KnowBe4 MCP Server
for AI Agents
Connect your AI agent to StackOne's KnowBe4 MCP server and give it 259 MCP tools out of the box. Auth, tool execution, and security all managed.
Coverage
259 Agent Actions
Agents can read, write and delete in KnowBe4. Extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your KnowBe4 MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →Security
Agent Protection
Every KnowBe4 tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.
Prompt Injection Defense →Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every KnowBe4 call.
Tools Discovery →What is the KnowBe4 MCP Server?
A KnowBe4 MCP server lets AI agents read and write KnowBe4 data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's KnowBe4 MCP server ships with 259 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All KnowBe4 MCP Tools
Every StackOne action for KnowBe4, ready for your agent. Read, write and delete, scoped to exactly what you need.
Allowed Domains
- Create Allowed Domain
Create a new allowed domain.
- List Allowed Domains
List all allowed domains for an account.
- Delete Allowed Domain
Delete an allowed domain.
API Tokens
- Create API Token
Create an API token.
- List API Tokens
Paginated API tokens.
- Get API Token
An API token.
- Delete API Token
Delete an API Token.
Callback Phishing Greeting Templates
- Create Callback Phishing Greeting Template
Create a user callback phishing greeting template.
- Copy Callback Phishing Greeting Templates
Copy a set of callback phishing greeting templates into the current account.
- List Callback Phishing Greeting Templates
List all callback phishing greeting templates.
- Get Callback Phishing Greeting Template
Get a callback phishing greeting template by ID.
- Delete Callback Phishing Greeting Templates
Delete a callback phishing greeting template.
Callback Phishing Greeting Template Topics
- Add Callback Phishing Greeting Template Topics
Add topics to callback phishing greeting templates.
- Remove Callback Phishing Greeting Template Topics
Remove topics from callback phishing greeting templates.
Callback Phishing Response Templates
- Create Callback Phishing Response Template
Create a user callback phishing response template.
- Copy Callback Phishing Response Templates
Copy a set of callback phishing response templates into the current account.
- List Callback Phishing Response Templates
List all callback phishing response templates.
- Get Callback Phishing Response Template
Get a callback phishing response template by ID.
- Delete Callback Phishing Response Templates
Delete a callback phishing response template.
Callback Phishing Response Template Topics
- Add Callback Phishing Response Template Topics
Add topics to callback phishing response templates.
- Remove Callback Phishing Response Template Topics
Remove topics from callback phishing response templates.
Callback Phishing Templates
- Create Callback Phishing Template
Create a user callback phishing template.
- Copy Callback Phishing Templates
Copy a set of callback phishing templates into the current account.
- List Callback Phishing Templates
List all callback phishing templates.
- Get Callback Phishing Template
Get a callback phishing email template by ID.
- Update Callback Phishing Template
Update a callback phishing template.
DKIM Configs
- Create DKIM Config
Create a DKIM configuration.
- Get DKIM Config
Get the specified email type DKIM configuration for the current account.
- Delete DKIM Config
Delete a DKIM configuration.
DMI Configs
- Create DMI Config
Create a DMI configuration.
- List DMI Configs
List all DMI configurations for the current account.
- Get DMI Config
Get a DMI configuration for the current account.
- Delete DMI Config
Delete a DMI configuration.
Enrollments
- List Enrollments
List all enrollments for an account.
- Get Enrollment
Get an enrollment by ID.
- Update Enrollments
Update an enrollment.
Groups
- Create Group
Create a group.
- Clone Group
Clone a group.
- List Groups
List KnowBe4 groups with their type, status and security roles.
- Get Group
Get a KnowBe4 group by ID.
- Update Group
Update a group.
- Delete Groups
Delete groups.
Hosted Images
- Create Hosted Image
Create a hosted image.
- List Hosted Images
Get hosted images for an account.
- Get Hosted Image
Get a hosted_image for an account.
- Delete Hosted Image
Delete a hosted image.
Unified Groups
- List Unified Groups
List unified groups in KnowBe4.
- Get Unified Group
Get a unified KnowBe4 group by ID.
