AI IT supportfor managed devices

Staff ask the IT app about any IT issue, a how-to or a lost file. An AI agent solves it on their device, within your company’s rules.

See Kodema fix a real request

A 30-minute demo on one of your own test devices.

Book a demo

Connects to the identity and device tools you run

Kodema plugs into your directory and device management through MCP servers or their APIs, from inside your protected intranet. Before every action the agent consults your company policy.

Model Context ProtocolIntranet onlyREST API

Identity and directory

Microsoft Entra IDUsers, groups, policies APIMicrosoft Graph APIMCPMicrosoft MCP Server for Enterprise
OktaUsers and sign-in APIOkta Management APIMCPOkta MCP Server
Ping IdentityUsers and sign-in APIPingOne Platform APIMCPPingOne MCP Server

Device management

Microsoft IntuneWindows, macOS, Linux APIMicrosoft Graph APIMCPKodema MCP connector
JamfMac, iPhone, iPad APIJamf Pro APIMCPJamf MCP Hub
Omnissa Workspace ONEEvery platform APIWorkspace ONE UEM APIMCPKodema MCP connector

Every request, handled in one console

Requests arrive from the IT icon on each device. The agent picks one up, checks the device record, fixes the problem and answers the person.

See how a request is fixed

Three dashboards for IT and security leads

Statistics for requests, costs and spikes. Live monitoring of every device and agent session. Security for blocked requests, policy checks and approvals.

Any IT request, inside your company’s rules

The agent follows your Entra ID policies strictly, answers only from your internal documents and the knowledge you give it, and keeps to the rules you switch on. Anything outside them goes to a person.

  • IT issuesSign-in loops, printers, VPN, slow laptops, apps that will not start.
  • General guidanceHow to share a folder, set up a signature or join a meeting room.
  • File recoveryDeleted or overwritten files brought back from the device or its backups.
Company rules
3 of 5 on
  • Answer from internal documentsIT handbook, 42 pages
  • Restore files from backupOnly the person’s own files
  • Install softwareApproved catalogue only
  • Grant admin rightsGoes to IT for approval
  • Change security settingsAlways a person

Guides people to the access they need

When a request needs new access, Kodema explains exactly which permission fits the case, why it is needed and who approves it, then takes the person straight to your internal access portal.

  • Explains the right accessThe exact group, role or licence for this case, in plain words.
  • Opens the right portalA direct link into your internal access portal, with the request filled in.
  • Follows your approvalsManagers and owners approve as usual. Kodema never grants access itself.

An extra layer of protection

Prompt protection stops anyone trying to trick the agent. When a person sends a harmful request, Kodema refuses it, ends their session at once and reports it.

  • Blocks bad actorsAttempts to bypass the rules or misuse the agent are caught before anything runs.
  • Ends the sessionThe person is signed out of the IT app the moment the request is flagged.
  • Informs security quietlyThe interaction is logged and your security team is informed. The person does not see this, so nothing triggers a panic reaction.

Progress on every machine

Each pattern the agent recognises becomes a reviewed script. The next time anyone asks, on any device, it runs faster and costs less. That is innovation IT can measure.

Dynamic scripts for recognised patterns

When the agent recognises a pattern across requests, it creates a script for it on the fly. Your team reviews it before it joins the library, so every case that follows runs faster and costs less.

  • Created from patternsRecurring problems are spotted and turned into a script automatically.
  • Reviewed before useNothing enters the library until a person has approved it.
  • Reused on every matchEach new request that fits the pattern is fixed with the approved script.
kodema/scripts windows/restore-file.ps1 +3+4−2−3
@@ -12,10 +12,11 @@ function Restore-UserFile {
1212 param([string]$Name, [int]$Days = 30)
13 $root = "C:\Users"
13 $root = $env:USERPROFILE
1414 $since = (Get-Date).AddDays(-$Days)
1515 $hit = Get-ChildItem "$root\OneDrive" -Recurse -Filter $Name |
1616 Where-Object LastWriteTime -gt $since | Select-Object -First 1
1717 Copy-Item $hit.FullName $dest -Force
17 Copy-Item $hit.FullName $dest
SL Sara Lind, IT review 2m Approved
Drop -Force so it never overwrites a file.
18 Write-Output "done"
18 Write-Output "Restored $Name to $dest"
19 Write-KodemaLog restore $Name $env:COMPUTERNAME
1920}
2021
2122Export-ModuleMember Restore-UserFile

A request fixed in 3 steps. No ticket, no remote session.

1

Ask from the IT icon

The person types what they need. Kodema already knows the device, the user and its Intune or Jamf record.

  • New request from FIN-LT-0142Lena Fischer: Outlook asks for a passwordOpen
  • OMOmar Malik asked for ZoomMKT-MB-031, macOS 15
  • 27 requests fixed today2 waiting for your approval
2

The agent plans the fix

One agent per request reads the device record, picks the runbook and decides what it may run.

3

It runs or creates the fix

Kodema picks the right tool for the job and invokes it dynamically. An approved script, an Intune or Jamf action, or a new script. All scripts are written with your policy and the device’s OS in mind. Every step is saved.

fin-lt-0142 ssh
~/kodema/run$fix outlook-signin
3 of 3 steps
cmdkey /delete1 key0.4s
taskkill outlook.exe1 process1.1s
start outlooksigned in9.6s
Fixedin 14s
~/kodema/run$