Skip to main content

​
Prerequisites

  • Mosyle Business admin access
  • Enforce deployment script and enrollment key from the Runlayer dashboard

​
Deployment Steps

1

Get Deployment Artifacts

In the Runlayer dashboard, go to Settings → Shadow MCPs and open or create an Enforce configuration to copy the generated script and enrollment key.
2

Create a Custom Command

  1. Under the Management tab, select Custom Commands
  2. Click Add new profile
  3. Provide a Name (e.g., “Runlayer Enforce”), check Enable variables for this profile, and paste the generated script into the code box
  4. Switch to the Execution Settings tab and configure the execution frequency
3

Assign to Devices

Click Add assignment to assign the profile to all devices that should have Enforce installed
4

Save and Deploy

Click Save to begin deployment to target devices

​
Verification

1

Check Analytics

Navigate to Analytics in the Runlayer dashboard
2

Verify Devices

Confirm that devices are appearing with Enforce installed
3

Test Interception

Have a user trigger a shadow MCP tool call and verify it appears in audit logs

​
Log Locations

PlatformLog Location
macOS/var/log/runlayer/ai_watch_enforce.log

​
Exit Codes

CodeMeaning
0Success
1General failure (missing config, enrollment failed)
2Network failure
3Installation failure