CyberArk (Privilege Cloud) MCP Server
for AI Agents

Add a new user to Privilege Cloud via POST /Users

Retrieve a list of all existing users in Privilege Cloud via GET /Users

Update an existing user via PUT /Users/{UserID}

Delete a specific user in Privilege Cloud via DELETE /Users/{UserID}

Add a new group via POST /UserGroups

Retrieve a list of all existing user groups via GET /UserGroups

Update a Vault group via PUT /UserGroups/{groupId}

Delete a Privilege Cloud group via DELETE /UserGroups/{GroupID}

Add a new Safe to Privilege Cloud via POST /Safes

Update a single Safe in Privilege Cloud via PUT /Safes/{SafeUrlId}

Delete a Safe from the Vault via DELETE /Safes/{safeUrlId}

Add an existing user or group as a Safe member via POST /Safes/{safeUrlId}/Members

Update an existing Safe member via PUT /Safes/{SafeUrlId}/Members/{MemberName}

Remove a member from a Safe via DELETE /Safes/{safeUrlId}/Members/{memberName}

Add a new privileged account to Privilege Cloud via POST /Accounts

Retrieve a list of all privileged accounts via GET /Accounts

Update an existing account's details via PATCH /Accounts/{AccountID}

Delete a specific account in the Vault via DELETE /Accounts/{id}