Skip to main content
Deploy Runlayer hooks to macOS devices managed by SimpleMDM.

​
Prerequisites

  • SimpleMDM admin access
  • Configured enrollment key from Runlayer (see below)
Enrollment keys allow devices to automatically register with Runlayer and obtain API credentials.Enrollment Keys List
1

Navigate to Enrollment Keys

Go to Settings in the Runlayer dashboard and select the Enrollment Keys tab
2

Create a New Key

Click + Create Enrollment KeyCreate Enrollment Key
3

Configure the Key

  • Name (required): Enter a descriptive name (e.g., “Production MDM”)
  • Description (optional): Add context about the key’s purpose
4

Copy the Key

Copy the generated key (starts with rl_enroll_) and store it securelyEnrollment Key Created
Enrollment keys are shown only once. Store them securely and treat them like passwords.

​
Deployment Steps

1

Generate the Script

Fill in your organization’s settings below to generate a customized deployment script.SimpleMDM-specific configuration tips:
  • ENROLLMENT_USERNAME: Use an MDM variable or custom attribute that provides the user’s identity. Common variables: $EMAIL, $USER_PRINCIPAL_NAME, or a custom attribute.
  • ENROLLMENT_DEVICE_NAME: Use an MDM variable or custom attribute that identifies the device. Common variables: $DEVICE_NAME, $SERIAL_NUMBER, or a custom attribute.
2

Navigate to Scripts

Open the Scripts section in SimpleMDM admin console
3

Add the Script

  • Click Add Script
  • Paste the generated script contents
  • Give it a descriptive name (e.g., “Runlayer Hooks”)
4

Assign to Devices

  • Select the devices or device groups to deploy to
  • Configure execution schedule
5

Deploy

Save and monitor script execution status in the SimpleMDM console

​
Verification

After deployment, verify in the Runlayer dashboard:
1

Check Analytics

Navigate to Analytics in the Runlayer dashboard
2

Verify Devices

Confirm that devices are appearing with hooks installed
3

Test Interception

Have a user trigger a shadow MCP tool call and verify it appears in audit logs

​
Log Locations

PlatformLog Location
macOS/var/log/runlayer-hooks.log

​
Exit Codes

CodeMeaning
0Success
1General failure (missing config, enrollment failed)
2Network failure
3Installation failure