Android Management API
REMOTE · ANDROIDMANAGEMENT.GOOGLEAPIS.COM · SCANNED AUG 3
Remote enterprise management of Android devices and apps
Available components
+4 this week
70 70 Trust /100
Trust breakdown (6 categories)
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS not yet verified: we couldn't determine whether a plaintext access path exists. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 792 tokens (~88/item across 9 items; 9 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · androidmanagement.googleapis.com
# add to Claude Code
claude mcp add --transport http com-googleapis-androidmanagement-mcp https://androidmanagement.googleapis.com/mcp
# ~/.codex/config.toml
[mcp_servers.com-googleapis-androidmanagement-mcp] url = "https://androidmanagement.googleapis.com/mcp"
// opencode.json
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-googleapis-androidmanagement-mcp": {
"type": "remote",
"url": "https://androidmanagement.googleapis.com/mcp",
"enabled": true
}
}
} # add to OpenClaw
openclaw mcp add com-googleapis-androidmanagement-mcp --url https://androidmanagement.googleapis.com/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
com-googleapis-androidmanagement-mcp:
url: "https://androidmanagement.googleapis.com/mcp" // mcp.json
{
"mcpServers": {
"com-googleapis-androidmanagement-mcp": {
"type": "http",
"url": "https://androidmanagement.googleapis.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Jul 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 65
First indexed and scored.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://androidmanagement.googleapis.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=upload.video.google.com | CN=WR2,O=Google Trust Services,C=US | 29 Jun 2026 | 21 Sept 2026 | ECDSA 256 | SHA256-RSA | 4ebe71b8b548f0e910486393b0d74ba7 |
| SANs: upload.video.google.com, *.clients.google.com, *.docs.google.com, *.drive.google.com, *.gdata.youtube.com, *.googleapis.com, *.photos.google.com, *.youtube-3rd-party.com, upload.google.com, *.upload.google.com, upload.youtube.com, *.upload.youtube.com and 5 more | ||||||
| CN=WR2,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a07c4cded100ad9d66a5107b98 |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
DNSSEC insecure
Validation of androidmanagement.googleapis.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| googleapis.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://androidmanagement.googleapis.com/mcp | Verified | 200 | |
| http (plaintext) | http://androidmanagement.googleapis.com/mcp | Inconclusive | 405 |
MCP tools
— 9 exposed
· ~792 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
Tool
Tokens
get_application ~109
Gets application details for a given enterprise and application ID. Requires the resource name in the format: enterprises/{enterpriseId}/applications/{applicationId}.
| Name | Type | Req | Description |
|---|---|---|---|
| languageCode | string | — | The preferred language for localized application info, as a BCP47 tag (e.g. "en-US", "de"). If not specified the default language of the application will be used. |
| name | string | — | The name of the application in the form `enterprises/{enterpriseId}/applications/{package_name}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| appPricing | string | — | Whether this app is free, free with in-app purchases, or paid. If the pricing is unspecified, this means the app is not generally available anymore (even though it might still be available to people… |
| appTracks | array | — | Application tracks visible to the enterprise. |
| appVersions | array | — | Versions currently available for this app. |
| author | string | — | The name of the author of the apps (for example, the app developer). |
| availableCountries | array | — | The countries which this app is available in as per ISO 3166-1 alpha-2. |
| category | string | — | The app category (e.g. RACING, SOCIAL, etc.) |
| contentRating | string | — | The content rating for this app. |
| description | string | — | The localized promotional description, if available. |
| distributionChannel | string | — | How and to whom the package is made available. |
| features | array | — | Noteworthy features (if any) of this app. |
| fullDescription | string | — | Full app description, if available. |
| iconUrl | string | — | A link to an image that can be used as an icon for the app. This image is suitable for use up to a pixel size of 512 x 512. |
| managedProperties | array | — | The set of managed properties available to be pre-configured for the app. |
| minAndroidSdkVersion | integer | — | The minimum Android SDK necessary to run the app. |
| name | string | — | The name of the app in the form enterprises/{enterprise}/applications/{package_name}. |
| permissions | array | — | The permissions required by the app. |
| playStoreUrl | string | — | A link to the (consumer) Google Play details page for the app. |
| recentChanges | string | — | A localised description of the recent changes made to the app. |
| screenshotUrls | array | — | A list of screenshot links representing the app. |
| smallIconUrl | string | — | A link to a smaller image that can be used as an icon for the app. This image is suitable for use up to a pixel size of 128 x 128. |
| title | string | — | The title of the app. Localized. |
| updateTime | string | — | Output only. The approximate time (within 7 days) the app was last published. |
No examples provided.