Unified Organizations
- List Unified Organizations
List unified organizations in KnowBe4.
- Get Unified Organization
Get the unified KnowBe4 organization by ID.
Unified Roles
- List Unified Roles
List unified roles in KnowBe4.
- Get Unified Role
Get a unified KnowBe4 role by ID.
Unified Users
- List Unified Users
List unified users in KnowBe4.
- Get Unified User
Get a unified KnowBe4 user by ID.
IP Ranges
- Create IP Range
Create an IP range for the account.
- List IP Ranges
List all IP ranges.
- Get IP Range
Get an IP range.
- Delete IP Range
Delete a IP range for the account.
Landing Domains
- List Landing Domains
List all landing domains.
- Get Landing Domain
Get a landing domain.
Landing Pages
- Create Landing Page
Create a landing page in the current context.
- Import Landing Pages
Import multiple templates based on a JSON format.
- List Landing Pages
List all landing pages.
- Get Landing Page
Get a landing page by ID or UUID.
Landing Page Categorys
- Create Landing Page Category
Create a landing page category in the current account.
- Delete Landing Page Category
Delete a landing page category.
LDAP Sync Reports
- List LDAP Sync Reports
List all LDAP sync reports for an account.
- Get LDAP Sync Report
Fetch a LDAP sync report.
Messages Templates
- Create Messages Template
Create a messages template in the current account.
- Clone Messages Template
Clone a messages template within the current account.
Notification Templates
- Create Notification Template
Create a notification template in the current account.
- Clone Notification Template
Clone a notification template within the current account, or within the partner for a partner admin.
- Import Notification Templates
Import multiple notification templates based on a JSON format.
- List Notification Templates
List notification templates.
- Get Notification Template
Get a notification template by ID.
Notification Template Categorys
- Create Notification Template Category
Create a notification template category in the current account.
- Update Notification Template Category
Update a notification template category in the current account.
- Delete Notification Template Category
Delete a notification template category.
Phish Domains
- List Phish Domains
List all phish domains.
- Get Phish Domain
Get a phish domain.
- Delete Phish Domain
Delete a phish domain for the account.
Phishing Campaigns
- Create Phishing Campaign
Create a phishing campaign in the current account.
- List Phishing Campaigns
List all phishing campaigns.
- Get Phishing Campaign
Get a campaign by ID.
- Delete Phishing Campaign
Delete a phishing campaign.
Phishing Campaign Recipients
- List Phishing Campaign Recipients
List all the campaign recipients in a campaign run.
- Get Phishing Campaign Recipient
Get a campaign recipient by ID.
- Update Phishing Campaign Recipient
Update a phishing campaign recipient.
Phishing Campaign Runs
- List Phishing Campaign Runs
List all campaign runs in account.
- Get Phishing Campaign Run
Get a campaign run by ID.
- Delete Phishing Campaign Run
Delete a phishing campaign run.
Phishing Templates
- Create Phishing Template
Create a phishing template in the current account.
- Clone Phishing Template
Clone a user-owned phishing template within the current account, or a managed one within the partner for a partner admin.
- Copy Phishing Templates
Copy a set of phishing templates into the current account.
- Import Phishing Templates
Import multiple phishing templates based on a JSON format.
- List Phishing Templates
List email templates.
- Get Phishing Template
Get a phishing campaign by ID.
Phishing Template Categorys
- Create Phishing Template Category
Create a phishing template category in the current account.
- Get Phishing Template Category
Get a phishing template category by ID.
- Delete Phishing Template Category
Delete a phishing template category.
Physical QR Campaigns
- Create Physical QR Campaign
Create a physical QR code campaign.
- List Physical QR Campaigns
List all physical QR code campaigns.
- Get Physical QR Campaign
Get a physical QR code campaign by ID.
- Delete Physical QR Campaign
Delete a physical QR code campaign.
Physical QR Campaign Locations
- Create Physical QR Campaign Location
Create a physical QR code campaign location.
- Get Physical QR Campaign Location
Get a physical QR code campaign by ID.
