Connect
Optimize
Secure
Liferay MCP Server
for AI Agents
Production-ready Liferay MCP server with 92 extensible actions — plus built-in authentication, security, and optimized execution.
Liferay MCP Server
Built by 
StackOne
StackOne 
Coverage
92 Agent Actions
Create, read, update, and delete across Liferay — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Liferay MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Liferay tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Liferay call.
Tools Discovery →What is the Liferay MCP Server?
A Liferay MCP server lets AI agents read and write Liferay data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Liferay MCP server ships with 92 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Liferay MCP Tools and Actions
Every action from Liferay's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Accounts
- Create Account
Create a new business account in Liferay
- List Accounts
Retrieve a paginated list of accounts from Liferay
- Get Account
Retrieve an account by ID
- Update Account
Update an existing business account
- Delete Account
Delete an account by ID
Blog Postings
- Create Blog Posting
Create a new blog posting for a site
- List Blog Postings
Retrieve a paginated list of blog postings for a site
- Get Blog Posting
Retrieve a single blog posting by ID
- Update Blog Posting
Update an existing blog posting
- Delete Blog Posting
Delete a blog posting by ID
Blog Posting Comments
- Create Blog Posting Comment
Add a comment to a blog posting
- List Blog Posting Comments
Retrieve comments on a blog posting
Structured Content Comments
- Create Structured Content Comment
Add a comment to a structured content article
- List Structured Content Comments
List comments on a structured content article
Document Comments
- Create Document Comment
Add a comment to a document
- List Document Comments
Retrieve comments on a document
Comments
- Get Comment
Retrieve a comment by ID
- Delete Comment
Delete a comment by ID
Content Structures
- List Content Structures
Retrieve a paginated list of content structures (templates) for a site
- Get Content Structure
Retrieve a content structure by ID
Document Folders
- Create Document Folder
Create a new document folder in a site
- List Document Folders
Retrieve a paginated list of document folders for a site
- Get Document Folder
Retrieve a document folder by ID
- Update Document Folder
Update an existing document folder
- Delete Document Folder
Delete a document folder by ID
Documents
- Create Document
Upload a new document to a site
- List Documents
Retrieve a paginated list of documents for a site
- Get Document
Retrieve a document by ID
- Update Document
Replace a document's file and optionally update metadata
- Delete Document
Delete a document by ID
Organizations
- Create Organization
Create a new organization in Liferay
- List Organizations
Retrieve a paginated list of organizations from Liferay
- Get Organization
Retrieve an organization by ID
- Update Organization
Update an existing organization
- Delete Organization
Delete an organization by ID
Roles
- Create Role
Create a new role in Liferay
- List Roles
Retrieve a paginated list of roles from Liferay
- Get Role
Retrieve a role by ID
- Update Role
Update an existing role
- Delete Role
Delete a role by ID
Structured Content Folders
- Create Structured Content Folder
Create a new folder for organizing structured content
- List Structured Content Folders
Retrieve a paginated list of structured content folders for a site
- Get Structured Content Folder
Retrieve a structured content folder by ID
- Update Structured Content Folder
Update an existing structured content folder
- Delete Structured Content Folder
Delete a structured content folder by ID
Structured Contents
- Create Structured Content
Create a new structured content article (web content) in a site
- List Structured Contents
Retrieve a paginated list of structured content (web content) for a site
- Get Structured Content
Retrieve a structured content article by ID
- Update Structured Content
Update an existing structured content article
- Delete Structured Content
Delete a structured content article by ID
User Groups
- Create User Group
Create a new user group in Liferay
- List User Groups
Retrieve a paginated list of user groups from Liferay
- Get User Group
Retrieve a user group by ID
- Update User Group
Update an existing user group
- Delete User Group
Delete a user group by ID
User Accounts
- Create User Account
Create a new user account in Liferay
- List User Accounts
Retrieve a paginated list of user accounts from Liferay
- Get User Account
Retrieve a single user account by ID
- Update User Account
Update an existing user account
- Delete User Account
Delete a user account by ID
Other (32)
- Create Comment Reply
Reply to a comment
- Create Document In Folder
Upload a new document to a specific folder
- Add Users To User Group
Add users to a user group
- Get Account By External Reference Code
Retrieve an account by external reference code
- List Account User Accounts
List users assigned to an account
- List Account Roles
List account-scoped roles on an account
- List Comment Replies
Retrieve replies to a comment
- List Document Folder Subfolders
List subfolders of a document folder
- List Document Folder Documents
List documents inside a document folder
- List Organization User Accounts
List users belonging to an organization
- List Child Organizations
List child organizations under a parent organization
- Get Role By External Reference Code
Retrieve a role by external reference code
- Get Site
Retrieve a site by ID
- Get Site By Friendly URL Path
Retrieve a site by its human-readable URL path
- List Site User Accounts
List users who are members of a site
- List My Sites
Retrieve all sites the current user has access to
- List Structured Content Folder Subfolders
List subfolders of a structured content folder
- List Structured Content Folder Contents
List structured content articles inside a folder
- List Site Taxonomy Vocabularies
Retrieve taxonomy vocabularies defined in a site
- List Taxonomy Categories
List taxonomy categories under a taxonomy vocabulary
- List User Group Members
List users belonging to a user group
- Get User Account By Email Address
Retrieve a user account by email address
- List User Accounts By Status
List users filtered by status
- List User Groups For User
List the user groups that a specific user belongs to. Requires a userAccountId — use list_user_accounts or get_user_account_by_email_address first to obtain the user's numeric ID.
- Get My User Account
Retrieve the currently authenticated user's account
- Remove User From Account
Remove a user from an account by email address
- Remove Users From User Group
Remove users from a user group
- Assign User To Account
Assign an existing user to an account by email address
- Assign Account Role To User
Assign an account-scoped role to a user
- Replace Comment
Replace a comment's contents (full replacement)
- Assign Role To User
Associate a role with a user account
- Unassign Role From User
Remove a role from a user account
Set Up Your Liferay MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Liferay in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More Documents & Knowledge MCP Servers
Confluence
133+ actions
Lokalise
101+ actions
ClickUp
92+ actions
Discourse
67+ actions
Google Drive
47+ actions
Figma
44+ actions
JotForm
44+ actions
Liferay MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
Liferay MCP Server FAQ
Liferay MCP server vs direct API integration — what's the difference?
A Liferay MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Liferay. A Liferay MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Liferay at runtime. StackOne provides both.
How does Liferay authentication work for AI agents?
Liferay authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Liferay account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Liferay MCP tools vulnerable to prompt injection?
Yes — Liferay MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Liferay agent and how do I avoid it?
Context bloat happens when Liferay tool schemas and API responses eat your Liferay agent's memory, preventing it from reasoning effectively. A single Liferay query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Liferay agent can access?
Yes — you can limit which actions your Liferay agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Liferay MCP server?
Yes — you can create custom agent actions for your Liferay MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Liferay's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Liferay MCP server?
Skip a Liferay MCP server if your integration is purely software-to-software — direct Liferay API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Liferay actions at runtime.
What AI frameworks and AI clients does the StackOne Liferay MCP server support?
The StackOne Liferay MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.