JAMF Protect

Onboard your JAMF Protect environment so AiStrike can fetch endpoint security alerts.◼︎

1. Prerequisites

• Administrator access to the JAMF Protect console (an account with permission to manage API Clients).

• A JAMF Protect tenant URL, e.g. https://<your-instance>.protect.jamfcloud.com.

• Note: a JAMF Protect tenant supports a maximum of five API Clients at a time.

2. Create a dedicated API Client

This client is used by AiStrike to fetch alerts from JAMF Protect. JAMF Protect uses API Clients (not user accounts) for programmatic access — there is no username/password login for the API itself.

1. Log in to the JAMF Protect console as an administrator.

2. In the left navigation, go to Administrative > API Clients.

3. Click Create API Client.

4. Enter a name for the client (e.g. aistrike_api_client).

5. Click Save.

6. Copy the API Client Password shown on screen and store it securely — JAMF Protect displays this value only once and cannot show it again.

7. From the API Client Configuration / Token and API Endpoints pane, also copy:

   • Client ID

   • JAMF Protect API URL (your tenant's base URL)

3. Confirm scope (read-only)

JAMF Protect API Clients are not assigned granular read/write roles the way JAMF Pro is — access is tied to the client itself. For an alerts-only integration, avoid using this client for containment-style calls (e.g. Set Computer Plan, Update Alerts Status, Delete Computer) and restrict its use in AiStrike to alert-retrieval queries only (List Alerts / listAlerts).

4. Connector configuration

For help with setup, reach out to the AiStrike support team.