Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Agent → Get

AI-generated

Summary

Retrieves a single Datto EDR agent (endpoint) by ID via GET Agents/{id}, optionally limiting the returned fields.

Inputs

  • Agent ID (required) — ID of the agent to fetch. The node throws an error if empty.
  • Options > Fields — Comma-separated list of field names to include in the response. Sent as the LoopBack filter's fields.
  • Options > Order — Sort order string (e.g. "createdOn DESC"). Shown in the UI but ignored by Get, which only sends fields and include.
  • Options > Where (JSON) — Raw LoopBack where clause. Shown in the UI but ignored by Get, since no where filter is sent to a single-record request.

Output shape

One n8n item whose json is the agent record returned by the Datto EDR API.

If Fields is set, only those fields are requested. Order and Where (JSON) have no effect on this operation. A nonexistent ID produces a 404 error ("Not found") unless Continue On Fail is enabled, in which case an item with an error message is returned. The Base URL in the credential must end with /api.

Examples

Example 1: Fetch full details for an agent ID from an alert

Resource: Agent, Operation: Get, Agent ID: {{$json.agentId}}

Example 2: Check only a few attributes of one agent

Agent ID set; Options > Fields: "hostname,active,isolated"

Links

Discussion