Skip to main content

​
Prerequisites

  • SimpleMDM admin access
  • Organization API key from Runlayer with MCP Watch Scan role
Organization API keys authenticate MDM-deployed scripts without per-device enrollment.
1

Navigate to API Keys

Go to Settings in the Runlayer dashboard and select the API Keys tab
2

Create a New Key

Click + Create Organization API Key
3

Configure the Key

  • Name (required): Enter a descriptive name (e.g., “MDM MCP Watch”)
  • Role: Select MCP Watch Scan
4

Copy the Key

Copy the generated key (starts with rl_org_) and store it securely
Organization API keys are shown only once. Store them securely and treat them like passwords.

​
Deployment Steps

1

Generate the Script

Fill in your settings below to generate a deployment script.
  • DEVICE_NAME: Use an MDM variable or custom attribute that identifies the device. Common variables: $DEVICE_NAME, $SERIAL_NUMBER, or a custom attribute.
2

Add the Script in SimpleMDM

  • Open Scripts in the SimpleMDM admin console
  • Click Add Script and paste the generated script
  • Name it (e.g., “Runlayer Config Sync”)
3

Assign and Deploy

  • Select the devices or device groups to deploy to
  • Configure execution schedule (daily recommended)
  • Save and monitor execution status

​
Verification

Open a client application (e.g., Cursor) on a target device and confirm the synced MCP servers appear. If something went wrong, check /var/log/runlayer-sync.log on the device.