Create an API token in Syncro
- In Syncro, go to Admin → API - API Tokens.
- Click New Token.
- Open the Custom Permissions tab. Don’t stay on App Integration. Those tokens are prebuilt for other apps and grant more than MSPilot needs.

- Enter a Name you’ll recognize later, such as
MSPilot Access. You can leave Expiration blank. - Enable only:
- Assets - List/Search
- Customers - List/Search
- Leave every other permission off.
- Create the token and copy it to a password manager. Syncro typically won’t show it again.
Connect Syncro
- In MSPilot, open Integrations and choose Syncro.
- Enter Subdomain. For
https://your-subdomain.syncromsp.com, enteryour-subdomain. Don’t includehttps://, and don’t include.syncromsp.com. The form also accepts the full hostname. - Paste the token into API token.
- Click Connect Syncro.

After you connect
MSPilot starts syncing customers and devices from Syncro.- If you skipped a PSA, Syncro customers are imported as clients first. Devices then land in those clients.
- If clients already came from a PSA, map each client to the Syncro customer that owns its endpoint inventory.
Install the agent
Connecting syncs devices. It does not install the agent.Windows
On the client, open Deployment. Under AI applications, tick the apps to install, then choose Copy script (mspilot-deploy.ps1). The copy is a short launcher: replace any older MSPilot script saved in Syncro once. In Syncro, save it as MSPilot install and enroll, run as System, with Max Script Run Time set to 90 minutes. Open Assets & RMM, select the Windows devices, and run it. When Claude Desktop is included, keep a user signed in during the run, and restart Windows if the job reports reboot_required=true. You do not schedule a pull job; the agent schedules its own. Details are on Install.
macOS
On the client, open Deployment, pick macOS, and choose Copy script. In Syncro, create a new script. Only change these fields:
Save the script. Open Assets & RMM, select the Apple Silicon Macs (macOS 12 or later), and run it. It runs as root, so nobody needs to be signed in. The signed-in user’s AI apps are configured right away; other users at their next sign-in, then every 3 minutes. You can schedule the same script daily; running it again is a safe repair. You do not schedule a pull job in your RMM; the agent runs its own config pull for each user at sign-in and every 3 minutes. What success and each exit code look like: macOS.