- Delete Physical QR Campaign Location
Delete a physical QR code campaign location.
Physical QR Templates
- Create Physical QR Template
Create a user physical QR code template.
- Copy Physical QR Templates
Copy a set of Physical QR templates into the current account.
- List Physical QR Templates
List all physical QR code templates.
- Get Physical QR Template
Get a physical QR code template by ID.
Physical QR Template Topics
- Add Physical QR Template Topics
Add topics to physical QR templates.
- Remove Physical QR Template Topics
Remove topics from physical QR templates.
Policys
- Create Policy
Create a policy.
- Get Policy
Get a policy.
- Update Policy
Update a policy.
- Delete Policy
Soft delete a policy.
Report Categorys
- Create Report Category
Create a saved report category.
- Delete Report Category
Delete a saved report category.
Reporting Training Enrollments
- Get Reporting Training Enrollment
Get a specific Training Enrollment from your KnowBe4 account with the Reporting API.
- Get Reporting Training Enrollments
List all Training Enrollments in your KnowBe4 account with the Reporting API.
Reporting Groups
- Get Reporting Group
Get a specific group in your KnowBe4 account, based on the provided group identifier (group_id) with the Reporting API.
- Get Reporting Groups
List all groups in your KnowBe4 account with the Reporting API.
Reporting Phishing Campaigns
- Get Reporting Phishing Campaign
Get data from a specific phishing campaign, based on the provided campaign identifier (campaign_id) with the Reporting API.
- Get Reporting Phishing Campaigns
Get data from all the phishing campaigns in your account with the Reporting API.
Reporting Phishing Security Tests
- Get Reporting Phishing Security Test
Get data from a specific phishing security test, based on the provided phishing security test identifier (pst_id) with the Reporting API.
- Get Reporting Phishing Security Tests
List all phishing security tests in your account with the Reporting API.
Reporting Security Test Recipients
- Get Reporting Security Test Recipient
Get details about a specific user's phishing security test results, based on the provided phishing security test identifier (pst_id) and recipient identifier (recipient_id) with the Reporting API.
- Get Reporting Security Test Recipients
List all the recipients (users) that were part of a specific phishing security test, based on the provided phishing security test identifier (pst_id) with the Reporting API.
Reporting Store Purchases
- Get Reporting Store Purchase
Get a specific Store Purchase from your KnowBe4 account with the Reporting API.
- Get Reporting Store Purchases
List all Store Purchases in your KnowBe4 account with the Reporting API.
Reporting Training Campaigns
- Get Reporting Training Campaign
Get a specific Training Campaign from your KnowBe4 account with the Reporting API.
- Get Reporting Training Campaigns
List all training campaigns in your account with the Reporting API.
Reporting Users
- Get Reporting User
Get a specific user based on the provided user identifier (user_id) with the Reporting API.
- Get Reporting Users
List all users in your KnowBe4 account with the Reporting API.
Security Roles
- Create Security Role
Create Security Role.
- List Security Roles
List KnowBe4 security roles with their permission levels.
- Get Security Role
Get a KnowBe4 security role by ID.
- Delete Security Role
Delete a Security Role.
Second Chance Devices
- List Second Chance Devices
List all Second Chance devices for an account.
- Get Second Chance Device
Get a Second Chance device for an account.
Second Chance Urls
- List Second Chance Urls
List all Second Chance URLs for an account.
- Get Second Chance Url
Get a Second Chance URL for an account.
Store Purchases
- List Store Purchases
List all your store purchases.
- Get Store Purchase
Get a store purchase.
- Update Store Purchase
Update store purchase from the current account.
- Remove Store Purchase
Remove store purchase from the current account.
Template Topics
- Create Template Topic
Create a phishing template topic in the current account.
- Delete Template Topic
Delete a phishing template topic.
Training Campaigns
- Create Training Campaign
Create a training campaign in the current account.
- List Training Campaigns
List all training campaign.
- Get Training Campaign
Get a training campaign by ID.
- Delete Training Campaigns
Delete training campaigns.
Training Campaign Users
- Add Training Campaign User
Add a user to a training campaign.
