Prerequisites
- SimpleMDM admin access
- Enrollment key from Runlayer
- The signed Runlayer CLI macOS package deployed to target devices
Creating an Enrollment Key
Creating an Enrollment Key
Enrollment keys allow devices to automatically register with Runlayer and obtain API credentials.

1
Navigate to Enrollment Keys
Go to Settings in the Runlayer dashboard and select the Enrollment Keys tab
2
Create a New Key
Click + Create Enrollment Key

3
Configure the Key
- Name (required): Enter a descriptive name (e.g., “Production MDM”)
- Description (optional): Add context about the key’s purpose
4
Copy the Key
Copy the generated key (starts with 
rl_enroll_) and store it securely
Deployment Steps
1
Generate the Script
Fill in your settings below to generate a deployment script.
ENROLLMENT_USERNAME: MDM variable for user identity (e.g.,$EMAIL). Leave empty to use the device username.ENROLLMENT_DEVICE_NAME: MDM variable for device name (e.g.,$SERIAL_NUMBER). Leave empty to use the computer name.
2
Add the Script in SimpleMDM
- Open Scripts in the SimpleMDM admin console
- Click Add Script and paste the generated script
- Name it (e.g., “Runlayer Config Sync”)
3
Assign and Deploy
- Select the devices or device groups to deploy to
- Configure execution schedule (daily recommended)
- Save and monitor execution status
Verification
Open a client application (e.g., Cursor) on a target device and confirm the synced MCP servers appear. If something went wrong, check/var/log/runlayer/auto_provisioning.log on the device.