Live 62 Actions

Carta MCP Server
for AI Agents

Q: What AI frameworks and AI clients does the StackOne Carta MCP server support?

The StackOne Carta MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Connect your AI agent to StackOne's Carta MCP server and give it 62 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →

Carta MCP Server

Built by

StackOne

Coverage

62 Agent Actions

Create, read, update, and delete across Carta — and extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Carta MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Carta tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Carta call.

Tools Discovery →

What is the Carta MCP Server?

A Carta MCP server lets AI agents read and write Carta data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Carta MCP server ships with 62 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Carta MCP Tools

Every action from Carta's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Capitalization Tables

Get Capitalization Table
Retrieve an issuer's capitalization table summary.
Get Capitalization Table
Get a capitalization table for an investment company under a firm and fund.
List Capitalization Tables
List the capitalization tables for an investment company under a firm and fund.

Stakeholder Capitalization Tables

Get Stakeholder Capitalization Table
Retrieve the stakeholder-level capitalization table for an issuer.
Get Stakeholder Capitalization Table
Get the stakeholder capitalization table for an investment company under a firm and fund.

Certificates

Get Certificate
Retrieve a stock certificate by id for the specified issuer.
List Certificates
List stock certificates issued by the specified issuer.
List Certificates
List certificates for an investment under a firm and fund.
Get Certificate
Get a certificate held by a shareholder portfolio for a given issuer.
List Certificates
List certificates held by a shareholder portfolio for a given issuer.

Convertible Notes

Get Convertible Note
Retrieve a convertible note by id for the specified issuer.
List Convertible Notes
List convertible notes issued by the specified issuer.
List Convertible Notes
List convertible notes for an investment under a firm and fund.
Get Convertible Note
Get a convertible note held by a shareholder portfolio for a given issuer.
List Convertible Notes
List convertible notes held by a shareholder portfolio for a given issuer.

Option Grants

Get Option Grant
Retrieve an option grant by id for the specified issuer.
List Option Grants
List option grants issued by the specified issuer.
Get Option Grant
Get an option grant held by a shareholder portfolio for a given issuer.
List Option Grants
List option grants held by a shareholder portfolio for a given issuer.

Restricted Stock Awards

Get Restricted Stock Award
Retrieve a restricted stock award by id for the specified issuer.
List Restricted Stock Awards
List restricted stock awards issued by the specified issuer.
Get Restricted Stock Award
Get a restricted stock award held by a shareholder portfolio for a given issuer.
List Restricted Stock Awards
List restricted stock awards held by a shareholder portfolio for a given issuer.

Restricted Stock Units

Get Restricted Stock Unit
Retrieve a restricted stock unit by id for the specified issuer.
List Restricted Stock Units
List restricted stock units issued by the specified issuer.
Get Restricted Stock Unit
Get a restricted stock unit held by a shareholder portfolio for a given issuer.
List Restricted Stock Units
List restricted stock units held by a shareholder portfolio for a given issuer.

Issuers

Get Issuer
Retrieve an issuer by id.
List Issuers
List issuers accessible to the authenticated caller.

Stakeholders

Get Stakeholder
Retrieve a stakeholder by id for the specified issuer.
List Stakeholders
List stakeholders on the specified issuer.

Fund Investment Documents

Download Fund Investment Document
Download a fund investment document held by a shareholder portfolio.
List Fund Investment Documents
List fund investment documents held by a shareholder portfolio.

Shareholder Portfolios

Get Shareholder Portfolio
Get a shareholder portfolio by its identifier.
List Shareholder Portfolios
List shareholder portfolios accessible to the authenticated user.

Draft Issuers

Create Draft Issuer
Create a new draft issuer in Carta Launch with issuer details, share class configuration, and initial certificates.
Get Draft Issuer
Retrieve a single draft issuer from Carta Launch by its unique identifier.

Other (25)

Create A Draft Option Grant
Create a draft option grant inside a draft option grant set.
Get Draft Option Grant
Retrieve a single draft option grant by id.
List Option Exercises
List option exercises issued by the specified issuer.
List Interests
List profits interests issued by the specified issuer.
List Vesting Schedule Templates
List vesting schedule templates configured on the issuer.
List Transactions
List transactions on securities issued by the specified issuer.
List Fair Market Values
List fair market values recorded on the specified issuer.
List Points Of Contact
List the primary points of contact for the specified issuer.
List Share Classes
List share classes issued by the specified issuer.
List Cash Balances
List cash balances for a firm and fund.
List Partner Contacts
List partner contacts for a firm, optionally filtered by fund or partner.
List Firm Performance Metrics
List aggregated fund performance metrics for a firm.
List Fund Performance Metrics
List performance metrics for a specific fund under a firm.
List Firms
List the investor firms available to the authenticated user.
List Funds
List the funds held by an investor firm.
List Investments
List the investments under a firm's fund.
Get Fair Market Value For Portfolio Issuer
Get the fair market value used for a shareholder portfolio holdings from an issuer.
List Portfolio Issuers
List issuers whose securities are held in a shareholder portfolio.
List Corporations
List the corporations (issuers) available to the authenticated user.
Get Compensation Benchmark Attributes
Get the set of attribute values that can be used to query compensation benchmarks for a corporation.
Get Compensation Benchmarks
Get compensation benchmarks for a corporation, filtered by peer group, location, and role segmentation.
Get Open Cap Table
Get an Open Cap Table record related to a previously uploaded OCF package.
Get Current User
Retrieve the authenticated user's profile.
Update Option Exercise Money Movement
Record money movement information for an option exercise.
Update Option Exercise Tax Withholding
Record tax withholding information for an option exercise.

Set Up Your Carta MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Carta in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop-

JSON

Claude Desktop Docs

{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Platform Resources

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What 200+ Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building 200+ connectors that serve both, here's when each approach wins.

14 min read

Carta MCP Server FAQ

Does StackOne have a Carta MCP server?

Yes. StackOne offers a hosted Carta MCP server with 62 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.

Carta MCP server vs direct API integration — what's the difference?

A Carta MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Carta. A Carta MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Carta at runtime. StackOne provides both.

How does Carta authentication work for AI agents?

Carta authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Carta account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.

Are Carta MCP tools vulnerable to prompt injection?

Yes — Carta MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.

What is the context bloat of a Carta agent and how do I avoid it?

Context bloat happens when Carta tool schemas and API responses eat your Carta agent's memory, preventing it from reasoning effectively. A single Carta query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.

Can I limit which actions my Carta agent can access?

Yes — you can limit which actions your Carta agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.

Can I create custom agent actions for my Carta MCP server?

Yes — you can create custom agent actions for your Carta MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Carta's API, generate production-ready connector YAML, test against the live API, and validate before you ship.

When should I NOT use a Carta MCP server?

Skip a Carta MCP server if your integration is purely software-to-software — direct Carta API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Carta actions at runtime.

What AI frameworks and AI clients does the StackOne Carta MCP server support?

The StackOne Carta MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo

Carta MCP Serverfor AI Agents