Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Agent → Uninstall

AI-generated

Summary

Queues an uninstall job for a single Datto EDR agent by sending a POST to Agents/{agentId}/uninstall.

Inputs

  • Agent ID (required) — ID of the agent to uninstall. It is inserted into the request path. An empty value throws an error: '"agentId" is required for operation "uninstall".'

Output shape

One output item per input item, containing the JSON response from the Datto EDR API for the queued uninstall job.

The request has no body. The source doesn't define the response fields, so they depend on the API. If the response is empty, the node emits a fallback item {found: 0, resource, operation}. API errors (401, 403, 404, 429 and others) are thrown as NodeApiError, or returned as {error} if Continue On Fail is enabled. The operation takes one agent ID per call. To uninstall several agents, pass multiple input items.

Examples

Example 1: Decommission a retired endpoint by removing its EDR agent.

Resource: Agent; Operation: Uninstall; Agent ID: the agent's ID, for example {{$json.agentId}} from a previous step.

Example 2: Uninstall agents for every host returned by an upstream lookup.

Feed one item per agent into the node and set Agent ID to the expression {{$json.id}}. The node runs once per item.

Links

Discussion