Skip to main content

​
Prerequisites

  • SimpleMDM admin access
  • Enforce deployment script and enrollment key from the Runlayer dashboard

​
Deployment Steps

1

Get Deployment Artifacts

In the Runlayer dashboard, go to Settings → Shadow MCPs and open or create an Enforce configuration to copy the generated script and enrollment key.
2

Add the Script in SimpleMDM

  • Open Scripts in the SimpleMDM admin console
  • Click Add Script and paste the generated script
  • Name it (e.g., “Runlayer Enforce”)
3

Assign and Deploy

  • Select the devices or device groups to deploy to
  • Configure execution schedule
  • Save and monitor execution status

​
Verification

1

Check Analytics

Navigate to Analytics in the Runlayer dashboard
2

Verify Devices

Confirm that devices are appearing with Enforce installed
3

Test Interception

Have a user trigger a shadow MCP tool call and verify it appears in audit logs

​
Log Locations

PlatformLog Location
macOS/var/log/runlayer/ai_watch_enforce.log

​
Exit Codes

CodeMeaning
0Success
1General failure (missing config, enrollment failed)
2Network failure
3Installation failure