> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get the MDM control type catalog

> Return the catalog of all creatable MDM control types with their name, description, platform, category, activation status, and JSON Schema for the configuration payload. Intended for AI/MCP agents to discover which control types exist and how to configure them.

<span className="badge-read">Key: Read</span><span className="badge-company">Scope: Company</span>


## OpenAPI

````yaml https://api.getprimo.com/openapi.json get /mdm-controls/catalog
openapi: 3.1.1
info:
  title: Public API - BETA
  description: Read docs on https://docs.getprimo.com/
  version: '1.0'
  contact: {}
servers:
  - url: https://api.getprimo.com
security:
  - apikey: []
tags: []
paths:
  /mdm-controls/catalog:
    get:
      tags:
        - MdmControls
      summary: Get the MDM control type catalog
      description: >-
        Return the catalog of all creatable MDM control types with their name,
        description, platform, category, activation status, and JSON Schema for
        the configuration payload. Intended for AI/MCP agents to discover which
        control types exist and how to configure them.
      operationId: getMdmControlCatalog
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetMdmControlCatalog_Output'
components:
  schemas:
    GetMdmControlCatalog_Output:
      type: object
      properties:
        catalog:
          type: array
          items:
            type: object
            properties:
              type:
                type: string
                enum:
                  - malwarebyte_macos
                  - malwarebyte_windows
                  - malwarebyte_linux
                  - recoveryOs_macos
                  - softwareUpdate_macos
                  - appBlocking_macos
                  - wifi_macos
                  - wifi_ios
                  - wifi_ipados
                  - wifi_windows
                  - wifi_android
                  - wifi_linux
                  - adminUserManagement_macos
                  - adminUserManagement_windows
                  - adminUserPasswordRotation_macos
                  - adminUserPasswordRotation_windows
                  - deviceNaming_macos
                  - deviceNaming_windows
                  - deviceNaming_linux
                  - googleChrome_macos
                  - googleChrome_windows
                  - firewall_macos
                  - firewall_windows
                  - usbBlocking_macos
                  - usbBlocking_windows
                  - usbBlocking_linux
                  - entraSSO_macos
                  - oktaSSO_macos
                  - primoSSO_macos
                  - customFile_macos
                  - customFile_ios
                  - customFile_ipados
                  - customFile_windows
                  - customFile_android
                  - customFile_linux
                  - passwordPolicy_macos
                  - passwordPolicy_windows
                  - passwordPolicy_ios
                  - passwordPolicy_ipados
                  - passwordPolicy_android
                  - sentinelOne_macos
                  - sentinelOne_windows
                  - sentinelOne_windows_arm64
                  - sentinelOne_linux_deb
                  - sentinelOne_linux_deb_arm64
                  - sentinelOne_linux_rpm
                  - sentinelOne_linux_rpm_arm64
                  - diskEncryption_all
                  - osUpdate_macos
                  - osUpdate_windows
                  - osUpdate_ios
                  - osUpdate_ipados
                  - rustdesk_macos
                  - rustdesk_windows
                  - disableProfilesPane_macos
                  - screenCapture_macos
                  - disableAirdrop_macos
                  - airPrint_macos
                  - webClip_macos
                  - webClip_ios
                  - webClip_ipados
              name:
                type: string
              description:
                type: string
              platform:
                type: string
                enum:
                  - macos
                  - windows
                  - ios
                  - ipados
                  - android
                  - linux
                  - chromeos
                  - unknown
              category:
                type: string
                enum:
                  - malwarebytes
                  - recoveryOs
                  - encryption
                  - osUpdate
                  - softwareUpdate
                  - wifi
                  - adminUserManagement
                  - adminUserPasswordRotation
                  - deviceNaming
                  - googleChrome
                  - firewall
                  - usbBlocking
                  - entraSSO
                  - oktaSSO
                  - primoSSO
                  - customFile
                  - passwordPolicy
                  - sentinelOne
                  - rustdesk
                  - appBlocking
                  - disableProfilesPane
                  - disableAirdrop
                  - screenCapture
                  - airPrint
                  - webClip
              canBeActivated:
                type: boolean
              reasons:
                type: array
                items:
                  type: string
                  enum:
                    - SHOULD_BE_UNIQUE
                    - SHOULD_SWITCH_TARGET
                    - MISSING_SENTINEL_ONE_INTEGRATION
                    - MISSING_MALWAREBYTES_INTEGRATION
                    - MISSING_ANDROID_MDM_INTEGRATION
                    - MISSING_LINUX_MDM_INTEGRATION
                    - MISSING_APPLE_MDM_INTEGRATION
                    - MISSING_WINDOWS_MDM_INTEGRATION
                    - NO_MDM_INTEGRATION_ENABLED
                    - FEATURE_NOT_ENABLED
              canOnlyHaveGlobalTarget:
                type: boolean
              inputSchema:
                description: JSON Schema for the control config
                type: object
                propertyNames:
                  type: string
                additionalProperties: {}
            required:
              - type
              - name
              - description
              - platform
              - category
              - canBeActivated
              - reasons
              - canOnlyHaveGlobalTarget
              - inputSchema
            additionalProperties: false
      required:
        - catalog
      additionalProperties: false
  securitySchemes:
    apikey:
      scheme: bearer
      bearerFormat: API key
      type: http
      description: >-
        Use your Primo API key in the Authorization header as `Bearer
        <API_KEY>`.

````