The Iru Blog

Introducing Iru MCP: IT is moving from operators to builders

Written by Lance Crandall | May 14, 2026 1:43:49 PM

Endpoints just joined your IT team's AI build environment.

Somewhere in your fleet right now, there is a device out of compliance, assigned to someone who left last month, running an operating system you stopped supporting last year. It is sitting there, a quiet risk, waiting to matter at the worst possible time.

Your team will find it eventually. After opening a console, building a filter, waiting on results, and cross-referencing a spreadsheet. Twenty minutes if everything goes right.

With Iru MCP, your team writes one prompt and a workflow handles the rest: querying Iru, opening the ticket, and notifying the team, all without touching a single console.

Meet Iru MCP

IT teams have always been constrained by the tools they were given. That changed with AI build environments like Claude Code and Cursor. Iru MCP brings endpoint into that same environment. Your device fleet becomes a programmable surface your team can read, act on, and wire into broader workflows in Claude Code, Cursor, or any MCP-compatible AI tool.

Why this matters: AgenticOps

IT teams are moving from operators running tasks in dashboards to builders shipping workflows in an AI development environment. Endpoints are a critical part of almost every IT workflow, and until now, they were missing from the AI build environment. Iru MCP changes that. Wire endpoint management into every workflow you build. Run entire operational sequences from a single prompt. Stay in control at every irreversible step. IT teams are moving from operators to builders. That is AgenticOps.

 

See it in action: three real workflows

1. Threat detection and automated response

A suspicious login fires from an unfamiliar location. You type one prompt. Your AI assistant queries Iru for the device assigned to that user, checks its compliance status, locks it via MDM pending investigation, notifies your security Slack channel, and sends the affected user an automated email. Every irreversible step waits for your explicit approval before it executes.

What used to be a fifteen-minute scramble across four tools is now a single workflow. Every action logged. Your team responds faster, with a complete audit trail.

2. Cross-tool compliance intelligence

You ask which employees accessing corporate resources are doing so from non-compliant devices. Your AI queries Iru for device compliance status, pulls access data from your MCP-connected identity tool, including Okta, Microsoft Entra, or any identity platform with MCP support, and surfaces the answer in a single conversation. No custom report. No spreadsheet. No week-long audit.

Most security teams cannot answer that question without a manual audit. With Iru MCP, one prompt gets you there. The same conversation can trigger remediation in Iru, open a Jira ticket, and notify Slack. A workflow that does not stop at the answer, it acts on it.

3. Multi-system onboarding and offboarding

A new employee joins. You type one prompt. The AI assigns the standard blueprint in Iru, opens the access ticket in ServiceNow, and posts the welcome message in Slack. Three systems. One conversation. An employee departs. The same logic runs in reverse: devices are unenrolled and wiped via Iru, the offboarding ticket is opened in ServiceNow, and the manager is notified in Slack.

IT did not run a task. IT built a workflow, one that runs the same way every time, across every system, without opening a console. Ship it once. Run it forever.

Safety is not an afterthought

Fair question: what if the AI does something unintended?

Every irreversible action stops and waits for you. Before anything executes, the AI surfaces a clear summary: device name, device identifier, assigned user, and the exact consequence. Nothing happens until you say yes.

Your permissions define exactly what the AI can do. A read-only configuration gives you a read-only AI. A full-access configuration gives you a full-access AI.

What this means for your team

The teams that embrace AgenticOps now are building a capability that compounds with every workflow. For practitioners, that is time back. For leaders, that is a team that scales without adding headcount, building on the Iru investment you have already made. No new budget. No new tools. As Iru’s API expands, so does what your team can build. This release is the foundation. Every workflow your team ships from here compounds on what came before.

We cannot wait to see what you build.

IT and security teams are about to operate very differently. Not incrementally differently. Fundamentally differently. The shift from operator to builder is not a feature update. It is a new way of working that compounds with every workflow your team ships. The teams that start now will have built something the rest of the industry is still trying to understand. We built Iru MCP for those teams. Now it is your turn.

Get started using the Iru MCP

Get started here. The setup guide walks you through the whole process.

Prefer a live walkthrough? Register for our Iru MCP webinar for a deep dive and Q&A.

Want to learn more? Book a demo to see what Iru can do for your team.