Autumn MCP Server
for AI Agents
Connect your AI agent to StackOne's Autumn MCP server and give it 63 MCP tools out of the box. Auth, tool execution, and security all managed.
StackOne 
Coverage
63 Agent Actions
Create, read, update, and delete across Autumn — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Autumn MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Autumn tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Autumn call.
Tools Discovery →What is the Autumn MCP Server?
A Autumn MCP server lets AI agents read and write Autumn data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Autumn MCP server ships with 63 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Autumn MCP Tools
Every action from Autumn's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Track Usages
- Batch Track Usage
Enqueue up to 1000 usage events for asynchronous processing.
- Track Usage
Records usage for a customer feature and returns updated balances.
Balances
- Create Balance
Create a balance for a customer feature.
- Update Balance
Update a customer balance.
- Delete Balance
Delete a balance for a customer feature.
Customers
- Get Customer
Fetches a customer by ID, optionally expanding related data such as invoices or entities.
- List Customers
Lists customers with cursor pagination and optional filters.
- Update Customer
Updates an existing customer by ID.
- Delete Customer
Deletes a customer by ID.
Entitys
- Create Entity
Creates an entity for a customer and feature, then returns the entity with balances and subscriptions.
- Get Entity
Fetches an entity by its ID.
- Update Entity
Updates an existing entity and returns the refreshed entity object.
- Delete Entity
Deletes an entity by entity ID.
Features
- Create Feature
Creates a new feature.
- Get Feature
Retrieves a single feature by its ID.
- List Features
Lists all features in the current environment.
- Update Feature
Updates an existing feature.
- Delete Feature
Deletes a feature by its ID.
Plans
- Create Plan
Creates a new plan with optional base price and feature configurations.
- Get Plan
Retrieves a single plan by its ID.
- List Plans
Lists all plans in the current environment.
- Update Plan
Updates an existing plan.
- Delete Plan
Deletes a plan by its ID.
Referral Programs
- Create Referral Program
Create a referral program linked to an existing reward.
- List Referral Programs
List the referral programs configured for the org.
- Get Referral Program
Fetch a referral program by ID.
- Update Referral Program
Update a referral program. Omitted fields keep their current value.
- Delete Referral Program
Delete a referral program.
Rewards
- Create Reward
Create a coupon or feature grant.
- List Rewards
List the coupons and feature grants configured for the org.
- Get Reward
Fetch a coupon or feature grant by ID.
- Update Reward
Update a coupon or feature grant. Omitted fields keep their current value.
- Delete Reward
Delete a coupon or feature grant.
Other (30)
- Create Schedule
Creates a multi-phase subscription schedule for a customer. The first phase starts immediately and subsequent phases automatically transition at their scheduled start times.
- Import Billing
Image a customer into Autumn for live migration. Read-only against processors.
- Create Referral Code
Create or fetch a referral code for a customer in a referral program.
- Get Or Create Customer
Creates a customer if they do not exist, or returns the existing customer by your external customer ID.
- List Entities
Lists entities across the organization with pagination and optional filters.
- List Events
List usage events for your organization. Filter by customer, feature, or time range.
- List Invoices
Lists invoices with cursor pagination and optional filters (customer, entity, status, processor).
- List Licenses
Lists a customer's license pools and available seats.
- List License Assignments
Lists license assignments for a customer.
- Update Subscription
Updates an existing subscription. Use to modify feature quantities, cancel, or change plan configuration.
- Check Entitlement
Checks whether a customer currently has enough balance to use a feature.
- Track Token Usage
Records AI token usage for a customer and returns the updated AI credit balance.
- Finalize Lock
Finalize a previously locked balance.
- Attach Plan
Attaches a plan to a customer. Handles new subscriptions, upgrades and downgrades.
- Preview Attach
Previews the billing changes that would occur when attaching a plan, without actually making any changes.
- Preview Update
Previews the billing changes that would occur when updating a subscription, without actually making any changes.
- Open Customer Portal
Create a billing portal session for a customer to manage their subscription.
- Setup Payment
Create a payment setup session for a customer to add or update their payment method.
- Preview Multi Attach
Previews the billing changes that would occur when attaching multiple plans, without actually making any changes.
- Multi Attach
Attaches multiple plans to a customer in a single request. Creates a single Stripe subscription with all plans consolidated.
- Preview Multi Update
Previews the billing changes of a multi-plan update without making any changes. Returns one core preview per affected subscription.
- Multi Update
Updates multiple plans on a customer in a single request. Currently supports cancel actions (immediately, end of cycle, or uncancel) across one or more subscriptions.
- Aggregate Events
Aggregate usage events by time period. Returns usage totals grouped by feature and optionally by a custom property.
- Insert Invoices
Inserts or updates up to 500 historical invoices without reading or mutating the billing processor.
- Mint Key
Mints a per-customer token so a downstream or self-hosted app can call Autumn directly without your secret key.
- Revoke Key
Revokes every outstanding token for a customer.
- Attach License
Assigns licenses to one or more entities.
- Release License
Releases licenses assigned to one or more entities.
- Redeem Referral Code
Redeem a referral code for a customer.
- Redeem Reward Code
Redeem a reward promo code for a customer.
Set Up Your Autumn MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Autumn in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What Hundreds of Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.
14 min read
Autumn MCP Server FAQ
Does StackOne have a Autumn MCP server?
Autumn MCP server vs direct API integration — what's the difference?
How does Autumn authentication work for AI agents?
origin_owner_id.Are Autumn MCP tools vulnerable to prompt injection?
What is the context bloat of a Autumn agent and how do I avoid it?
Can I limit which actions my Autumn agent can access?
Can I create custom agent actions for my Autumn MCP server?
When should I NOT use a Autumn MCP server?
What AI frameworks and AI clients does the StackOne Autumn MCP server support?
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.