How fleetdm/fleet works
Fleet is a cross-platform device-management and security platform. Operators use its UI, APIs, or CLI to configure device management, deploy software, run queries, and inspect inventory and compliance; enrolled devices report data and receive management actions. The graph includes those documented capability areas and the live-query flow evidenced in sampled source. Most service wiring and feature implementations were not sampled, so uncertain internal links are omitted.
Main entry points: service Service endpoints · frontend Fleet web UI · client_live_query.go Live query client · fleetctl fleetctl CLI
Components 17
Operator interfaces
- Fleet web UI
frontend - fleetctl CLI
cmd/fleetctl - Query target selection
frontend/hooks/useQueryTargets.ts - Live query client
server/service/client_live_query.go
Fleet control plane
- Fleet server
cmd/fleet - Service endpoints
ee/server/service - MySQL datastore
server/datastore/mysql/nanomdm_storage.go
Device management
- Enrolled devices
- MDM and enrollment
ee/server/service/mdm.go - Software deployment
ee/server/service/software_installers.go
Security and visibility
- Inventory and telemetry
server/service - Vulnerability management
ee/server/service/vulnerabilities.go - Distributed query results
server/service/client_live_query.go
Ecosystem integrations
- SCIM provisioning
ee/server/scim - Fleet MCP tools
cmd/fleet-mcp - External integrations
Other components
- IT and security teams
Connections 17
- IT and security teams → Fleet web UI: manages devices
- IT and security teams → fleetctl CLI: configures Fleet
- Fleet web UI → Service endpoints: calls APIs
- fleetctl CLI → Fleet server: calls APIs
- Query target selection → Fleet web UI: selects targets
- Enrolled devices → Service endpoints: checks in
- Service endpoints → MDM and enrollment: handles enrollment
- Service endpoints → Software deployment: manages installs
- Service endpoints → Inventory and telemetry: collects data
- Service endpoints → Vulnerability management: serves vulnerability data
- Live query client → Service endpoints: opens results stream
- Live query client → Distributed query results: streams results
- Enrolled devices → Distributed query results: returns query results
- Service endpoints → MySQL datastore: persists MDM data
- SCIM provisioning → Service endpoints: provisions users
- Fleet MCP tools → Service endpoints: accesses Fleet
- External integrations → Service endpoints: integrates by API