Live 96 Actions

Hexnode MCP Server
for AI Agents

Q: What AI frameworks and AI clients does the StackOne Hexnode MCP server support?

The StackOne Hexnode MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Connect your AI agent to StackOne's Hexnode MCP server and give it 96 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →

Hexnode MCP Server

Built by

StackOne

Coverage

96 Agent Actions

Create, read, update, and delete across Hexnode — and extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Hexnode MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Hexnode tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Hexnode call.

Tools Discovery →

What is the Hexnode MCP Server?

A Hexnode MCP server lets AI agents read and write Hexnode data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Hexnode MCP server ships with 96 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Hexnode MCP Tools

Every action from Hexnode's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Files

Remove Files
Delete file paths from the local storage of targeted macOS or Android devices.
Delete Files
Permanently delete files from the Hexnode file catalog and Amazon S3.

App Catalogs

Create App Catalog
Create a new app catalog, optionally with apps and app groups.
List App Catalogs
List all app catalogs in the Hexnode portal.
Update App Catalog
Update the name, description, and members of an app catalog.
Delete App Catalog
Delete an app catalog.

App Groups

Create App Group
Create a new app group, optionally with an initial set of apps.
List App Groups
List all app groups in the Hexnode portal.
Update App Group
Update the name, description, and app list of an app group.
Delete App Group
Delete an app group.

Applications

List Applications
List all applications in the Hexnode app repository.
Search Applications
Search the public App Store or Play Store for apps by keyword.

Device Groups

Create Device Group
Create a new static device group, optionally seeded with enrolled devices.
List Device Groups
List all device groups in the Hexnode portal.
Update Device Group
Replace a device group's name, description and device membership.
Delete Device Group
Permanently delete a device group.

Devices

List Devices
List all devices enrolled in the Hexnode portal.
Delete Devices
Delete pre-approved devices from Hexnode UEM.

Policys

Create Policy
Create a new device policy, optionally assigning it to devices, users or groups.
Get Policy
Retrieve the full configuration of a single policy.
Remove Policy
Remove one or more policies from devices, users, user groups, or device groups.

Users

Create User
Create a new local user in the Hexnode portal.
List Users
List all users in the Hexnode portal with optional filtering and sorting.
Delete Users
Delete local user accounts from devices in bulk.
Delete User
Permanently delete a user from the Hexnode portal.

User Groups

Create User Group
Create a new user group with an optional initial set of members.
List User Groups
List all user groups in the Hexnode portal.
Update User Group
Update a user group's name, description and full member list.
Delete User Group
Permanently delete a user group.

Other (67)

