kandji

Installation script to deploy standard software on Macs

command library for scripting macos

A service that automatically synchronizes device information from Kandji to Cloudflare Zero Trust lists, enabling device-based access controls through Cloudflare Gateway and WARP.

Bunch of configs and scripts for MacOS to be mainly used along with Kandji (some of them might work standalone)

Scripts to use with Kandji MDM

UNOFFICIAL Teleport <-> Kandji device syncer. Syncs devices from Kandji to Teleport for device trust

GitTrust (GT): Enhanced S/MIME Commit Signing with Device Authentication

Creates an OpenAPI 3.1 compatible specification based on Kandji's Postman Collection.

macOS tool for remediating unauthorized admin privileges. Deploys as a signed/notarized pkg via MDM. Detects admin users, presents a branded compliance nag on a recurring schedule, and offers self-service remediation or an elevation request workflow. Fully white-label via configuration profiles.

Steampipe plugin to access Iru

Scripts and remediations for automated macOS management and security policy enforcement within Kandji/IRU

Iru Client Diagnostics / Testing

macOS offline installers — DMG and PKG packages from official sources for offline / air-gapped Macs and IT-managed fleets. From offlineinstallersetup.com

Case study: reconciling three MDMs (Jamf, Kandji, Intune) into one asset source of truth with a real-time compliance dashboard

Rust CLI for the iru (Kandji) Endpoint Management API — spec-driven, SDK-backed, audit-trail-as-feature, MCP-aware, read-only by default

A Python SDK and CLI for the Iru (formerly Kandji) API