get_device ~64
Gets device details for a given enterprise and device ID. Requires the resource name in the format: enterprises/{enterpriseId}/devices/{deviceId}.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | — | The name of the device in the form `enterprises/{enterpriseId}/devices/{deviceId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| apiLevel | integer | — | The API level of the Android platform version running on the device. |
| applicationReports | array | — | Reports for apps installed on the device. This information is only available when `application_reports_enabled` is true in the device's policy. |
| appliedPasswordPolicies | array | — | The password requirements currently applied to the device. * This field exists because the applied requirements may be slightly different from those specified in `passwordPolicies` in some cases. * N… |
| appliedPolicyName | string | — | The name of the policy currently applied to the device. |
| appliedPolicyVersion | string | — | The version of the policy currently applied to the device. |
| appliedState | string | — | The state currently applied to the device. |
| commonCriteriaModeInfo | — | — | Information about Common Criteria Mode—security standards defined in the [Common Criteria for Information Technology Security Evaluation](https://www.commoncriteriaportal.org/) (CC). This information… |
| defaultApplicationInfo | array | — | Output only. The default application information for the `DefaultApplicationType`. This information is only available if `defaultApplicationInfoReportingEnabled` is true in the device's policy. Avail… |
| deviceSettings | — | — | Device settings information. This information is only available if `deviceSettingsEnabled` is true in the device's policy. |
| disabledReason | — | — | If the device state is `DISABLED`, an optional message that is displayed on the device indicating the reason the device is disabled. This field can be modified by a patch request. |
| displays | array | — | Detailed information about displays on the device. This information is only available if `displayInfoEnabled` is true in the device's policy. |
| dpcMigrationInfo | — | — | Output only. Information related to whether this device was migrated from being managed by another Device Policy Controller (DPC). |
| enrollmentTime | string | — | The time of device enrollment. |
| enrollmentTokenData | string | — | If the device was enrolled with an enrollment token with additional data provided, this field contains that data. |
| enrollmentTokenName | string | — | If the device was enrolled with an enrollment token, this field contains the name of the token. |
| hardwareInfo | — | — | Detailed information about the device hardware. |
| hardwareStatusSamples | array | — | Hardware status samples in chronological order. This information is only available if `hardwareStatusEnabled` is true in the device's policy. |
| lastPolicyComplianceReportTime | string | — | Deprecated. |
| lastPolicySyncTime | string | — | The last time the device fetched its policy. |
| lastStatusReportTime | string | — | The last time the device sent a status report. |
| managementMode | string | — | The type of management mode Android Device Policy takes on the device. This influences which policy settings are supported. |
| memoryEvents | array | — | Events related to memory and storage measurements in chronological order. This information is only available if `memoryInfoEnabled` is true in the device's policy. Events are retained for a certain p… |
| memoryInfo | — | — | Memory information: contains information about device memory and storage. |
| name | string | — | The name of the device in the form `enterprises/{enterpriseId}/devices/{deviceId}`. |
| networkInfo | — | — | Device network information. This information is only available if `networkInfoEnabled` is true in the device's policy. |
| nonComplianceDetails | array | — | Details about policy settings that the device is not compliant with. |
| ownership | string | — | Ownership of the managed device. |
| policyCompliant | boolean | — | Whether the device is compliant with its policy. |
| policyName | string | — | The name of the policy applied to the device, in the form `enterprises/{enterpriseId}/policies/{policyId}`. If not specified, the `policy_name` for the device's user is applied. This field can be mod… |
| powerManagementEvents | array | — | Power management events on the device in chronological order. This information is only available if `powerManagementEventsEnabled` is true in the device's policy. |
| previousDeviceNames | array | — | If the same physical device has been enrolled multiple times, this field contains its previous device names. The serial number is used as the unique identifier to determine if the same physical devic… |
| securityPosture | — | — | Device's security posture value that reflects how secure the device is. |
| softwareInfo | — | — | Detailed information about the device software. This information is only available if `softwareInfoEnabled` is true in the device's policy. |
| state | string | — | The state to be applied to the device. This field can be modified by a patch request. Note that when calling `enterprises.devices.patch`, `ACTIVE` and `DISABLED` are the only allowable values. To ent… |
| systemProperties | object | — | Map of selected system properties name and value related to the device. This information is only available if `systemPropertiesEnabled` is true in the device's policy. |
| user | — | — | The user who owns the device. |
| userName | string | — | The resource name of the user that owns this device in the form `enterprises/{enterpriseId}/users/{userId}`. |
No examples provided.
