Jamf Pro Distribution (macOS)

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude
• Connect to Cursor

  Install MCP server on Cursor
• Connect to VS Code

  Install MCP server on VS Code

Deploy Capsule Security hooks for AI coding assistants across your macOS fleet using Jamf Pro. This guide covers deployment for Cursor, GitHub Copilot, and Claude Code using Jamf Composer to create packages with preinstall scripts.

Prerequisites

• Jamf Pro console with administrative access
• Jamf Composer installed on your Mac
• A Capsule Security account with admin access
• Target devices running macOS

Cursor

Deploy the Cursor hooks configuration using a Jamf Composer package.

Step 1: Download the Configuration

1. Log in to the Capsule Security portal
2. Navigate to Settings > Integrations
3. Locate the Cursor integration
4. Download the hooks.json file

Step 2: Create the Package

1. Open Jamf Composer on your Mac

2. Create a new package source:

   • Open Finder and create the directory structure locally: /Library/Application Support/Cursor/
   • Place the hooks.json file inside this directory
   • Important: Composer captures the exact file structure, so the hooks.json file must already be in /Library/Application Support/Cursor/ before dragging into Composer
   • Drag only the Cursor folder directly into Composer's Sources panel on the left sidebar

3. Configure the package destination:

   • In the left sidebar, right-click on the newly created package source
   • Select Edit Package or Package Settings
   • Confirm the destination is set to / (root) so files install to /Library/Application Support/Cursor/

4. Add a Preinstall Script:

   • Expand the Package under Sources
   • Right-click on Scripts and select Add Shell Script > preinstall
   • Paste the following script:
   #!/bin/bash
   mkdir -p "/Library/Application Support/Cursor"
   chmod 755 "/Library/Application Support/Cursor"
   exit 0

5. Build the package:

   • Click Build as PKG
   • Save as CapsuleCursorHooks.pkg

Step 3: Upload and Deploy

1. Log in to your Jamf Pro console
2. Navigate to Settings > Computer Management > Packages
3. Click New and upload the .pkg file
4. Create a Policy:
   • Navigate to Computers > Policies and click New
   • Name: Deploy Capsule Security Cursor Hooks
   • Trigger: Recurring Check-in
   • Execution Frequency: Once per computer
   • Under Packages, click Configure, add the package, and set Action to Install
5. Configure the Scope: add target computers, groups, or departments
6. Save and deploy

Verification

After deployment, restart Cursor on target devices, then:

1. Open Cursor Settings
2. Navigate to the Hooks tab
3. Confirm the hooks are listed and enabled

GitHub Copilot

Deploy the GitHub Copilot hooks configuration using a Jamf Composer package.

Step 1: Download the Configuration

1. Log in to the Capsule Security portal
2. Navigate to Settings > Integrations
3. Locate the GitHub Copilot integration
4. Download the hooks.json file

Step 2: Create the Package

1. Open Jamf Composer on your Mac

2. Create a new package source:

   • Open Finder and create the directory structure locally: /Library/Application Support/Code/User/hooks/
   • Place the hooks.json file inside this directory
   • Drag only the hooks folder directly into Composer's Sources panel on the left sidebar

3. Configure the package destination:

   • In the left sidebar, right-click on the newly created package source
   • Select Edit Package or Package Settings
   • Confirm the destination is set to / (root) so files install to /Library/Application Support/Code/User/hooks/

4. Add a Preinstall Script:

   • Expand the Package under Sources
   • Right-click on Scripts and select Add Shell Script > preinstall
   • Paste the following script:
   #!/bin/bash
   mkdir -p "/Library/Application Support/Code/User/hooks"
   chmod 755 "/Library/Application Support/Code/User/hooks"
   exit 0

5. Build the package:

   • Click Build as PKG
   • Save as CapsuleCopilotHooks.pkg

Step 3: Upload and Deploy

1. Log in to your Jamf Pro console
2. Navigate to Settings > Computer Management > Packages
3. Click New and upload the .pkg file
4. Create a Policy:
   • Navigate to Computers > Policies and click New
   • Name: Deploy Capsule Security GitHub Copilot Hooks
   • Trigger: Recurring Check-in
   • Execution Frequency: Once per computer
   • Under Packages, click Configure, add the package, and set Action to Install
5. Configure the Scope: add target computers, groups, or departments
6. Save and deploy

Verification

After deployment, restart VS Code on target devices, then:

1. Right-click in the Chat view and select Diagnostics
2. Confirm the hooks are loaded and enabled

Claude Code

Deploy the Claude Code managed settings configuration using a Jamf Composer package.

Step 1: Download the Configuration

1. Log in to the Capsule Security portal
2. Navigate to Settings > Integrations
3. Locate the Claude Code integration
4. Click Install and select macOS as the target platform
5. Download the managed-settings.json file

Step 2: Create the Package

1. Open Jamf Composer on your Mac

2. Create a new package source:

   • Open Finder and create the directory structure locally: /Library/Application Support/ClaudeCode/
   • Place the managed-settings.json file inside this directory
   • Drag only the ClaudeCode folder directly into Composer's Sources panel on the left sidebar

3. Configure the package destination:

   • In the left sidebar, right-click on the newly created package source
   • Select Edit Package or Package Settings
   • Confirm the destination is set to / (root) so files install to /Library/Application Support/ClaudeCode/

4. Add a Preinstall Script:

   • Expand the Package under Sources
   • Right-click on Scripts and select Add Shell Script > preinstall
   • Paste the following script:
   #!/bin/bash
   mkdir -p "/Library/Application Support/ClaudeCode"
   chmod 755 "/Library/Application Support/ClaudeCode"
   exit 0

5. Build the package:

   • Click Build as PKG
   • Save as CapsuleClaudeCodeHooks.pkg

Step 3: Upload and Deploy

1. Log in to your Jamf Pro console
2. Navigate to Settings > Computer Management > Packages
3. Click New and upload the .pkg file
4. Create a Policy:
   • Navigate to Computers > Policies and click New
   • Name: Deploy Capsule Security Claude Code Hooks
   • Trigger: Recurring Check-in
   • Execution Frequency: Once per computer
   • Under Packages, click Configure, add the package, and set Action to Install
5. Configure the Scope: add target computers, groups, or departments
6. Save and deploy

Verification

After deployment, restart Claude Code on target devices, then:

1. Run /hooks in Claude Code to confirm all hooks are listed
2. Start a session and verify events appear in the Capsule Security portal

Key Considerations

• Preinstall scripts ensure target directories exist with proper permissions before file deployment
• Packages must be in .pkg format to support preinstall scripts
• To update configurations, create a new package version and update the policy
• Use Jamf Smart Groups for dynamic targeting and staged rollouts
• All three integrations can be deployed as separate packages and policies, assigned independently
• Restart each application on target devices after deployment for hooks to take effect

Support

For help with deployment:

• Email: support@capsule.security
• Include: Your organization ID, Jamf Pro environment details, and any error messages

References

• Jamf Composer User Guide - Creating Package Sources
• Jamf Composer User Guide - Building Packages