What is the Canopy RMM Agent "Leaf"?
Leaf is Canopy's endpoint software Agent. The Leaf Agent is deployed onto a host controller device in a target environment. Leaf is designed to be installable anywhere, allowing you to install on any operating system (OS), with built-in support for Linux, Windows, and macOS out-of-the-box.
Leaf is used on connected products like kiosks, digital signage, security systems, camera systems, access control monitors, point-of-sale (POS) systems, and more.
The Leaf Agent uses minimal resources and has a small footprint, making it suitable for small devices. Once deployed, Leaf enables a range of functionality and seamlessly exchanges data with the Canopy enterprise platform hosted in our multi-tenant, cloud environment.
Lightweight, Operating System Agnostic
Out-of-the-box and unlimited integration capabilities, designed to use minimal resources while in operation. Leaf works seamlessly across any operating system environment, providing consistent management regardless of your device infrastructure:
- Linux
- Windows
- macOS
Flexible Deployment Capabilities
Leaf adapts to your existing infrastructure and deployment workflows, offering multiple installation methods to fit any environment or use case. Whether you need silent installations across hundreds of devices, containerized deployments, or modern orchestration platforms, Leaf integrates seamlessly:
- Silent Installer - Local
- Over The Air
- SSH Implementation
- SW Imaging Process
- Kubernetes
- Docker
Remote Actions at Scale
Leaf enables comprehensive remote management capabilities across your entire device fleet, eliminating the need for physical access or on-site technicians. Whether you're managing ten devices or ten thousand, Leaf provides the tools to execute critical operations remotely with speed and precision:
- Download
- Executor
- Fast Poll
- File Information
- List Directory
- List Windows Updates
- Reboot
- Rename Computer
- Screenshot
- Service Control
- List Directory
- System Updates
Advanced Device Management
Beyond basic remote actions, Leaf provides enterprise-grade device management capabilities designed for complex, distributed environments. Maintain control and visibility across your infrastructure with powerful automation and orchestration features:
- Software Distribution
- Software Management
- Firmware Management
- Agent Updates
- Agent Management
- Content Updates
- Offline Execution Log
- Automation Deployment
Highly Secure by Design
Security is built into Leaf's architecture. The agent does not require opening any local ports on target systems, eliminating a common vulnerability point. All communication from Leaf to Canopy enterprise components is performed over TLS-secured HTTPS protocols utilizing standard ports (443). The communication of events and subsequent actions occurs entirely over the outbound connection, maintaining security while enabling full functionality.
For a complete list of frequently asked questions about the Leaf Agent from Canopy, bookmark the Leaf Agent Product Sheet →