get_enterprise ~58
Gets an enterprise for a given enterprise ID. Requires the enterprise ID in the name field (e.g., enterprises/{enterpriseId}).
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | — | The name of the enterprise in the form `enterprises/{enterpriseId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| appAutoApprovalEnabled | boolean | — | Deprecated and unused. |
| contactInfo | — | — | The enterprise contact info of an EMM-managed enterprise. |
| enabledNotificationTypes | array | — | The types of Google Pub/Sub notifications enabled for the enterprise. |
| enterpriseDisplayName | string | — | The name of the enterprise displayed to users. This field has a maximum length of 100 characters. |
| enterpriseType | string | — | Output only. The type of the enterprise. |
| googleAuthenticationSettings | — | — | Settings for Google-provided user authentication. |
| logo | — | — | An image displayed as a logo during device provisioning. Supported types are: image/bmp, image/gif, image/x-ico, image/jpeg, image/png, image/webp, image/vnd.wap.wbmp, image/x-adobe-dng. |
| managedGoogleDomainType | string | — | Output only. The type of managed Google domain. |
| managedGooglePlayAccountsEnterpriseType | string | — | Output only. The type of a managed Google Play Accounts enterprise. |
| name | string | — | The name of the enterprise which is generated by the server during creation, in the form `enterprises/{enterpriseId}`. |
| primaryColor | integer | — | A color in RGB format that indicates the predominant color to display in the device management app UI. The color components are stored as follows: `(red << 16) | (green << 8) | blue`, where the value… |
| pubsubTopic | string | — | The topic which Pub/Sub notifications are published to, in the form `projects/{project}/topics/{topic}`. This field is only required if [Pub/Sub notifications are enabled](/android/management/notific… |
| signinDetails | array | — | Sign-in details of the enterprise. |
| termsAndConditions | array | — | Terms and conditions that must be accepted when provisioning a device for this enterprise. A page of terms is generated for each value in this list. |
No examples provided.
