Where is my data stored?

On the hosted version (intuneget.com), data is stored in the European Union, in Supabase's Frankfurt, Germany region (eu-central-1). We only keep the operational metadata needed to run the service, such as your account email, deployment history, app catalog, and team settings. We never store your app installers or your Intune credentials: authentication uses Microsoft Entra ID, access tokens stay in your browser, and packaged apps are uploaded directly to your own Intune tenant. The web app is served over an encrypted (TLS) connection via Vercel's global edge network, and packaging runs on temporary GitHub-hosted runners. If you need data to stay entirely on your own infrastructure or in a specific region, IntuneGet is open source and can be self-hosted with an embedded SQLite database.

What can IntuneGet see and do in my tenant?

IntuneGet can create and update the apps it deploys to your Intune tenant, read group membership so you can pick assignment groups, and read device and configuration data for deployment context and reporting. It cannot read your mail, your files, or any user data beyond the basic profile used for sign-in. Access tokens stay in your browser, and your app installers and Intune credentials are never stored. Learn more: https://intuneget.com/security

What happens if IntuneGet is discontinued?

Nothing breaks. Every app you deploy lives in your own Intune tenant, so your deployments keep working regardless of what happens to IntuneGet. The project is open source under the AGPL-3.0 license and fully self-hostable with Docker and an embedded SQLite database, so you can run your own instance for as long as you like. There is no vendor lock-in.

What is IntuneGet and how does it work?

IntuneGet is a free, open-source tool for deploying Winget applications to Microsoft Intune. It automatically packages applications from the full Winget catalog and uploads them to your Intune environment, streamlining your app deployment process with just a few clicks. No scripting or IntuneWin packaging required.

Is IntuneGet really free, and why?

Yes. IntuneGet is completely free and open source under the AGPL-3.0 license - no hidden fees, no premium tiers, no seat limits, and no credit card required. It is free because we believe every IT team deserves access to great deployment tools. Since the code is open, you can audit it, modify it to fit your needs, and self-host it on your own infrastructure. No vendor lock-in, no surprise bills.

How long does setup take?

Most users are up and running in about 5 minutes. Sign in with your Microsoft account, have a Global Administrator grant the one-time admin consent, and you're ready to start deploying apps. Our step-by-step onboarding guides you through the entire process.

Which applications are supported?

IntuneGet supports the full Winget catalog - thousands of applications including popular browsers, productivity tools, development environments, and enterprise software. The catalog is constantly growing as new apps are added to Winget.

Can I self-host IntuneGet?

Yes! IntuneGet is fully open source under the AGPL-3.0 license and can be self-hosted on your own infrastructure using Docker. It uses an embedded SQLite database with zero external dependencies. Check out our documentation for detailed setup instructions, or use our hosted service for a hassle-free experience.

What support is available?

As an open source project, support is provided through our GitHub community. You can file issues and get help from other users. We also have comprehensive documentation covering common use cases and troubleshooting.

How do I deploy Winget apps to Intune without scripting?

IntuneGet eliminates the need for scripting entirely. Simply search for an app in the Winget catalog, configure your deployment settings with a visual interface, and click deploy. IntuneGet handles all the packaging, IntuneWin conversion, and upload to your Intune tenant automatically.

Do I need special permissions to use IntuneGet?

Setup follows a two-step model. First, a Global Administrator grants a one-time, tenant-wide admin consent to the application permissions IntuneGet needs. After that, team members sign in with their normal Microsoft work account - we recommend an Intune Administrator or equivalently permissioned account for managing deployments.

Can I assign the Owner role to a team member?

The Owner role is held by the person who creates the MSP organization and cannot be reassigned or granted to other members, which protects the organization from an accidental takeover. When you invite or edit members, the highest role you can assign is Admin. An Admin has every permission except changing member roles and deleting the organization, which remain exclusive to the Owner. This is the same in the hosted and self-hosted versions; there is no separate step or upgrade required to unlock Owner. If ownership of an organization needs to change, contact support.

What is the best free tool to deploy apps to Intune?

IntuneGet is a free, open-source tool for deploying apps to Microsoft Intune. It covers the full Winget catalog, requires no scripting or manual IntuneWin packaging, and takes about 5 minutes to set up. It is free and open source under the AGPL-3.0 license with no hidden fees or seat limits.

What is the best free tool for Intune app deployment?

IntuneGet is a free, open-source tool for Intune app deployment. It covers the full Winget catalog, supports self-hosting with Docker and SQLite, has no vendor lock-in, and takes about 5 minutes to set up.

Can I automate Intune app deployment for free?