- Remove Training Campaign User
Remove a user from a training campaign.
USB Campaigns
- Create USB Campaign
Create a USB drive test.
- List USB Campaigns
List all USB drive test campaigns.
- Get USB Campaign
Get a USB drive test by ID.
User Event API Keys
- Create User Event API Key
Create a User Event API key.
- Delete User Event API Key
Delete a User Event API key.
Events
- List Events
List all events in your KnowBe4 account with the User Event API.
- Batch Delete Events
Delete multiple events from your KnowBe4 account with the User Event API.
- Delete Event
Delete a single event based on the ID supplied with the User Event API.
Post New Events
- Post New Event
Add one event to a user's timeline with the User Event API.
- Post New Events
Add several user events in one call with the User Event API.
Event Types
- Get Event Types
List all event types in your KnowBe4 account with the User Event API.
- Delete Event Type
Delete a single event type based on the ID supplied with the User Event API.
Users
- Create User
Create a user.
- List Users
List KnowBe4 users with their role, security roles and sign-in details.
- Get User
Get a KnowBe4 user by ID.
- Delete Users
Permanently delete a collection of non-admin users.
Email Alias
- Create Email Alias
Create an email alias for the user.
- Delete Email Alias
Delete an email alias.
Other (86)
- Create Account PAB Instance
Create a new PAB instance for the account.
- Create Custom Phish Domain
Create a phish domain for the account.
- Add Phishing Template Topics
Add topics to phishing templates.
- Add Users To Groups
Add a collections of users to a collection of classic groups.
- List Assessment Domains
Get assessment domains.
- List Assessment Industry Benchmarks
List of assessment benchmarking data for industries.
- Get Assessment Results
Get results for an assessment.
- List Audit Log Object Search
Get search.
- List Audit Logs
Get paginated audit logs for the account.
- Get Audit Log Extended
Get an audit log by ID.
- List Industries
List all industries.
- List Industry Benchmarks
List of benchmarking data for industries.
- List Callback Phishing Greeting Template Languages
List all callback phishing greeting template languages.
- List Callback Phishing Response Template Languages
List all callback phishing response template languages.
- Get Environment Questionnaire
Get an environment questionnaire by its parent.
- Get Environment Survey Questionnaire
Get an environment survey questionnaire by its parent.
- List Group Risk Score Histories
Get Risk Score history for a group.
- List Landing Page Categories
List all landing page categories.
- List LDAP Sync Report Items
List all LDAP sync reports items for a sync report.
- List Notification Template Categories
List all notification template categories.
- Get Account
Get the KnowBe4 account the token belongs to.
- List Uas Campaigns
List all UAS campaigns (standard, callback, and vishing).
- List Phishing Campaign Recipient Failures
Get phishing failures for a campaign recipient or campaign run.
- List Phishing Template Categories
List all phishing template categories.
- Get Template Category
Get a phishing template category by ID.
- List Physical QR Campaign Results
List all physical QR code campaign locations for a campaign.
- List Policies
List all your policies.
- List Report Permission Groups
Get account groups with access to a given report.
- List Report Categories
List all report categories for an account.
- Get Reporting Account Risk Score History
Get your Knowbe4 account risk score history with the Reporting API.
- Get Reporting Group Members
List all users who are members of a specific group with the Reporting API.
- Get Reporting Group Risk Score History
Get risk score history for a specific group in your KnowBe4 account, based on the provided group identifier (group_id) with the Reporting API.
- Get Reporting Campaign Security Tests
List all phishing security tests from a specific phishing campaign, based on the provided phishing campaign identifier (campaign_id) with the Reporting API.
- Get Reporting Policies
List all uploaded policies in your KnowBe4 account with the Reporting API.
- Get Reporting Policy
Get a specific uploaded policy from your KnowBe4 account with the Reporting API.
- Get Reporting User Risk Score History
Get risk score history for a specific user based on the provided user identifier (user_id) with the Reporting API.
- List Second Chance Domains
List all Second Chance No Prompt Domains for an account.
