Mobile Device Management REST API

Codeproof Cyber Device Manager provides a modern, secure REST API for Unified Endpoint Management (UEM) and Mobile Device Management (MDM). Partners and developers use these APIs to automate enrollment flows, enforce policies, deploy apps, enable kiosk mode, and run remote actions at scale.


Getting started is simple: enroll devices into your Codeproof tenant using Android Zero-Touch, Apple Business Manager (ABM), Samsung Knox Mobile Enrollment (KME), or the QR code method. Once enrolled, log in to the cloud console, generate an API key, and start using the MDM REST API to automate device provisioning, enforce policies, push apps, track endpoints, and secure fleets across Android, iOS/iPadOS, Windows, macOS, Linux, and more.

Quick start

  1. Install the Codeproof Agent and enroll the device (Zero-Touch, ABM/DEP, KME, QR code, or user enrollment).
  2. Create an API Key (or use account-based auth) in the Codeproof console.
  3. Call the API endpoint from your service, workflow, or mobile app.

API docs: Swagger / OpenAPI

Authentication

  • API Key — send in the Authorization: Bearer <key> header.
  • Account-based — email/password credentials where enabled.
curl -X GET "https://api.codeproof.com/v1/devices/{deviceId}" \
  -H "Authorization: Bearer <API_KEY>" \
  -H "Accept: application/json"
                

MDM SDK & API capabilities

  • Retrieve device inventory and health.
  • Query GPS and last-seen location.
  • List installed applications and versions.
  • Read active MDM policies and compliance state.
  • Send remote actions: lock, wipe (work or full), alarm, push message.
  • Enforce restrictions (e.g., camera, app store, browser) and single-app / kiosk mode.
  • Schedule or trigger time-based policy sets.
  • Deploy public and enterprise apps (APK, IPA, MSP/PKG) with managed configs.
  • Detect jailbreak/root, passcode settings, encryption status.
  • Generate usage and compliance reports programmatically.
Codeproof MDM REST API and SDK illustration

Common endpoints

  • GET /v1/devices — list devices with filters.
  • GET /v1/devices/{id} — device details & compliance.
  • POST /v1/devices/{id}/commands/lock — remote lock.
  • POST /v1/devices/{id}/commands/wipe — work or full wipe.
  • POST /v1/apps/deploy — deploy app to group/OU.

cURL sample: Lookup a device by IMEI

curl -X GET "https://api.codeproof.com/mdmapi/lookup?imei={IMEI number}" \
  -H "Authorization: Bearer <API_KEY>" \
  -H "Content-Type: application/json" \
                

API Documentation: Swagger / OpenAPI Explorer

Integrations: Samsung SDS, Check Point Harmony Mobile Threat Defense, and more.

Questions or feedback? support@codeproof.com

Build your workflow with Codeproof APIs