JupiterOne MCP Server
for AI Agents
Connect your AI agent to StackOne's JupiterOne MCP server and give it 55 MCP tools out of the box. Auth, tool execution, and security all managed.
StackOne 
Coverage
55 Agent Actions
Create, read, update, and delete across JupiterOne — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your JupiterOne MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every JupiterOne tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every JupiterOne call.
Tools Discovery →What is the JupiterOne MCP Server?
A JupiterOne MCP server lets AI agents read and write JupiterOne data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's JupiterOne MCP server ships with 55 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All JupiterOne MCP Tools
Every action from JupiterOne's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Alert Rule Instances
- Get Alert Rule Instance
Fetch a single alert rule (question rule) instance by its ID.
- Delete Alert Rule Instance
Permanently delete an alert rule instance, whether it uses an inline or a referenced question.
Inline Question Alert Rules
- Create Inline Question Alert Rule
Create an alert rule whose J1QL query is defined inline on the rule itself.
- Update Inline Question Alert Rule
Update an existing alert rule whose J1QL query is defined inline on the rule itself.
Referenced Question Alert Rules
- Create Referenced Question Alert Rule
Create an alert rule that evaluates an existing saved question from the question library.
- Update Referenced Question Alert Rule
Update an existing alert rule that evaluates a saved question from the question library.
Entitys
- Create Entity
Create a new entity (graph vertex) in JupiterOne with a key, type, class and optional properties.
- Get Entity
Retrieve a single entity (vertex) and its properties by id or by a set of filters.
- Update Entity
Update the custom properties of an existing entity identified by its entity ID.
- Delete Entity
Delete an existing entity by its entity ID, either as a soft delete or a hard delete.
Relationships
- Create Relationship
Create a graph-edge relationship between two existing entities.
- Get Relationship
Retrieve a single relationship (edge) and its properties by id, label or a set of filters.
- Update Relationship
Update the endpoints and custom properties of an existing relationship by its relationship ID.
- Delete Relationship
Delete a relationship by its relationship ID, either as a soft delete or a hard delete.
An IAM Groups
- Create An IAM Group
Create a new IAM group, optionally with ABAC permissions and a query policy.
- Update An IAM Group
Update an existing IAM group's name, description, ABAC permissions or query policy.
Integration Instances
- Get Integration Instance
Retrieve a single JupiterOne integration instance (configuration) by its ID.
- Update Integration Instance
Update the polling schedule of an existing JupiterOne integration instance.
Integration Definitions
- Get Integration Definition
Retrieve a single JupiterOne integration definition by its ID.
- List Integration Definitions
List every integration definition available in the JupiterOne account.
Questions
- Create Question
Create a saved J1QL question with one or more named queries.
- List Questions
Search saved J1QL questions by free-text query.
- Update Question
Update an existing saved J1QL question by id.
- Delete Question
Permanently delete a saved J1QL question by id.
Rule Exemptions
- Create Rule Exemptions
Exempt one or more entities from a rule's evaluation results so they stop counting and stop triggering its actions.
- List Rule Exemptions
List the exemptions recorded against a specific alert rule, with cursor pagination.
Jobs
- Create Sync Job
Start a new JupiterOne synchronization job that entities and relationships can be uploaded into and finalized against.
- Get Sync Job
Retrieve the current status and upload counters for a JupiterOne synchronization job.
Other (27)
- Add A User To An IAM Group
Add a user to an IAM group by their account email address.
- Upload Sync Job Entities
Upload a batch of entities into an existing JupiterOne synchronization job.
- Upload Sync Job Relationships
Upload a batch of relationships into an existing JupiterOne synchronization job.
- Upload Sync Job Batch
Upload entities and relationships together into an existing JupiterOne synchronization job in a single request.
- Create API Token
Create a new account-level JupiterOne API token scoped by a JSON permissions policy.
- List Alert Instances
List the active, inactive or dismissed alert instances produced by your JupiterOne alert rules.
- Get Rule Evaluation Results CSV
Export the included or exempted result set of a single rule evaluation as a CSV.
- List Audit Events
Retrieve the audit log of user actions performed on the JupiterOne account.
- Get Entity Neighbors
Traverse the graph outward from an entity to a given depth and return the neighbouring vertices and edges.
- Get Entity Count
Count the entities matching a set of vertex filters.
- Get Type Counts
Count entities broken down by entity type for the given entity classes.
- Get All Entity Counts
Get a single account-wide inventory summary of entity counts by type and class.
- List IAM Groups
Retrieve all IAM groups in the account, with cursor pagination.
- List Users In An IAM Group
Retrieve the members of a specific IAM group, with cursor pagination.
- List Integration Jobs
List the integration job run history for a JupiterOne integration instance.
- Set A Permission On A Resource
Create or update a group's create/read/update/delete permission on a dashboard, integration or rule.
- Remove A User From An IAM Group
Remove a user from an IAM group by their account email address.
- Evaluate Alert Rule Instance
Trigger an on-demand evaluation of an alert rule outside its scheduled polling interval.
- Run J1QL Query
Run a J1QL query string against the account's entity and relationship graph and return the matching rows.
- Validate J1QL Queries
Validate the syntax of one or more J1QL query strings without executing them.
- Invoke Integration Instance
Trigger an immediate, ad-hoc run of a JupiterOne integration instance.
- Find Integration Definition
Look up a JupiterOne integration definition by its integration type.
- Evaluate Question
Run a saved J1QL question and return its computed answer.
- Check Rule Exemption Eligibility
Check whether the results of a specific rule evaluation can be exempted.
- Revoke Rule Exemptions
Revoke existing exemptions on a rule by group ID, by entity IDs, or by both.
- Finalize Sync Job
Finalize a JupiterOne synchronization job so its uploaded data is reconciled into the graph.
- Revoke API Token
Revoke an existing account-level JupiterOne API token by its ID, permanently invalidating it.
Set Up Your JupiterOne MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to JupiterOne in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Check More developer MCP Servers
266+ actions
234+ actions
124+ actions
119+ actions
102+ actions
87+ actions
71+ actions
Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What Hundreds of Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.
14 min read
JupiterOne MCP Server FAQ
Does StackOne have a JupiterOne MCP server?
JupiterOne MCP server vs direct API integration — what's the difference?
How does JupiterOne authentication work for AI agents?
origin_owner_id.Are JupiterOne MCP tools vulnerable to prompt injection?
What is the context bloat of a JupiterOne agent and how do I avoid it?
Can I limit which actions my JupiterOne agent can access?
Can I create custom agent actions for my JupiterOne MCP server?
When should I NOT use a JupiterOne MCP server?
What AI frameworks and AI clients does the StackOne JupiterOne MCP server support?
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.