get_policy ~66
Gets a policy for a given enterprise and policy ID. Requires the resource name in the format: enterprises/{enterpriseId}/policies/{policyId}.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | — | The name of the policy in the form `enterprises/{enterpriseId}/policies/{policyId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| accountTypesWithManagementDisabled | array | — | Account types that can't be managed by the user. |
| addUserDisabled | boolean | — | Whether adding new users and profiles is disabled. For devices where `managementMode` is `DEVICE_OWNER` this field is ignored and the user is never allowed to add or remove users. |
| adjustVolumeDisabled | boolean | — | Whether adjusting the master volume is disabled. Also mutes the device. The setting has effect only on fully managed devices. |
| advancedSecurityOverrides | — | — | Advanced security settings. In most cases, setting these is not needed. |
| alwaysOnVpnPackage | — | — | Configuration for an always-on VPN connection. Use with `vpn_config_disabled` to prevent modification of this setting. |
| androidDevicePolicyTracks | array | — | This setting is not supported. Any value is ignored. |
| appAutoUpdatePolicy | string | — | Recommended alternative: `autoUpdateMode` which is set per app, provides greater flexibility around update frequency. When `autoUpdateMode` is set to `AUTO_UPDATE_POSTPONED` or `AUTO_UPDATE_HIGH_PRIO… |
| appFunctions | string | — | Optional. Controls whether apps on the device for fully managed devices or in the work profile for devices with work profiles are allowed to expose app functions. |
| applications | array | — | Policy applied to apps. This can have at most 3,000 elements. |
| assistContentPolicy | string | — | Optional. Controls whether [AssistContent](https://developer.android.com/reference/android/app/assist/AssistContent) is allowed to be sent to a privileged app such as an assistant app. AssistContent… |
| autoDateAndTimeZone | string | — | Whether auto date, time, and time zone are enabled on a company-owned device. If this is set, then [`autoTimeRequired`](/android/management/reference/rest/v1/enterprises.policies#autoTimeRequired) is… |
| autoTimeRequired | boolean | — | Whether auto time is required, which prevents the user from manually setting the date and time. If [`autoDateAndTimeZone`](/android/management/reference/rest/v1/enterprises.policies#autodateandtimezo… |
| autofillPolicy | string | — | Optional. The policy for the autofill service. |
| blockApplicationsEnabled | boolean | — | This field has no effect. |
| bluetoothConfigDisabled | boolean | — | Whether configuring bluetooth is disabled. |
| bluetoothContactSharingDisabled | boolean | — | Whether bluetooth contact sharing is disabled. |
| bluetoothDisabled | boolean | — | Whether bluetooth is disabled. Prefer this setting over `bluetooth_config_disabled` because `bluetooth_config_disabled` can be bypassed by the user. |
| cameraAccess | string | — | Controls the use of the camera and whether the user has access to the camera access toggle. |
| cameraDisabled | boolean | — | If `camera_access` is set to any value other than `CAMERA_ACCESS_UNSPECIFIED`, this has no effect. Otherwise this field controls whether cameras are disabled: If true, all cameras are disabled, other… |
| cellBroadcastsConfigDisabled | boolean | — | Whether configuring cell broadcast is disabled. |
| choosePrivateKeyRules | array | — | Rules for determining apps' access to private keys. See `ChoosePrivateKeyRule` for details. This must be empty if any application has `CERT_SELECTION` delegation scope. |
| complianceRules | array | — | Rules declaring which mitigating actions to take when a device is not compliant with its policy. When the conditions for multiple rules are satisfied, all of the mitigating actions for the rules are… |
| createWindowsDisabled | boolean | — | Whether creating windows besides app windows is disabled. |
| credentialProviderPolicyDefault | string | — | Optional. Controls which apps are allowed to act as credential providers on Android 14 and above. These apps store credentials, see [this](https://developer.android.com/training/sign-in/passkeys) and… |
| credentialsConfigDisabled | boolean | — | Whether configuring user credentials is disabled. |
| crossDevicePolicies | — | — | Optional. Policies controlling cross-device communication. |
| crossProfilePolicies | — | — | Cross-profile policies applied on the device. |
| dataRoamingDisabled | boolean | — | Whether roaming data services are disabled. |
| debuggingFeaturesAllowed | boolean | — | Whether the user is allowed to enable debugging features. |
| defaultApplicationSettings | array | — | Optional. The default application setting for supported types. If the default application is successfully set for at least one app type on a profile, users are prevented from changing *any* default a… |
| defaultPermissionPolicy | string | — | The default permission policy for runtime permission requests. |
| deviceConnectivityManagement | — | — | Covers controls for device connectivity such as Wi-Fi, USB data access, keyboard/mouse connections, and more. |
