Tools built for
Apple MDM engineers

Multi-Tool Suite

Magic Toolbox

£39.99 GBP · one-time licence

Twenty Jamf Pro tools in one native macOS app. Clone across instances, compare environments, audit smart groups, accounts and API clients, resolve config profile conflicts, track certificate and token expiry, sign and unsign configuration profiles, and back up, disable, wipe or restore an instance. Clone, Disable, Wipe and Unused save an encrypted backup before they overwrite, disable or delete anything, and log every change they make. Every tool shares one credential store and checks your API permissions before it runs. Requires macOS 15 or later.

Clone

Copy policies, profiles, scripts, and other objects from one Jamf Pro instance to one or more others. Keep environments in sync or roll out a standardised baseline at scale. Anything overwritten on a destination is saved to an encrypted backup first.

Compare

Diff two computers or two mobile devices side by side, or compare up to four Jamf Pro instances at once, covering groups, scripts, EAs, packages, policies and profiles. Export a branded HTML drift report.

Wipe

Back up a Jamf Pro instance to an encrypted file, then wipe all of it or only the objects you select. Dependent objects are worked out and deleted in the right order, and a dry run shows exactly what would be removed first.

Restore

Bring back individual resources from an encrypted backup made by Wipe, Unused or Clone. Create them as new objects or update the existing ones in place, with references between restored items re-linked for you.

Config Profile Conflicts

Identify conflicting configuration profile payloads across your environment and generate a clear report of issues so you can remediate with certainty.

Smart Group Audit

Audit computer and mobile smart groups for empty membership, stale, duplicate or conflicting criteria, over-complex logic and nesting loops. Export to HTML or CSV.

PPPC Analyser

Scan applications and automatically generate a mobileconfig containing the required PPPC payload — saving hours of manual configuration and missed permissions. It can also export an AppSettings declaration for macOS 27 and later.

System Extensions

Build a System Extension Policy profile for any app that ships endpoint security, network, or driver extensions — with bundle IDs and team IDs extracted automatically.

Web Content Filter

Extract bundle IDs and code-signing requirements from a content filter app and generate a correctly structured mobileconfig payload in seconds.

Icons

List every Self Service and branding icon in an instance, flag the ones no longer in use, and download them individually or as a zip. Handy for backups and migrations.

Downloader

Export scripts, extension attributes, configuration profiles, and packages from any Jamf Pro instance in bulk — for backup, migration, or use elsewhere. Preview a script, EA or profile before you download it.

Login Item Profiles

Scan a Mac for login items, launch agents and launch daemons, choose the ones to allow, and generate a Login Item & Background Task Management profile for macOS 13 and later. Export it or upload it straight to Jamf Pro.

Notifications

Configure notification settings for a managed app and generate a ready-to-deploy mobileconfig payload — removing the permission prompt from end users entirely.

Unused

Identify packages, scripts, configuration profiles, disabled policies, smart groups and more that are no longer in use, then bulk-delete them to keep your MDM clean. References are re-checked and an encrypted backup is saved before anything is deleted.

Inspector

Take apart a .pkg or .app before you deploy it. See the payload tree, pre/post-install scripts, architecture and signing, plus a review tab that highlights the risky parts. Runs fully offline.

Disable

Disable policies, accounts and App Installer deployments, and remove scope from profiles, restricted software and apps, without deleting anything. An encrypted undo backup is saved first so a run can be reversed, and a safety check stops you from locking out the last full-access admin.

Cert & Token Expiry

Check expiry dates for your APNs push certificate, ADE server tokens and VPP tokens in one place, and see whether you use an External CA or Jamf’s built-in CA.

Account Audit

Review Jamf Pro user accounts, groups, API roles and API clients. Every privilege is grouped by category, and any account or role that can grant admin access is flagged. Read-only, with an HTML report.

Profile Unsigner

Strip the signature from signed .mobileconfig profiles to get back the plain XML, ready to read or edit. Drop in one file or many. Runs locally, so profiles never leave your Mac.

Profile Signer

Sign .mobileconfig profiles with a signing certificate from your keychain, one at a time or in a batch. Runs locally, so profiles never leave your Mac.

MDM Reporting Tool (shortcut)

A tile on the home screen that opens the MDM Reporting Tool if you have it installed. Point Magic Toolbox at the app once in Preferences. If it isn’t installed, the tile opens the MDM Magic tools page instead.

Reporting

MDM Reporting Tool

£19.99 GBP · one-time licence

Connect to your MDM, pick the sections you want, and get a polished, branded audit report. Jamf Pro, Microsoft Intune and Iru are all supported over read-only API access, with no queries to write. The report is a single self-contained HTML file with search, filtering and a clean print layout. You can also export it as PDF or Word, add a written guidance document, or schedule it to run unattended. Nothing is written back to your MDM, and all data stays on your Mac.

Jamf Pro

65 report sections covering policies, profiles, groups, EAs, prestages, SSO, LAPS, VPP and more. Includes unused-object clean-up findings for computers and mobile devices, and a check that all 19 required read privileges are in place before a run.

Microsoft Intune

23 sections via Microsoft Graph: compliance, configuration profiles, apps, update rings, enrolment, expiring credentials and unassigned resources.

Iru (formerly Kandji)

15 sections covering blueprints, library items, custom apps, scripts and profiles, ADE tokens, threats and vulnerabilities, all in the same report format.

Features