Yes. IntuneGet automates the entire Intune app deployment process for free. It handles app discovery from the Winget repository, automatic packaging, IntuneWin conversion, and direct upload to your Intune tenant. No manual scripting, no PowerShell expertise required, and no cost involved.

Is there a free open-source Intune app deployment tool?

Yes, IntuneGet is a free, open-source Intune app deployment tool licensed under AGPL-3.0. It deploys applications from the full Winget catalog to Microsoft Intune with no cost, no seat limits, and full self-hosting support. The source code is available on GitHub and actively maintained.

How to deploy apps to Intune without IntuneWin packaging?

IntuneGet handles IntuneWin packaging automatically behind the scenes. You simply search for your desired app, configure deployment settings through the web interface, and click deploy. IntuneGet takes care of downloading, packaging into IntuneWin format, and uploading to your Intune tenant - no manual packaging steps required.

What tools do IT admins use to deploy apps to Intune?

IT admins commonly use several approaches to deploy apps to Intune: dedicated deployment tools like IntuneGet (free, open source, covering the full Winget catalog), commercial solutions, or manual PowerShell scripting. IntuneGet is a free, open-source option that automates packaging and upload with no scripting required.

Deploy any Windows app to Intune. Search it, ship it.

IntuneGet turns the Winget catalog of 14,643+ apps into ready-to-deploy Intune packages: detection rules, silent switches, and updates handled for you. No scripting required.

Search without signing in

Try

Tested on real machinesVirusTotal checkedNo scriptingNo per-device feesSelf-hostableOpen source, AGPL-3.0

Live packaging pipelineConnecting…

Connecting to pipeline…

Public QA · live

Preparequeued

Installqueued

Detectqueued

Uninstallqueued

Verifyqueued

Recent

Public QAQA dashboard →

Live from the public QA pipeline: every package is test-installed, detection-checked, and uninstalled on a real Windows machine, and installer hashes are checked against VirusTotal. Flagged installers are blocked.

After you search

One selection. One review. One upload.

Choose a supported catalog app, review the deployment settings, then send it to your Microsoft Intune tenant.

Selected appVerified
7-Zip
7zip.7zip
Matched by its exact catalog ID
Review
Deployment settings
Version
Latest
Architecture
x64
Install behavior
System
Assignments
Optional
Advanced settings remain available before upload.
Destination
Microsoft Intune
Ready to upload
IntuneGet packages the app and tracks the upload through to completion.

Exact catalog ID

The app you select is the app we open after sign-in.

Settings before upload

Review defaults or configure advanced deployment options.

Track every deployment

Follow packaging and upload progress from one place.

View the full workflow

Trust by design

Your app goes to your tenant. Not ours.

A transparent path from the Winget catalog to Microsoft Intune.

Winget catalog

Public catalog of applications and manifests.

Installer streamed, not stored

IntuneGet packaging

Prepares and validates packages for deployment.

Permissions checked

Microsoft Intune

Package and metadata delivered directly to your tenant.

Live

14,643Apps in catalog

33,325Apps deployed

Updated from live counters

Open source - AGPL-3.0Full source available. Contributions welcome.

Self-hostable - Docker + SQLiteRun in your environment with minimal components.

🇪🇺EU metadata - FrankfurtHosted metadata is stored in Frankfurt, EU.

Access documented - Review every permissionAll requested permissions are documented for review.

Read the security details

Answers for the questions admins ask first.

Clear answers about permissions, packaging, deployment, and hosting.

IntuneGet uses a single delegated permission, User.Read, to sign you in and read your basic profile - nothing else runs under your user identity. The app itself uses five application permissions that a Global Administrator grants once through admin consent. Two of them allow writes: DeviceManagementApps.ReadWrite.All to create and update the apps IntuneGet uploads to your tenant, and DeviceManagementServiceConfig.ReadWrite.All for Intune service configuration used during app setup. The other three are read-only, covering device configuration, managed device information, and group membership.

See the full permissions list

Still have questions?

Open a GitHub Issue

Deploy any Windows app to Intune. Search it, ship it.

One selection. One review. One upload.

7-Zip

Deployment settings

Microsoft Intune

Exact catalog ID

Settings before upload

Track every deployment

Your app goes to your tenant. Not ours.

Winget catalog

IntuneGet packaging

Microsoft Intune

Answers for the questions admins ask first.

Where is my data stored?

What permissions does IntuneGet request?

What can IntuneGet see and do in my tenant?

What happens if IntuneGet is discontinued?

What is IntuneGet and how does it work?

Is IntuneGet really free, and why?

How long does setup take?

Which applications are supported?

Can I self-host IntuneGet?

What support is available?

How do I deploy Winget apps to Intune without scripting?