| deviceOwnerLockScreenInfo | — | — | The device owner information to be shown on the lock screen. |
| deviceRadioState | — | — | Covers controls for radio state such as Wi-Fi, bluetooth, and more. |
| displaySettings | — | — | Optional. Controls for the display settings. |
| encryptionPolicy | string | — | Whether encryption is enabled |
| ensureVerifyAppsEnabled | boolean | — | Whether app verification is force-enabled. |
| enterpriseDisplayNameVisibility | string | — | Optional. Controls whether the `enterpriseDisplayName` is visible on the device (e.g. lock screen message on company-owned devices). |
| factoryResetDisabled | boolean | — | Whether factory resetting from settings is disabled. |
| frpAdminEmails | array | — | Email addresses of device administrators for factory reset protection. When the device is factory reset, it will require one of these admins to log in with the Google account email and password to un… |
| funDisabled | boolean | — | Whether the user is allowed to have fun. Controls whether the Easter egg game in Settings is disabled. |
| installAppsDisabled | boolean | — | Whether user installation of apps is disabled. |
| installUnknownSourcesAllowed | boolean | — | This field has no effect. |
| keyguardDisabled | boolean | — | If true, this disables the [Lock Screen](https://source.android.com/docs/core/display/multi_display/lock-screen) for primary and/or secondary displays. This policy is supported only in dedicated devi… |
| keyguardDisabledFeatures | array | — | Disabled keyguard customizations, such as widgets. |
| kioskCustomLauncherEnabled | boolean | — | Whether the kiosk custom launcher is enabled. This replaces the home screen with a launcher that locks down the device to the apps installed via the `applications` setting. Apps appear on a single pa… |
| kioskCustomization | — | — | Settings controlling the behavior of a device in kiosk mode. To enable kiosk mode, set `kioskCustomLauncherEnabled` to `true` or specify an app in the policy with `installType` `KIOSK`. |
| locationMode | string | — | The degree of location detection enabled. |
| longSupportMessage | — | — | A message displayed to the user in the device administators settings screen. |
| maximumTimeToLock | string | — | Maximum time in milliseconds for user activity until the device locks. A value of 0 means there is no restriction. |
| microphoneAccess | string | — | Controls the use of the microphone and whether the user has access to the microphone access toggle. This applies only on fully managed devices. |
| minimumApiLevel | integer | — | The minimum allowed Android API level. |
| mobileNetworksConfigDisabled | boolean | — | Whether configuring mobile networks is disabled. |
| modifyAccountsDisabled | boolean | — | Whether adding or removing accounts is disabled. |
| mountPhysicalMediaDisabled | boolean | — | Whether the user mounting physical external media is disabled. |
| name | string | — | The name of the policy in the form `enterprises/{enterpriseId}/policies/{policyId}`. |
| networkEscapeHatchEnabled | boolean | — | Whether the network escape hatch is enabled. If a network connection can't be made at boot time, the escape hatch prompts the user to temporarily connect to a network in order to refresh the device p… |
| networkResetDisabled | boolean | — | Whether resetting network settings is disabled. This applies only on fully managed devices. A `NonComplianceDetail` with `MANAGEMENT_MODE` is reported for other management modes. |
| oncCertificateProviders | array | — | This feature is not generally available. |
| openNetworkConfiguration | object | — | Network configuration for the device. See [configure networks](/android/management/configure-networks) for more information. |
| outgoingBeamDisabled | boolean | — | Whether using NFC to beam data from apps is disabled. |
| outgoingCallsDisabled | boolean | — | Whether outgoing calls are disabled. |
| passwordPolicies | array | — | Password requirement policies. Different policies can be set for work profile or fully managed devices by setting the `password_scope` field in the policy. |
| passwordRequirements | — | — | Password requirements. The field `password_requirements.require_password_unlock` must not be set. DEPRECATED - Use `passwordPolicies`. **Note:** Complexity-based values of `PasswordQuality`, that is,… |
| permissionGrants | array | — | Explicit permission or group grants or denials for all apps. These values override the `default_permission_policy`. |
| permittedAccessibilityServices | — | — | Specifies permitted accessibility services. If the field is not set, any accessibility service can be used. If the field is set, only the accessibility services in this list and the system's built-in… |
| permittedInputMethods | — | — | If present, only the input methods provided by packages in this list are permitted. If this field is present, but the list is empty, then only system input methods are permitted. |
| persistentPreferredActivities | array | — | Default intent handler activities. **Warning:** Do not configure this and `default_application_settings` for the same intent domain, such as web browsing. Setting both for the same intent domain can… |
