Repository navigation
Home
An all-in-one Jamf Pro admin suite for macOS, by MDM Magic.
Magic Toolbox gives you 21 tools in one Mac app. They cover the jobs Jamf Pro admins keep coming back to: copying configuration between servers, finding conflicting profiles, auditing smart groups and admin accounts, watching certificate and token expiry, testing firewall access, building, signing and unsigning profiles, inspecting installers, and cleaning up test servers.
Download: get the latest installer (
.pkg) from the Releases page. It installs Magic Toolbox.app in your Applications folder. See Installation.
| 🚀 Installation | System requirements, installing the .pkg, updating and uninstalling |
| 🔑 Licensing and Trial | The 72-hour free trial, activating a licence and moving it to another Mac |
| 🧭 Getting Started | A tour of the app, connecting to Jamf Pro and saving servers |
| 🔐 Jamf API Permissions | The API role privileges each tool needs |
| ⚙️ Preferences | Appearance, report branding, profile name prefixes and debug logging |
| 🔒 Privacy and Security | What the app stores, where it stores it, and what it connects to |
| 🛡️ Security FAQ | Answers for security teams approving the tool: TLS, storage, access, write access, tokens |
| 🩺 Troubleshooting and FAQ | Common problems and how to fix them |
| Tool | What it does | Changes Jamf? |
|---|---|---|
| Clone | Copies policies, profiles, groups, scripts, EAs, apps and more from one server to one or more others | ✏️ Yes (destinations) |
| Compare | Compares two computers, two mobile devices, or 2–4 Jamf Pro servers, side by side | 👁️ Read-only |
| Wipe | Makes an encrypted backup of a DEV or TEST server, then deletes the objects you choose. Includes a dry run | 🗑️ Yes (deletes) |
| Restore | Re-creates objects from an encrypted Wipe, Unused or Clone backup, or writes them back over the existing objects | ✏️ Yes (creates or updates) |
| Disable | Disables policies, Jamf Pro accounts and App Installers, and removes scope from profiles, restricted software and apps, with an encrypted undo backup | ✏️ Yes (disables) |
| Tool | What it does | Changes Jamf? |
|---|---|---|
| Profile Conflicts | Finds configuration profiles that manage the same payloads or keys on the same devices | 👁️ Read-only |
| Smart Group Audit | Checks smart groups for empty, overly complex, duplicate, contradictory and looping criteria | 👁️ Read-only |
| Account Audit | Lists Jamf Pro admin accounts, API roles and API clients, and flags broad-access clients and single-admin risk | 👁️ Read-only |
| Cert & Token Expiry | Shows when the APNs push certificate, ADE tokens and VPP tokens expire, and whether an External CA is configured | 👁️ Read-only |
| Unused | Finds unused packages, scripts, dock items and categories, unscoped profiles, apps and restricted software, disabled policies, empty smart groups and searches, and unlinked buildings, departments and network segments | 🗑️ Optional delete (encrypted backup first) |
| Network Check | Tests whether this Mac can reach the endpoints Jamf, Apple, Microsoft, Google and other services need | 💻 Local only |
| Tool | What it does | Changes Jamf? |
|---|---|---|
| PPPC Analyser | Works out the privacy (TCC) permissions for an app or installer and builds a PPPC profile | ⬆️ Optional upload |
| System Extensions | Builds system extension approval profiles | ⬆️ Optional upload |
| Web Content Filter | Builds content filter profiles, with the filter details filled in automatically | ⬆️ Optional upload |
| Notifications | Builds notification settings profiles for an app | ⬆️ Optional upload |
| Login Item Profiles | Builds Managed Login Items (background task) profiles | ⬆️ Optional upload |
| Profile Signer | Signs .mobileconfig profiles and .pkg installers with a certificate from your keychain |
💻 Local only |
| Profile Unsigner | Removes the signature from .mobileconfig profiles and .pkg installers |
💻 Local only |
| Tool | What it does | Changes Jamf? |
|---|---|---|
| Inspector | Looks inside .pkg installers and .app bundles: verified signatures, files, scripts, a safety review |
💻 Local only |
| Downloader | Downloads scripts, extension attributes and configuration profiles from Jamf Pro | 👁️ Read-only |
| Icons | Collects all Self Service icons, and turns an app's icon into a PNG for Self Service | ⬆️ Optional upload |
On the Home screen the tools are grouped into these four categories. Click a category to open it.
- Three new tools: Network Check, Profile Signer and Profile Unsigner.
- Tool Lock: require a PIN before chosen tools can be opened. See Preferences.
- Safer write tools: Clone backs up destination objects before overwriting them, Disable saves an undo backup, Wipe has a dry run, and every change is written to a journal file as it happens. Wipe and Restore's update mode ask you to type the server name to confirm.
- Restore can update existing objects in place, opens Clone backups, and re-links restored objects to each other.
- Profile uploads ask before overwriting a profile with the same name. See Uploading Profiles.
- Inspector now verifies package and app signatures.
- Incomplete results are flagged. When something can't be read, the audit tools say so instead of reporting an all-clear, and Unused won't let you delete from an incomplete list.
- A tile on the Home screen opens the MDM Reporting Tool. See Preferences.
- The app asks before you quit or close the window while a tool is writing to Jamf Pro.
- Bugs and feature requests: open an issue. Include your Magic Toolbox version, your macOS version and, if you can, a debug log.
- Licensing and purchases: Buy a licence