Add App To List
Add a new store or web app to the Hexnode app repository.
Upload File Content
Upload a file's bytes to the Amazon S3 presigned URL from generate_presigned_upload_url.
Add To Device Group
Add one or more devices to one or more device groups.
Add To User Group
Add one or more users to one or more user groups.
Send Enrollment Request
Send a device enrollment request to a user.
Retrieve App Catalog Details
Retrieve the details of an app catalog, including its apps and app groups.
Retrieve App Group Details
Retrieve the details of an app group, including its member apps.
Retrieve App Details
Retrieve the details of an application in the app repository.
List Automations
List all automations configured in the Hexnode UEM console.
Retrieve Device Group Details
Retrieve the full details of a single device group.
Retrieve Device Details
Retrieve the complete details of a single enrolled device.
List Device Policies
List the policies associated with a specific device.
List Device Applications
List all applications installed or managed on a specific device.
List Device Locations
List the reported location history of a specific device.
List Device Action Statuses
List the execution status of remote actions sent to a specific device.
List Device Data Usage
Retrieve the aggregate network data usage statistics of a specific device.
List Device App Data Usage
Retrieve per-app network data usage statistics for a specific device.
List Organizational Units
List all Organizational Units (OUs) for a domain in the Hexnode UEM console.
List Domains
List the directory domains configured in the Hexnode portal.
List Policies
List all policies configured in the Hexnode portal.
Retrieve User Group Details
Retrieve the full details of a single user group by ID.
Retrieve User Details
Retrieve the full details of a single user by ID.
Update Web App
Update a web app in the Hexnode app repository.
Set Friendly Name
Set the console friendly name of one or more devices.
Sync Local Accounts
Sync local user accounts on targeted devices with the Hexnode console.
Set Device Password
Set the device password on Android devices enrolled in Android Enterprise.
Remove App
Remove an application from Hexnode and from devices it was deployed to via policy.
Install Applications
Install applications on targeted users, user groups, devices, or device groups.
Uninstall Applications
Uninstall applications from targeted users, user groups, devices, or device groups.
Clear App Data
Clear the local data of specified apps on Android Enterprise and Samsung Knox devices.
Request Application Feedback
Request app feedback from Android Enterprise devices.
Enable Kiosk
Lock targeted devices into kiosk mode with a single app or a set of apps.
Disable Kiosk
Take targeted devices out of kiosk mode.
Deploy Files
Copy previously uploaded files to a destination path on targeted macOS or Android devices.
Collect Hexnode App Logs
Collect Hexnode app logs from targeted devices.
Add/Remove Apps In App Catalog
Add or remove apps and app groups in an existing app catalog.
Add/Remove Apps In App Group
Add or remove applications in an existing app group.
Initiate Automation
Run one or more existing automations immediately against target devices, users, groups, domains or OUs.
Add/Remove Devices In Device Group
Add or remove enrolled devices in an existing device group.
Edit Device Attributes
Edit attributes such as name, asset tag, department, notes, description and ownership for one or more devices.
Generate Presigned Upload URL
Generate a time-limited Amazon S3 presigned upload URL and file UUID to start a file upload.
Verify File Upload To Amazon S3
Verify a file was uploaded to Amazon S3 and create its file catalog entry.
Associate Policy
Associate one or more policies with devices, users, user groups, or device groups.
Change Device Owner
Reassign one or more devices to a different user.
Change Device Ownership
Set the ownership type (personal or corporate) of devices and device groups.
Rename Device
Rename supervised iOS and Apple TV devices at the OS level.
Broadcast Message
Display a broadcast message on devices, users, user groups, or device groups.
Enable Personal Hotspot
Enable personal hotspot on targeted iOS devices.
Disable Personal Hotspot
Disable personal hotspot on targeted iOS devices.
Join AD Domain
Join targeted devices to an Active Directory domain.
Unjoin AD Domain
Remove targeted devices from their Active Directory domain.
Edit Policy
Update an existing policy's settings or targets.
Archive Policy
Archive a policy and dissociate it from all devices.
Scan Device
Trigger a remote scan to refresh device inventory and status in Hexnode.
Scan Location
Request the current location of the targeted devices.
Lock Devices
Remotely lock the targeted devices, with an optional lock screen message and phone number.
Clear Passcode
Remove the passcode from the targeted devices.
Enable Lost Mode
Enable Lost Mode on supervised iOS, Windows and Android devices that are lost or stolen.
Disable Lost Mode
Disable Lost Mode on supervised iOS devices.
Disenroll Devices
Disenroll the targeted devices from Hexnode management.
Mark Devices As Disenrolled
Mark the targeted devices as disenrolled in the Hexnode portal.
Power Off Devices
Remotely power off the targeted devices.
Restart Devices
Remotely restart the targeted devices.
Remote Ring
Make Android and supervised iOS devices ring remotely, with an optional message.
Clear Activation Lock
Clear the activation lock on macOS and supervised iOS devices.
Add/Remove Users In User Group
Add or remove specific users in a user group.
Edit User
Update an existing user's name, email, phone number or password.

Set Up Your Hexnode MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Hexnode in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop-

JSON

Claude Desktop Docs

{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Platform Resources

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What Hundreds of Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.

14 min read

Hexnode MCP Server FAQ

Does StackOne have a Hexnode MCP server?

Yes. StackOne offers a hosted Hexnode MCP server with 96 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.

Hexnode MCP server vs direct API integration — what's the difference?

A Hexnode MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Hexnode. A Hexnode MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Hexnode at runtime. StackOne provides both.

How does Hexnode authentication work for AI agents?

Hexnode authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Hexnode account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.

Are Hexnode MCP tools vulnerable to prompt injection?

Yes — Hexnode MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.

What is the context bloat of a Hexnode agent and how do I avoid it?

Context bloat happens when Hexnode tool schemas and API responses eat your Hexnode agent's memory, preventing it from reasoning effectively. A single Hexnode query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.

Can I limit which actions my Hexnode agent can access?

Yes — you can limit which actions your Hexnode agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.

Can I create custom agent actions for my Hexnode MCP server?

Yes — you can create custom agent actions for your Hexnode MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Hexnode's API, generate production-ready connector YAML, test against the live API, and validate before you ship.

When should I NOT use a Hexnode MCP server?

Skip a Hexnode MCP server if your integration is purely software-to-software — direct Hexnode API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Hexnode actions at runtime.

What AI frameworks and AI clients does the StackOne Hexnode MCP server support?

The StackOne Hexnode MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo

Hexnode MCP Serverfor AI Agents