The Level agent is a lightweight background service that checks in with your account and makes remote control, monitoring, automation, and patch management available for a device. Installing it on macOS takes a couple of minutes, with a few permission grants required after the first install.

Click Add new device in the top-right corner of the Device Listing page. In the OS selector, choose macOS.

Select a device group before copying your install command. The install key updates to include the group ID, so the device lands in the right group automatically on first check-in.

If you skip this, the device lands in Ungrouped — you can move it afterward.

Every macOS install method uses an install key — a short token visible in the modal that links new devices to your Level account. It's scoped narrowly by design: if exposed, it can't access your account, existing devices, or the Level API. The only risk is that someone could use it to add devices to your account.

If you believe your install key has been compromised, contact Level support to rotate it.

The modal has two tabs for macOS.

A curl one-liner that downloads and installs the agent. This is the fastest method and works on any supported architecture without selecting one manually.

The device shows up in your Device Listing within 5–10 seconds of the install completing.

Downloads an architecture-specific PKG and installs it manually. Use this when you want a GUI walkthrough or need to specify the architecture explicitly.

If a previous Level install left behind stale files, use the forceInstall URL parameter to force a clean overwrite.

Navigate to:

This adds LEVEL_FORCE_INSTALL=true to the generated one-line command.

macOS requires explicit permission grants for remote control, screen recording, and file access. After the agent installs, grant Level access in all three locations under System Settings → Privacy & Security:

You'll need admin credentials to make these changes.

For environments managed by MDM, you can deploy a PPPC (Privacy Preferences Policy Control) mobileconfig profile to streamline the post-install permission setup.

The profile handles Accessibility and Full Disk Access silently via MDM policy. Screen Recording is a protected privacy permission that Apple doesn't allow MDM to grant silently — instead, the profile allows non-admin users to approve the Screen Recording prompt themselves, without needing admin credentials.

To deploy:

Once deployed, Accessibility and Full Disk Access are granted automatically. End users can approve the Screen Recording prompt without admin credentials.

Some antivirus and EDR tools flag Level as a threat. Add Level to your exclusions before deploying to avoid the install being blocked or the agent being quarantined after install.

For exclusion paths, certificate details, and tool-specific instructions, see AV/EDR False Detections. Level also publishes a breakdown of why EDR tools flag RMM agents at level.io/blog/edrs-distrust-rmms-and-thats-ok.

The device appears in your Device Listing within 5–10 seconds and starts populating hardware inventory within a few minutes.

If the device doesn't appear, or goes offline shortly after install, see Offline Troubleshooting.