home home
Other Sites
  • ArcticWolf.com
  • Unified Portal
  • Arctic Circle Community
  • Technical Support Knowledge Base
Request a Demo Internal Documentation
  • Aurora Endpoint Security
  • Managed Detection and Response (MDR)
  • Managed Risk
  • Managed Security Awareness (MA)
  • Incident Readiness and Response
  • Arctic Wolf Unified Portal
  • MSP Portal
  • Authentication
  • Sensors, Scanners, and Log Collectors
  • Arctic Wolf Agent
  • Onboarding Portal
  • Active Response, Log Forwarding, and Security Monitoring
  • Active Directory
  • Cloud Security Posture Management (CSPM)
  • IT Service Management (ITSM)
  • Developer and OEM
  • Product Updates
  • Additional Information about Products and Services
  • Legacy Risk Dashboard
  • Legacy Analytics
  • English
  • 日本語
  • Deutsch
  • Français
Sign In
  • Aurora Endpoint Security
  • Managed Detection and Response (MDR)
  • Managed Risk
  • Managed Security Awareness (MA)
  • Incident Readiness and Response
  • Arctic Wolf Unified Portal
  • MSP Portal
  • Authentication
  • Sensors, Scanners, and Log Collectors
  • Arctic Wolf Agent
  • Onboarding Portal
  • Active Response, Log Forwarding, and Security Monitoring
  • Active Directory
  • Cloud Security Posture Management (CSPM)
  • IT Service Management (ITSM)
  • Developer and OEM
  • Product Updates
  • Additional Information about Products and Services
  • Legacy Risk Dashboard
  • Legacy Analytics
  • English
  • 日本語
  • Deutsch
  • Français
Sign In

Developer and OEM

Developer and OEM
  • Aurora Endpoint Defense API
    • Application management
      • Add an application
      • Edit an application
      • Delete an application
      • Regenerate an application control
      • API in audit logs
    • RESTful API
      • Authentication
        • Authentication token
        • Generate the authentication and access tokens
        • Token lifecycle
        • Request and response model
        • Service endpoint
        • Find file checksum
        • Threat classifications
        • Scope values for authentication token
      • Authorization
        • Access token
        • Response status codes
      • API and management console rate limit
      • API Tools
      • About device ID
      • About zone ID
    • User API
      • Create user
      • Get users
      • Get user
      • Update user
      • Delete user
      • Send invite email
      • Send request password email
    • Device API
      • Get devices
      • Get devices extended
      • Get device count
      • Get device
      • Get device by MAC address
      • Get device by hostname
      • Update device
      • Get device threat
      • Update device threat
      • Get zone devices
      • Get agent installer link
      • Delete Devices
      • Get Device Lifecycle Management settings
      • Update Device Lifecycle Management Settings
      • Exempt devices from the Device Lifecycle Management process
      • Include devices in the Device Lifecycle Management process
      • Reset the inactive period for a list of devices that are included in the Device Lifecycle Management process
    • Global list API
      • Get global list
      • Add to global list
      • Delete from global list
      • Get safe scripts
      • Add safe script entry
      • Delete safe script entry
    • Policy API
      • Get policies
      • Get policy
      • Create policy
      • Update policy
      • Delete policy
      • Delete policies
    • Zone API
      • Create zone
      • Get zones
      • Get zone
      • Get device zones
      • Update zone
      • Delete zone
    • Threat API
      • Get threats
      • Get threat
      • Get threat devices
      • Get threat download URL
    • Memory protection API
      • Get memory protection events
      • Get memory protection event
      • Memory violation types
    • Detections API
      • Get detections
      • Get detection
      • Get recent detections
      • Get detections .csv
      • Get detections by severity
      • Update detection
      • Delete detection
      • Delete detections
    • Package deployment API
      • Create package
      • Get packages
      • Get package
      • Delete package
      • Create package execution
      • Get package executions
      • Get package execution
      • Delete package execution
    • Detection rule API
      • Get Detection Rule List
      • Get detection rule .csv list
      • Get detection rule
      • Validate detection rule
      • Create detection rule
      • Update detection rule
      • Deactivate or delete detection rule
      • Get detection rule natural language representation
      • Get detection rule counts
    • Detection rule sets API
      • Get detection rule set list
      • Get detection rule set .csv list
      • Get detection rule set
      • Create detection rule set
      • Retrieve default detection rule set
      • Update detection rule set
      • Delete detection rule set
      • Delete multiple detection rule sets
    • Detection exceptions API
      • Get detection exceptions list
      • Get detection exception .csv list
      • Get detection exception content
      • Create detection exception
      • Update detection exception
      • Deactivate or delete detection exception
    • Device commands API
      • Lockdown device command
      • Get device lockdown history
      • Get retrieved file results
      • Request file retrieval from device
      • Check file retrieval status from device
    • Focus view API
      • Get focus view list
      • Search for focus view results
      • Request a focus view
      • Get a focus view summary
      • Get focus view results
    • InstaQuery API
      • Get InstaQueries
      • Create InstaQuery
      • Get InstaQuery
      • Get InstaQuery results
      • Archive InstaQuery
    • Aurora Focus policy API
      • Get detection rule sets to policy mapping
      • Get detection rule set for a policy
      • Update a detection rule set in a policy
    • Lockdown configurations API
      • Get lockdown configurations
      • Get lockdown configuration
      • Create lockdown configuration
      • Update lockdown configuration
      • Delete lockdown configuration
Home ▸ Developer and OEM ▸ Aurora Endpoint Defense API ▸ Device API
Share this page
  • LinkedIn
  • X
  • Facebook
  • Email