| personalUsagePolicies | — | — | Policies managing personal usage on a company-owned device. |
| playStoreMode | string | — | This mode controls which apps are available to the user in the Play Store and the behavior on the device when apps are removed from the policy. |
| policyEnforcementRules | array | — | Rules that define the behavior when a particular policy can not be applied on device |
| preferentialNetworkService | string | — | Controls whether preferential network service is enabled on the work profile or on fully managed devices. For example, an organization may have an agreement with a carrier that all of the work data f… |
| printingPolicy | string | — | Optional. Controls whether printing is allowed. This is supported on devices running Android 9 and above. . |
| privateKeySelectionEnabled | boolean | — | Allows showing UI on a device for a user to choose a private key alias if there are no matching rules in ChoosePrivateKeyRules. For devices below Android P, setting this may leave enterprise keys vul… |
| recommendedGlobalProxy | — | — | The network-independent global HTTP proxy. Typically proxies should be configured per-network in `open_network_configuration`. However for unusual configurations like general internal filtering a glo… |
| removeUserDisabled | boolean | — | Whether removing other users is disabled. |
| safeBootDisabled | boolean | — | Whether rebooting the device into safe boot is disabled. |
| screenCaptureDisabled | boolean | — | Whether screen capture is disabled. This also blocks [Circle to Search](https://support.google.com/android/answer/14508957). |
| setUserIconDisabled | boolean | — | Whether changing the user icon is disabled. This applies only on devices running Android 7 and above. |
| setWallpaperDisabled | boolean | — | Whether changing the wallpaper is disabled. |
| setupActions | array | — | Action to take during the setup process. At most one action may be specified. |
| shareLocationDisabled | boolean | — | Whether location sharing is disabled. |
| shortSupportMessage | — | — | A message displayed to the user in the settings screen wherever functionality has been disabled by the admin. If the message is longer than 200 characters it may be truncated. |
| skipFirstUseHintsEnabled | boolean | — | Flag to skip hints on the first use. Enterprise admin can enable the system recommendation for apps to skip their user tutorial and other introductory hints on first start-up. |
| smsDisabled | boolean | — | Whether sending and receiving SMS messages is disabled. |
| statusBarDisabled | boolean | — | Whether the status bar is disabled. This disables notifications, quick settings, and other screen overlays that allow escape from full-screen mode. DEPRECATED. To disable the status bar on a kiosk de… |
| statusReportingSettings | — | — | Status reporting settings |
| stayOnPluggedModes | array | — | The battery plugged in modes for which the device stays on. When using this setting, it is recommended to clear `maximum_time_to_lock` so that the device doesn't lock itself while it stays on. |
| systemUpdate | — | — | The system update policy, which controls how OS updates are applied. If the update type is `WINDOWED`, the update window will automatically apply to Play app updates as well. **Note:** [Google Play s… |
| tetheringConfigDisabled | boolean | — | Whether configuring tethering and portable hotspots is disabled. If `tetheringSettings` is set to anything other than `TETHERING_SETTINGS_UNSPECIFIED`, this setting is ignored. |
| uninstallAppsDisabled | boolean | — | Whether user uninstallation of applications is disabled. This prevents apps from being uninstalled, even those removed using `applications` |
| unmuteMicrophoneDisabled | boolean | — | If `microphone_access` is set to any value other than `MICROPHONE_ACCESS_UNSPECIFIED`, this has no effect. Otherwise this field controls whether microphones are disabled: If true, all microphones are… |
| usageLog | — | — | Configuration of device activity logging. |
| usbFileTransferDisabled | boolean | — | Whether transferring files over USB is disabled. This is supported only on company-owned devices. |
| usbMassStorageEnabled | boolean | — | Whether USB storage is enabled. Deprecated. |
| version | string | — | The version of the policy. This is a read-only field. The version is incremented each time the policy is updated. |
| vpnConfigDisabled | boolean | — | Whether configuring VPN is disabled. |
| wifiConfigDisabled | boolean | — | Whether configuring Wi-Fi networks is disabled. Supported on fully managed devices and work profiles on company-owned devices. For fully managed devices, setting this to true removes all configured n… |
| wifiConfigsLockdownEnabled | boolean | — | This is deprecated. |
| wipeDataFlags | array | — | Optional. Wipe flags to indicate what data is wiped when a device or profile wipe is triggered due to any reason (for example, non-compliance). This does not apply to the `enterprises.devices.delete`… |
| workAccountSetupConfig | — | — | Optional. Controls the work account setup configuration, such as details of whether a Google authenticated account is required. |
No examples provided.