- List Second Chance Post Actions
List all Second Chance post actions for an account.
- Get Second Chance Overview
The stats and info for the Second Change Overview tab.
- Get Second Chance Settings
The data for the Second Chance Settings tab.
- Get Second Chance User
Get a Second Chance user for an account.
- Get User By Email
Get a single user by email.
- List User Risk Score Histories
Get the Risk Score history for a user.
- Get User Timeline
The user timeline.
- Delete Callback Phishing Audio File
Delete the audio file for a callback phishing audio template message.
- Remove Group Users
Remove users from a group.
- Delete Notification Template Family
Archive every language version of a notification template's translation family.
- Delete Account PAB Icon
Delete the PAB icon for a Phish Alert setting for the account.
- Remove Phishing Campaign Recipient Reply
Delete the content associated with a reply event.
- Remove Users From Group
Remove a collections of users from a specific group.
- Clear Environment Questionnaire
Clear the environment questionnaire.
- Archive Environment Survey Assessment
Archive the environment survey assessment.
- Clear Environment Survey Questionnaire
Clear the environment questionnaire.
- Archive Group Users
Archive users in a group.
- Archive Groups
Archive groups.
- Save Group Criteria
Save Smart Group criteria.
- Hide Notification Template
Hide or shows a notification template from an account.
- Hide Notification Template Category
Hide or shows a notification template category from an account.
- Deactivate Phishing Campaign
Deactivate or activate a phishing campaign.
- Edit Phishing Campaign
Edit a phishing campaign in the current account.
- Hide Phishing Campaign From Reports
Hide or show a phishing campaign from reports.
- Convert Phishing Campaign Recipient
Converts an ignored phishing failure to an actual phishing failure.
- Hide Centralized Phishing Template
Hide or unhides a centralized phishing template from an account.
- Hide Phishing Template
Hide or unhides a phishing template from an account.
- Hide Phishing Template Category
Hide a phishing template category from an account.
- End Physical QR Campaign
Finishes a physical QR code campaign.
- Bulk Delete Second Chance Domains
Delete domains from Second Chance.
- Exclude Template Topic
Exclude a phishing template topic in the current account.
- Close Training Campaign
Mark a training campaign as closed.
- Edit Training Campaign
Edit a training campaign in the current account.
- Extend Training Campaign Due Date
Extend users enrollment due dates.
- Destroy USB Campaign
Destroy a USB drive test.
- End USB Campaign
End a USB drive test.
- Show Event By ID
Get all of the available data about a specific event based on the ID supplied with the User Event API.
- Post New Event Type
Create a new event type with the User Event API.
- Show Event Type By ID
Get all of the available data about a specific event type based on the ID supplied with the User Event API.
- Show Specific Status
Get the status of a specific event based on the ID supplied with the User Event API.
- Show Statuses
Get all of the event statuses in your KnowBe4 account with the User Event API.
- Force SCIM Sync
Force a new SCIM sync.
- Archive Users
Archive a collection of users.
- Disable User MFA
Deactivate MFA on User.
- Edit User
Edit a user.
- Enable User MFA
Enables MFA on the user (if valid).
- Grant Users Admin
Grant admin priviledges to a collection of users.
- Quick Import Users
Import multiple users by email address.
- Unarchive Users
Unarchive a collection of users.
Set Up Your KnowBe4 MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to KnowBe4 in under 10 lines of code.
Agent Frameworks
{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Platform Resources
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What Hundreds of Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.
14 min read
KnowBe4 MCP Server FAQ
Does StackOne have a KnowBe4 MCP server?
KnowBe4 MCP server vs direct API integration: what's the difference?
How does KnowBe4 authentication work for AI agents?
origin_owner_id.Are KnowBe4 MCP tools vulnerable to prompt injection?
What is the context bloat of a KnowBe4 agent and how do I avoid it?
Can I limit which actions my KnowBe4 agent can access?
Can I create custom agent actions for my KnowBe4 MCP server?
When should I NOT use a KnowBe4 MCP server?
What AI frameworks and AI clients does the StackOne KnowBe4 MCP server support?
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.