Connect
Optimize
Secure
Live 61 Actions
Loket MCP Server
for AI Agents
Connect your AI agent to StackOne's Loket MCP server and give it 61 MCP tools out of the box. Auth, tool execution, and security all managed.
Loket MCP Server
Built by 
StackOne
StackOne 
Coverage
61 Agent Actions
Create, read, update, and delete across Loket — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Loket MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Loket tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Loket call.
Tools Discovery →What is the Loket MCP Server?
A Loket MCP server lets AI agents read and write Loket data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Loket MCP server ships with 61 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Loket MCP Tools
Every action from Loket's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Employers
- List Employers
Retrieve a list of employers accessible to the authenticated user.
- Update Employer
Update the details of an existing employer.
Employments
- Create Employment
Create a new employment record for an existing employee.
- Update Employment
Update the type and fields of an existing employment.
Concept Employees
- Create Concept Employee
Create a new concept employee for a specific employer.
- Update Concept Employee
Update the details of an existing concept employee.
- Delete Concept Employee
Delete a concept employee record.
Payroll Period Datas
- Create Payroll Period Data
Create a new payroll period data record for a specific employment.
- Update Payroll Period Data
Insert or update payroll period data records for a specific employment.
Leaves
- Create Leave
Create a new leave record for a specific employment.
- Update Leave
Update the details of an existing leave record.
- Delete Leave
Delete a specific leave record by its unique identifier.
Leave Requests
- Create Leave Request
Create a new leave request for a specific employment.
- Update Leave Request
Update the details of an existing leave request.
Absences
- Create Absence
Create a new absence record for a specific employee.
- Update Absence
Update the details of an existing absence record.
- Delete Absence
Delete a specific absence record by its unique identifier.
Wages
- Create Wage
Create a new wage record for a specific employment.
- Update Wage
Update the details of an existing wage record.
- Delete Wage
Delete a specific wage record by its unique identifier.
Working Hours
- Create Working Hours
Create a new working hours record for a specific employment.
- Update Working Hours
Update the details of an existing working hours record.
- Delete Working Hours
Delete a specific working hours record by its unique identifier.
Departments
- Create Department
Create a new department for a specific employer.
- Update Department
Update the details of an existing department.
Other (36)
- Get Employer By ID
Retrieve details of a specific employer by their unique identifier.
- List Employees By Employer
Retrieve a list of employees belonging to a specific employer.
- Get Employee By ID
Retrieve the full details of a specific employee by their unique identifier.
- List Employments By Employer
Retrieve a list of all employments for a specific employer.
- List Employments By Employee
Retrieve a list of all employments for a specific employee.
- Get Employment By ID
Retrieve the full details of a specific employment by its unique identifier.
- List Concept Employees By Employer
Retrieve a list of concept employees for a specific employer.
- Get Concept Employee By ID
Retrieve the full details of a specific concept employee by their unique identifier.
- List Payroll Administrations By Employer
Retrieve a list of payroll administrations for a specific employer.
- List Payroll Runs By Administration
Retrieve a list of payroll runs for a specific payroll administration.
- Get Payroll Run By ID
Retrieve the details of a specific payroll run by its ID.
- List Payroll Period Data By Employment
Retrieve a list of payroll period data records for a specific employment.
- List Payslips By Employment
Retrieve a list of payslips for a specific employment.
- Get Payslip By Payroll Run
Download the payslip for a specific employment and payroll run.
- List Leave By Employment
Retrieve all leave records for a specific employment.
- Get Leave By ID
Retrieve a specific leave record by its unique identifier.
- List Leave Requests By Employment
Retrieve all leave requests for a specific employment.
- List Leave Requests By Employer
Retrieve all leave requests for the employees of a specific employer.
- Get Leave Request By ID
Retrieve details of a specific leave request by its unique identifier.
- List Leave Policies By Employer
Retrieve all leave policies configured for a specific employer.
- Get Leave Policy By ID
Retrieve a single leave policy by its ID.
- List Absences By Employee
Retrieve all absence records for a specific employee.
- Get Absence By ID
Retrieve details of a specific absence record by its unique identifier.
- List Wages By Employment
Retrieve all wage records for a specific employment.
- Get Wage By ID
Retrieve details of a specific wage record by its unique identifier.
- List Working Hours By Employment
Retrieve all working hours records for a specific employment.
- Get Working Hours By ID
Retrieve details of a specific working hours record by its unique identifier.
- List Organizational Entities By Employment
Retrieve all organizational entity records for a specific employment.
- Get Organizational Entity By ID
Retrieve details of a specific organizational entity record by its unique identifier.
- List Departments By Employer
Retrieve all departments for a specific employer.
- Get Department By ID
Retrieve details of a specific department by its unique identifier.
- Get Current User
Retrieve the profile of the currently authenticated user.
- Update Employee
Update the details of an existing employee.
- Terminate Employment
Terminate an active employment record.
- Reinstate Employment
Undo the termination of a previously terminated employment.
- Convert Concept Employee To Employee
Convert a concept employee to a full active employee.
Loket AI Agent Use Cases
Connect your AI agent to Loket and help your team scale the HR operations they run by hand today.
Employee Onboarding
Use StackOne to connect your AI agent to your HRIS, identity management, and LMS to automate employee onboarding.
View HR Policy Q&A Chatbot
Use StackOne to connect your AI agent to your HRIS, knowledge base, and messaging tools to automate HR policy Q&A.
View Employee Offboarding
Use StackOne to connect your AI agent to your HRIS, identity management, and ITSM to automate employee offboarding and deprovisioning.
ViewSet Up Your Loket MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Loket in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Check More hr-workforce MCP Servers
Phenom
87+ actions
Employment Hero
51+ actions
ADP Workforce Now
50+ actions
ClayHR
50+ actions
KiwiHR
44+ actions
CatalystOne
36+ actions
PrismHR
30+ actions
Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What 200+ Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building 200+ connectors that serve both, here's when each approach wins.
14 min read
Loket MCP Server FAQ
Does StackOne have a Loket MCP server?
Yes. StackOne offers a hosted Loket MCP server with 61 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Loket MCP server vs direct API integration — what's the difference?
A Loket MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Loket. A Loket MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Loket at runtime. StackOne provides both.
How does Loket authentication work for AI agents?
Loket authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Loket account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Loket MCP tools vulnerable to prompt injection?
Yes — Loket MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Loket agent and how do I avoid it?
Context bloat happens when Loket tool schemas and API responses eat your Loket agent's memory, preventing it from reasoning effectively. A single Loket query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Loket agent can access?
Yes — you can limit which actions your Loket agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Loket MCP server?
Yes — you can create custom agent actions for your Loket MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Loket's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Loket MCP server?
Skip a Loket MCP server if your integration is purely software-to-software — direct Loket API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Loket actions at runtime.
What AI frameworks and AI clients does the StackOne Loket MCP server support?
The StackOne Loket MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.