Get agent installer link

Request a secured link to download the installer for the Aurora Protect Desktop agent or the Aurora Focus agent for Windows or macOS. You can download the installers and drivers for Linux from the management console (Settings > Deployments).

Service endpoint

/devices/v2/installer?product=p&os=o&package=k&architecture=a&build=v

Optional query string parameters

Product

OS

Package

Architecture

Build (optional)

  • protect
  • optics

windows

  • exe
  • msi
  • x86
  • x64

Full version number of the agent, or blank for the latest agent version.

Example agent version: 3.2.1001

  • protect
  • optics

mac

  • dmg
  • pkg

—

Full version number of the agent, or blank for the latest agent version.

Example agent version: 3.2.1001

  • MSI packages are available for the Aurora Focus agent for Windows version 3.2.1299 and later.
  • Due to a known issue, the architecture parameter must be included with x86 or x64 when downloading an EXE package, even though the architecture parameter is relevant only to the MSI package type.

Example

https://protectapi.cylance.com/devices/v2/installer?product=protect&os=windows&package=msi&architecture=x64&build=

Method

HTTP/1.1 GET

Request headers

  • Accept: application/json
  • Authorization: Bearer JWT Token returned by Auth API with the device:read scope encoded

Response

Please see the Response status codes for more information.

Response JSON schema

Field Name Description

url

This is the URL you can use to download the requested agent installer. The API call only provides the URL, it does not download the installer for you.

Aurora Endpoint Security User Guide API Public

Last updated: March 30, 2026

Previous Get zone devices Next Delete Devices
On this Page
  • Get agent installer link
    • Response
    • Response JSON schema

Explore Topics

Aurora Endpoint Security Managed Detection and Response (MDR) Managed Risk Managed Security Awareness (MA) Incident Readiness and Response Arctic Wolf Unified Portal MSP Portal Authentication Sensors, Scanners, and Log Collectors Arctic Wolf Agent Onboarding Portal Active Response, Log Forwarding, and Security Monitoring Active Directory Cloud Security Posture Management (CSPM) IT Service Management (ITSM) Developer and OEM Product Updates Additional Information about Products and Services Legacy Risk Dashboard Legacy Analytics
Arctic Wolf Help Documentation
Privacy Policy
Terms of Use
Cookie Policy
Accessibility Statement
Information Security
Sustainability Statement
© 2026 Arctic Wolf Networks Inc. All Rights Reserved.