Device Management
Iru (formerly Kandji) MCP connector
The Iru (formerly Kandji) connector brings your Apple device fleet, installed apps, library items, blueprints and users into Claude, ChatGPT, Cursor and any MCP client, so your team can ask about and update devices while every call stays inside their own Iru access.
-
How it connects. Connects with an API key. The credential goes into a vault nobody reads back.
-
One address. https://api.elaichi.ai/mcp, the same for every user.
-
Their own access. An agent never gets more than the person it acts for.
How to connect
How to connect Iru (formerly Kandji) to Claude, ChatGPT or Cursor
Two steps, about a minute.
In Elaichi
Connect Iru (formerly Kandji) once
-
Open Connections, choose Add connection, and pick Iru (formerly Kandji).
-
Optionally set Share with to give a team access, then press Connect.
-
Paste an Iru (formerly Kandji) API key. One person generates a token in Iru (formerly Kandji) and pastes it once. Everyone else works through Share with, and never sees it.
The credential is vaulted. Nobody reads it back, not even the AI.
Add connection
Choose a connector.
In your AI client
Point it at one endpoint
Everyone in the organization uses the same address, and each person only ever reaches what their own account allows.
Connect Iru (formerly Kandji) to Claude
-
1
Open Customize, then Connectors.
-
2
Press Add.
-
3
Name it, paste the MCP server URL, then Continue.
https://api.elaichi.ai/mcp -
4
Sign in and approve.
On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.
Connect Iru (formerly Kandji) to ChatGPT
-
1
Open Plugins, then press the + button.
-
2
Name it and paste the endpoint into Server URL.
https://api.elaichi.ai/mcp -
3
Leave Authentication on OAuth, then tick the risk acknowledgement.
-
4
Press Create, then sign in and approve.
Works on the web today. The plugin directory lives at chatgpt.com/plugins.
Connect Iru (formerly Kandji) to Cursor
-
1
Open
~/.cursor/mcp.json. -
2
Add the endpoint under
mcpServers.https://api.elaichi.ai/mcp -
3
Reload Cursor, then sign in and approve.
~/.cursor/mcp.json
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
Set up per machine, so repeat it on each computer you work from.
Connect Iru (formerly Kandji) to any MCP client
-
1
Add the endpoint as a remote MCP server.
https://api.elaichi.ai/mcp -
2
Sign in and approve.
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
The Elaichi Agent already has these tools, with nothing to set up.
Use cases
What teams do with Iru (formerly Kandji) through Elaichi
Every one of these runs inside the access the person already has, and lands in the same audit log.
-
IT
Find out who has which Mac
Ask which devices are enrolled in Iru (formerly Kandji), who each one is assigned to, and when it last checked in, without opening the console or exporting a spreadsheet.
-
Help desk
Check installed apps before replying to a ticket
Pull up a colleague's device in Iru (formerly Kandji), see which apps are installed and which library items have reached it, and answer the ticket with facts instead of a guess.
-
Security
Confirm required software reached every device
Compare the apps and library items on each Iru (formerly Kandji) device against what should be there, and get a list of the machines that are missing something.
-
IT
Understand what a blueprint actually sets
Look at the blueprints in Iru (formerly Kandji), read what a specific one configures, and see which devices sit under it before changing a policy.
-
People
Clean up when someone leaves
Look up the departing person's user record and devices in Iru (formerly Kandji), update the device details, and remove the user record once hardware is returned.
-
Operations
Keep the hardware inventory current
Update asset tags and assigned users on Iru (formerly Kandji) devices as laptops move between people and offices, so the device list matches what is on desks.
Try asking
- “List all Iru devices missing their assigned blueprint.”
- “Which Iru devices have apps out of date?”
- “Show Iru users with more than two devices.”
AI tools
Iru (formerly Kandji) tools for your AI agents
11 tools are ready to call through Elaichi's MCP endpoint the moment you connect Iru (formerly Kandji), governed by the same roles, restrictions, and audit log as everything else in Elaichi.
No tools match your search.
See it in Elaichi
What connecting Iru (formerly Kandji) gets you
6 screens from the product, each doing one job for your Iru (formerly Kandji) account.
The agent
Ask about devices, get answers from Iru.
Plain language questions return live devices, blueprints and users from Iru.
- devices
- blueprints
- users
- library items
Ask Elaichi to work across your apps.
