id.
Why Truto
Why use Truto’s MCP server for ManageEngine MDM
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 650+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
How It Works
From zero to integrated
Go live with ManageEngine MDM in under an hour. No boilerplate, no maintenance burden.
Link your customer’s ManageEngine MDM account
Use Truto’s frontend SDK to connect your customer’s ManageEngine MDM account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call ManageEngine MDM
Truto’s Proxy API is a 1-to-1 mapping of the ManageEngine MDM API. You call us, we call ManageEngine MDM, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate ManageEngine MDM’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about ManageEngine MDM on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
What authentication method does the ManageEngine MDM integration use?
ManageEngine MDM uses OAuth 2.0 tokens issued via the Zoho/ManageEngine authentication service. Truto handles the token exchange, refresh, and secure storage so your end users only complete a standard OAuth consent flow.
Does Truto support both on-premise and cloud editions of ManageEngine MDM?
Yes. The API surface is largely consistent across editions, but on-premise deployments require your end user to provide their server URL during connection. Truto handles both variants through a single integration configuration.
Which device platforms are covered by this integration?
All platforms supported by ManageEngine MDM — iOS, Android (including Samsung Knox), macOS, Windows, and ChromeOS — are covered. Platform-specific data like FileVault status (macOS), firmware password (macOS), and Knox actions (Samsung) are exposed via dedicated tools.
Can we execute remote actions like wipe or lock at scale?
Yes. In addition to per-device perform_action calls, the execute_bulk_command tool lets you dispatch commands to multiple devices in one request, and command history endpoints let you audit execution status.
How fresh is the data returned from the API?
Device data reflects the last successful check-in with the MDM server. You can trigger a fresh scan or a location request on demand, and use get_polltime and get_scan_status to know when devices last reported in.
Can we manage app distribution including Apple VPP licenses?
Yes. You can list, create, approve, and associate apps to devices or groups, and separately manage Apple VPP tokens — including syncing licenses, fetching VPP apps, and checking sync status for license reconciliation.
ManageEngine MDM
Get ManageEngine MDM integrated into your app
Our team understands what it takes to make a ManageEngine MDM integration successful. A short, crisp 30 minute call with folks who understand the problem.