get_web_app ~63
Gets a web app. Requires the resource name in the format: enterprises/{enterpriseId}/webApps/{webAppId}.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | — | The name of the web app in the form `enterprises/{enterpriseId}/webApps/{packageName}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| displayMode | string | — | The display mode of the web app. |
| icons | array | — | A list of icons for the web app. Must have at least one element. |
| name | string | — | The name of the web app, which is generated by the server during creation in the form `enterprises/{enterpriseId}/webApps/{packageName}`. |
| startUrl | string | — | The start URL, i.e. the URL that should load when the user opens the application. |
| title | string | — | The title of the web app as displayed to the user (e.g., amongst a list of other applications, or as a label for an icon). |
| versionCode | string | — | The current version of the app. Note that the version can automatically increase during the lifetime of the web app, while Google does internal housekeeping to keep the web app up-to-date. |
No examples provided.
list_devices ~124
Lists devices for a given enterprise. Requires the enterprise ID in the parent field (e.g., enterprises/{enterpriseId}).
| Name | Type | Req | Description |
|---|---|---|---|
| pageSize | integer | — | The requested page size. If unspecified, at most 10 devices will be returned. The maximum value is 100; values above 100 will be coerced to 100. The limits can change over time. |
| pageToken | string | — | A token identifying a page of results returned by the server. |
| parent | string | — | The name of the enterprise in the form `enterprises/{enterpriseId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| devices | array | — | The list of devices. |
| nextPageToken | string | — | If there are more results, a token to retrieve next page of results. |
No examples provided.
list_enterprises ~101
Lists enterprises accessible to the caller.
| Name | Type | Req | Description |
|---|---|---|---|
| pageSize | integer | — | The requested page size. The actual page size may be fixed to a min or max value. |
| pageToken | string | — | A token identifying a page of results returned by the server. |
| projectId | string | yes | Required. The Cloud project ID of the EMM managing the enterprises. |
| view | string | — | Specifies which Enterprise fields to return. This method only supports BASIC. |
| Name | Type | Req | Description |
|---|---|---|---|
| enterprises | array | — | The list of enterprises. |
| nextPageToken | string | — | If there are more results, a token to retrieve next page of results. |
No examples provided.
list_policies ~102
Lists policies for a given enterprise. Requires the enterprise resource name in the parent field (e.g., enterprises/{enterpriseId}).
| Name | Type | Req | Description |
|---|---|---|---|
| pageSize | integer | — | The requested page size. The actual page size may be fixed to a min or max value. |
| pageToken | string | — | A token identifying a page of results returned by the server. |
| parent | string | — | The name of the enterprise in the form `enterprises/{enterpriseId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| nextPageToken | string | — | If there are more results, a token to retrieve next page of results. |
| policies | array | — | The list of policies. |
No examples provided.
list_web_apps ~105
Lists web apps for a given enterprise. Requires the enterprise resource name in the parent field (e.g., enterprises/{enterpriseId}).
| Name | Type | Req | Description |
|---|---|---|---|
| pageSize | integer | — | The requested page size. This is a hint and the actual page size in the response may be different. |
| pageToken | string | — | A token identifying a page of results returned by the server. |
| parent | string | — | The name of the enterprise in the form `enterprises/{enterpriseId}`. |
| Name | Type | Req | Description |
|---|---|---|---|
| nextPageToken | string | — | If there are more results, a token to retrieve next page of results. |
| webApps | array | — | The list of web apps. |
No examples provided.