Integrating Iru with imper.ai

  • Updated on May 25, 2026
  • Published on May 20, 2026
  • 2 minute(s) read
Prev Next

Overview

Integrating Iru with imper.ai allows the platform to securely push ephemeral data-collection scripts to your managed Apple devices through your existing Iru tenant.

Once connected, imper.ai creates a dedicated Custom Script Library Item scoped to a Blueprint of your choice, runs the collector during normal device check-ins, and removes the item once collection completes — leaving no persistent artifact on the device.

This article walks you through the required prerequisites and the steps for creating an API token, granting the required permissions, identifying the target Blueprint, and completing the integration inside imper.ai.

Note: Kandji has rebranded to Iru. The Iru web app and API URLs may still display "kandji" during the transition (e.g., *.api.kandji.io).

This is expected and does not affect the integration.

Prerequisites

To integrate Iru with imper.ai, you must have Iru tenant admin permissions (or equivalent privileges to create API tokens and manage Blueprints) via the Iru web app.

We also recommend creating a dedicated Blueprint for imper.ai (e.g., imper-collectors) and assigning the devices you want imper.ai to manage to it. This ensures imper.ai's scripts are scoped only to that Blueprint and never touch your other configurations.

Step 1: Create an API token in Iru

  1. Using an Iru admin user, login to your Iru web app.

  2. Click the Access tab.

  3. Click the Add API Token tab.

  4. Enter a Name (e.g., imper.ai) and a Description, then click Create.

  5. Copy the generated API Token to a secure location — this token needs to be entered later in imper.ai's integration interface.

    Important: The token is displayed only once. If you lose it, you must revoke it and generate a new one.

  6. Copy the API URL displayed on the Access page. It will follow one of these formats:

    • US tenants: https://<subdomain>.api.kandji.io

    • EU tenants: https://<subdomain>.api.eu.kandji.io

Step 2: Configure API token permissions

After creating the token, you must grant it the specific permissions imper.ai requires. On the token's permissions page, enable only the following:

  1. Under Blueprints:

    • Get Blueprint

    • List Blueprints

    • Update Blueprint

    • List Library Items

  2. Under Custom Scripts (enable all):

    • Create Custom Script

    • Update Custom Script

    • List Custom Scripts

    • Get Custom Script

    • Delete Custom Script

  3. Under Devices:

    • Device ID

    • Device List

    • Device Details

    • Device Status

    • Device Activity

    • Device Library Items

    • Device Parameters

  4. Under Device Actions:

    • Send Blank Push

  5. Click Save to apply the permissions.

Note: imper.ai requires no permissions beyond those listed above. Granting additional permissions does not enable additional functionality and is not recommended.

Step 3: Identify the target Blueprint

imper.ai needs the ID of the Blueprint it should scope its scripts to.

  1. In the Iru web app, navigate to Blueprints in the left navigation panel.

  2. Open the Blueprint you want imper.ai to use (the dedicated Blueprint recommended in the Prerequisites).

  3. Copy the Blueprint ID from the page URL or from the Blueprint's details panel. The ID is a UUID in the format 01234567-89ab-cdef-0123-456789abcdef.

Step 4: Connect Iru to imper.ai

  1. Login to the imper.ai admin integrations page.

  2. Locate Iru and click Connect.

  3. In the integration dialog, fill in:

    • API URL — obtained in Step 1

    • API Token — obtained in Step 1

    • Blueprint ID — obtained in Step 3

  4. Click Connect. imper.ai will attempt to validate the credentials, verify the token permissions, and confirm access to the specified Blueprint.

Related articles