List all Iru devices missing their assigned blueprint.
Which Iru devices have apps out of date?
Show Iru users with more than two devices.
Also runs in Claude, ChatGPT or Cursor
MCP clients
Claude, ChatGPT and Cursor reach Iru.
One org MCP endpoint over OAuth, no SDK and no shared API key.
Copy the endpoint
Tool catalog
11 Iru tools, no custom code.
Devices, device apps, library items, blueprints and users are all covered.
- List all Iru (formerly Kandji) devices
- Get single Iru (formerly Kandji) device by ID
- Update a Iru (formerly Kandji) device by ID
- Delete a Iru (formerly Kandji) device by ID
Toolboxes
Every team gets its own Iru toolbox.
IT, Security and Helpdesk each work from a toolbox scoped to them.
- IT Operations
- Security
- Helpdesk
- People Ops
Shared connections
Share the Iru connection, not the token.
Teammates manage devices and blueprints through a connection without seeing a credential.
- IT EMEA
- IT Americas
- Security
- Helpdesk
Audit log
Every Iru call is written down.
When, who, what happened, type and resource for each device action.
- When
- Who
- What happened
- Type
Launching soon
From answering questions to doing the work
A person no longer has to ask. A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations and live dashboards are launching soon, on the Black plan.
Automations
A schedule fires, Iru work gets done.
Devices are fetched, grouped, drafted into a digest, approved, then posted back.
Iru (formerly Kandji) digest
Run 418 · started 2 minutes ago · on behalf of Emma Laurent
-
✓
Schedule
Every weekday at 08:00
0.2s -
✓
Fetch devices
Iru (formerly Kandji)
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Michael Brennan
Approve Deny -
Post the digest
Iru (formerly Kandji)
Queued
Collections and dashboards
Iru device health, computed on a schedule.
Four metrics, 14 days of devices enrolled, and a breakdown by team.
Iru (formerly Kandji) health
Refreshed 4 minutes ago · every 15 minutes · from the devices collection
Devices
1,284 ↓ 12%
Blueprints
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Devices created
Last 14 days
By team
Share of activity
IT EMEA 34%
IT Americas 27%
Security 21%
Helpdesk 18%
FAQ
Frequently asked questions
How do I connect Iru (formerly Kandji) to Claude?
Connect Iru (formerly Kandji) in Elaichi first, which asks you to paste an API key from your Iru settings. There is no OAuth application to register and no client ID or secret to generate. Then open Claude, go to Customize, then Connectors, then Add, and paste the endpoint https://api.elaichi.ai/mcp. Claude will ask you to sign in to Elaichi as yourself, and your Iru devices, users and blueprints are available from then on.
Does Iru (formerly Kandji) work with ChatGPT and Cursor as well as Claude?
Yes. Once Iru (formerly Kandji) is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any other MCP client and the Elaichi Agent. You connect Iru once and every client you use picks it up.
What can an AI agent actually do with my Iru (formerly Kandji) data?
An agent connected to Iru (formerly Kandji) can list your enrolled devices, open a single device and report who it is assigned to and when it last checked in, and show which apps and library items are on it. It can read your blueprints, look up users, update device details such as asset tag or assigned user, and remove a device or user record when you ask it to. It cannot do anything in Iru that you could not do yourself.
Does connecting Iru (formerly Kandji) give the AI access to my whole device fleet?
No. Every call to Iru (formerly Kandji) runs inside the access of the person who signed in, so the AI sees the devices, users and blueprints that person's Iru permissions allow and nothing more. Elaichi can narrow that further by hiding actions like deleting devices, but it can never grant more than the person already has in Iru.
Can I stop an agent from deleting or changing things in Iru (formerly Kandji)?
Yes. Restrictions in Elaichi apply per action, so you can allow reading Iru (formerly Kandji) devices, apps and blueprints while blocking updates and deletions of devices or users. A blocked action is never advertised to Claude, ChatGPT or any other client, so no prompt, however worded, can reach it.
What happens to an Iru (formerly Kandji) connection when someone leaves?
When you offboard a person in Elaichi, their access to Iru (formerly Kandji) through every AI client ends at once. If they had shared an Iru connection with a team, it keeps working for everyone else. If you want Iru gone entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor and every other client at the same time.
Put Iru (formerly Kandji) in front of your team
Fourteen days on Gold, no credit card. Connect it once and pick what each team can call.