Orca Security MCP Server
for AI Agents
Connect your AI agent to StackOne's Orca Security MCP server and give it 33 MCP tools out of the box. Auth, tool execution, and security all managed.
StackOne 
Coverage
33 Agent Actions
Agents can read, write and run operations in Orca Security. Extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Orca Security MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Orca Security tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Orca Security call.
Tools Discovery →What is the Orca Security MCP Server?
A Orca Security MCP server lets AI agents read and write Orca Security data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's Orca Security MCP server ships with 33 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Orca Security MCP Tools
Every StackOne action for Orca Security, ready for your agent. Read, write and run operations, scoped to exactly what you need.
Unified Organizations
- List Unified Organizations
List the Orca Security organization the connection belongs to.
- Get Unified Organization
Get the unified Orca Security organization of the connection by ID.
Unified Roles
- List Unified Roles
List the roles of an Orca Security organization.
- Get Unified Role
Get a unified Orca Security role by ID.
Unified Users
- List Unified Users
List unified users in an Orca Security organization.
- Get Unified User
Get a unified Orca Security user by ID.
Roles
- List Roles
List the roles of the Orca Security organization
- Get Role
Get the detail of a custom role in the Orca Security organization
Alerts
- List Alerts
List Orca security alerts, optionally filtered with a DSL expression and paged with a cursor.
- Get Alert
Retrieve a single Orca alert by its unique identifier.
- Query Alerts
Query Orca security alerts using the Orca DSL, with optional filters and cursor pagination.
Assets
- List Assets
List Orca cloud assets, optionally filtered and paged with an offset.
- Get Asset
Retrieve a single Orca cloud asset by its unique identifier.
- Query Assets
Query Orca cloud assets using the Orca DSL, with optional filters and cursor pagination.
Cloud Accounts
- List Cloud Accounts
List the cloud accounts connected to Orca, with filtering, sorting and cursor pagination.
- Get Cloud Account
Retrieve a single connected cloud account by its unique identifier.
Scans
- Create Scan
Launch an on-demand Orca security scan for one or more assets.
- Get Scan
Retrieve the status and progress of a specific Orca scan by its identifier.
Other (15)
- Add Comment To Alert
Attach a comment to one or more Orca alerts.
- Get Group
Get a group of the Orca Security organization
- List Group Role Assignments
List the role assignments of the groups in the Orca Security organization
- List User Invitations
List the invitations to the Orca Security organization, including expired ones
- Get Current Organization
Get the Orca Security organization of the connection
- List User Role Assignments
List the role assignments of the users in the Orca Security organization
- List Users
List the users of the Orca Security organization
- List Alert Event Log
Retrieve the event and change log for a specific Orca alert.
- Query Inventory
Query Orca cloud inventory using the Orca DSL, optionally returning a downloadable result link.
- Query CVEs
Query Orca CVE and vulnerability records using the Orca DSL, with cursor pagination.
- Query Logs
Query Orca log records using the Orca DSL, with cursor pagination.
- Query Catalog
Retrieve the catalog of predefined Orca queries available to the tenant.
- Query Schema
Retrieve the schema for an Orca query data type, or all available data-type schemas.
- Update Alert Status
Set the status of one or more Orca alerts in bulk.
- Snooze Alerts
Snooze one or more Orca alerts for a number of days.
Set Up Your Orca Security MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Orca Security in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Platform Resources
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What Hundreds of Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.
14 min read
Orca Security MCP Server FAQ
Does StackOne have a Orca Security MCP server?
Orca Security MCP server vs direct API integration: what's the difference?
How does Orca Security authentication work for AI agents?
origin_owner_id.Are Orca Security MCP tools vulnerable to prompt injection?
What is the context bloat of a Orca Security agent and how do I avoid it?
Can I limit which actions my Orca Security agent can access?
Can I create custom agent actions for my Orca Security MCP server?
When should I NOT use a Orca Security MCP server?
What AI frameworks and AI clients does the StackOne Orca Security MCP server support?
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.