datto_edr_agents_list
List and search Datto EDR endpoint agents by hostname, IP, active/authorized status, and last heartbeat, with paging and custom filters for auditing or triage.
Instructions
List or search Datto EDR endpoint agents (GET /api/Agents). Filter by hostname, IP, active/authorized state and last heartbeat; add any other property (OS, version, isolation state...) through "where" after checking field names with datto_edr_api_models {"model":"Agents"}. Paged with limit/skip.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ip | No | Exact IP address (ipstring) | |
| skip | No | Number of results to skip (use nextSkip from the previous page) | |
| limit | No | Max results per page (1-1000, default 50) | |
| order | No | LoopBack order, e.g. "createdOn DESC" or "hostname ASC" | |
| where | No | Extra LoopBack where filter, combined with AND, e.g. {"hostname":{"ilike":"%sql%"}}. Operators: eq, neq, gt, gte, lt, lte, between, inq, nin, like, ilike, and, or. Use datto_edr_api_models to see a model's properties. | |
| active | No | true = agent currently active/online | |
| fields | No | Only return these properties (keeps responses small) | |
| hostname | No | Exact hostname | |
| authorized | No | true = agent approved/authorized | |
| last_seen_after | No | Only agents with a heartbeat at or after this ISO date/time | |
| last_seen_before | No | Only agents whose last heartbeat is at or before this ISO date/time (stale agents) | |
| hostname_contains | No | Case-insensitive hostname substring (LoopBack ilike) |