API for Patch My PC Cloud

Our biggest use case is (in order, most wanted to least) MSP+ licence:

• tie into application insights so we can ask the current patch status for an organisation

• application deployment/change -> create deployment based on app catalog available app

• tenant deployment (create MSP client tenant and connection to intune)

• custom app deployment

Our biggest use case is (in order, most wanted to least):

• application deployment/change -> create deployment based on app catalog available app

• tenant deployment (create MSP client tenant and connection to intune)

• custom app deployment

Our biggest use-case for this would be to automate the clenaup of stale or now unused devices for the PatchMyPC Client for the Advanced insights solution. Being able to automate this into our existing automations would help keep all the managment tools clean and up to date with devices.

Our strongest use case is automating the recurring packaging of software that isn't in the PMPC catalog, handled today via Custom Apps.

Concrete example: we package Graphisoft Archicad ourselves across several language and major versions. Every month we manually check each deployed version against the vendor's latest build, and where there's a new patch we download the installer plus its extra files, add a new version in PMPC, re-upload all files, and set the version + detection method by hand. It's repetitive, fully documented, and rule-based.

With an API, ideally exposed as an MCP server, we could let an AI agent run this end to end from our ITSM: spot the new vendor build, create the new Custom App version, upload the primary installer and extra files, and set version + detection method, with a human only approving the final result. That turns a recurring monthly task into a near-zero-touch one, and the same pattern applies to any in-house or niche app outside the catalog.

Hello everyone,
I would greatly appreciate it if an API were available that would allow software packages created (for example, using the PSAppDeployToolkit) to be automatically imported into Patch My PC and directly assigned to a standard template.

I have developed a tool called PSADT-Package Forge that significantly simplifies the creation of PSADT-based software packages. Currently, it is already possible to automatically convert these packages into an Intune package and then import them directly into Intune. However, assigning the corresponding groups is still done manually at this time.

I would therefore like to see a similar scenario implemented via a corresponding API for Patch My PC, in order to further automate the entire process and make it more efficient.

Thank you very much for reviewing this request.

I would love to have an API for uploading software

A scenario for us is onboarding of new clients and automating the process of going through and creating update all policies for environments with regulatory requirements around patching applications.

We would like to be able to create a script that once a week authenticates to an environment, gets the unmanaged apps list and deploys an update only policy to all devices. (We can put logic into this to reduce risk internally)

We would also like to use it in reporting for these clients to automate showing they are at risk of failing certain maturity level requirements (e.g. patching requirements within E8ML2) and we more work is needed, or to show them apps that are being managed and the time saved by using the service.

We're an MSP, and we really want the ability to create dashboards for monitoring / reporting, the ability to create users, and the ability to create app deployments via API so we can have standardised and automated deployments across customers.

We'd like an API to be able to integrate Power Bi automation for reporting and also schedule report delivery to designated users on a set time/day.

One scenario we'd find valuable is an API endpoint that provides current version information for third-party applications managed by Patch My PC. We have some tooling in place to gather this data today, but a centralized, trusted source from Patch My PC would greatly simplify the process.

Bonus points if it also included changelogs and associated CVE data. Many of the external sources we currently rely on only update when a CVE is published, which leaves a gap when applications are updated for non-security reasons like bug fixes or stability improvements.

The ability to add uploading new versions of custom apps into our automation workflow would be a tremendous help.

We want to be able to check and update scripts that are attached to applications. Our specific use case are requirement scripts. If we need to make an update we have to update each app individually even though all the requirement scripts are the same. We are able to do this with intune and graph but not with patchmypc apps.

This is a massive part that is missing - we want the ability to create dashboards for monitoring / reporting, and the ability to create users.

I'd like to echo the comments below, to show additional interest :)
We would like to use the API for a few different scenarios.

1. Automated custom app packaging and deployment

2. Finite (custom tuned) monitoring and alerting

3. Standardized deployments (whether full automated or regression scanning to catch issues)

4. Easier data reporting and exportation

5. Setting up IaC, allowing easy replication from Test to Prod environments

We're an MSP and would like to use this to automate deployment of updates of existing & unmanaged applications in a clients tenancy.

Mainly to use it to automate the process of extracting out the client list and user, place them into the correct AD group for update/software assignment.

1. API access to reporting/monitoring information from the PmPC Client would allow us to achieve yet another level of automation in regards to adding specific devices to the Adobe Reader Install assignment group automatically. (Sometime the Update-Only app isn't enough because... Adobe is crap and the Update-Only assignment only carries msp transforms up to a certain point)

2. It would also allow us add and script specific fine grained alerts and information to our existing monitoring solution

3. It would allow automatic changes to the requirements scripts with every version update of an app... you don't really have a solution for matching requirements that depend on the apps current version number yet.... you have to hardcode it still.

There's a lot of very niece and company/environment specific stuff to be achieved by having api access.

Whilst I also appreciate the CI/CD use cases others have mentioned here for custom apps... I would suggest for my own environment we mostly use apps that exist in the catalogue but would like to see some more granular automation around responding to CVE's from our security platform.

Currently our helpdesk team generally respond to a new CVE by performing a selective sync for the APP and UPDATE. It would be great if we could get our monitoring platform to respond to the CVE publishing with not only a ticket but an outbound API call to trigger the selective sync on my teams behalf.

We only do a monthly full apps inventory sync but when CVE's are published we perform selective syncs on those apps only. They all follow a 2 ring approach separated over 1 week.

A support desk member at PMPC discussed the automated application of security groups when a CVE was applicable but this didnt quite meet the requirements on its own.

I would also suggest that this feature would be useful for the Publisher and not only PMPC cloud.

An API would allow us to automate solutions for custom apps and integrating them into PMPC. We have security agents that aren't in PMPC, but we need to maintain updates and we can script the piece to obtain the installers, but it would be nice to add into that an automation to get it into PMPC.

We're looking to integrate it with our software intake process. While PMPC has an impressive library, we still have apps come through our intake process that aren't in the PMPC library and want to be able to automate adding/managing them in PMPC. We also would like to be able to integrate it with our CI/CD pipelines for in house developed apps. Being able to pull out data into our infrastructure data warehouse would be great as well.