Connect
Optimize
Secure
Live 60 Actions
Sesame HR MCP Server
for AI Agents
Connect your AI agent to StackOne's Sesame HR MCP server and give it 60 MCP tools out of the box. Auth, tool execution, and security all managed.
Sesame HR MCP Server
Built by 
StackOne
StackOne 
Coverage
60 Agent Actions
Create, read, update, and delete across Sesame HR — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Sesame HR MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Sesame HR tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Sesame HR call.
Tools Discovery →What is the Sesame HR MCP Server?
A Sesame HR MCP server lets AI agents read and write Sesame HR data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Sesame HR MCP server ships with 60 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Sesame HR MCP Tools
Every action from Sesame HR's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Employees
- Create Employee
Creates a new employee in the company
- List Employees
Returns a paginated list of employees with optional filtering
- Get Employee
Returns employee information for a specific employee ID
- Update Employee
Updates an existing employee
- Delete Employee
Deletes an employee by ID
Departments
- Create Department
Creates a new department
- List Departments
Returns a paginated list of departments with optional filtering
- Update Department
Updates an existing department by ID
- Delete Department
Deletes a department by ID
Offices
- Create Office
Creates a new office
- List Offices
Returns a paginated list of offices with optional filtering
- Get Office
Returns office information for a specific office ID
- Update Office
Updates an existing office by ID
- Delete Office
Deletes an office by ID
Entity Groups
- Create Entity Group
Creates a new entity group
- List Entity Groups
Returns a paginated list of entity groups with optional filtering
- Update Entity Group
Updates an existing entity group by ID
- Delete Entity Group
Deletes an entity group by ID
Work Entrys
- Create Work Entry
Creates a new work entry for an employee
- Update Work Entry
Updates an existing work entry
- Delete Work Entry
Deletes a work entry by ID
Vacation Day Off Requests
- Create Vacation Day Off Request
Creates a new vacation day off request for an employee
- List Vacation Day Off Requests
Returns a paginated list of vacation day off requests
- Delete Vacation Day Off Request
Deletes a vacation day off request by ID
Absence Day Off Requests
- Create Absence Day Off Request
Creates a new absence day off request for an employee
- List Absence Day Off Requests
Returns a paginated list of absence day off requests
- Delete Absence Day Off Request
Deletes an absence day off request by ID
Contracts
- Create Contract
Creates a new contract for an employee
- Update Contract
Updates an existing contract by its ID
- Delete Contract
Deletes a contract by its ID
Compensations
- Create Compensation
Creates a new compensation record
- List Compensations
Returns a paginated list of compensations with optional filtering
- Get Compensation
Returns a specific compensation by its ID
Projects
- Create Project
Creates a new project in the company
- List Projects
Returns a paginated list of projects for a company
Time Entrys
- Create Time Entry
Creates a new time entry for an employee
- Update Time Entry
Updates an existing time entry by its ID
- Delete Time Entry
Deletes a time entry by its ID
Trainings
- Create Training
Creates a new training record
- List Trainings
Returns a paginated list of trainings with optional filtering
- Get Training
Returns a specific training by its ID
Other (19)
- Create Salary
Creates a new salary record for an employee
- List Work Entries
Returns a paginated list of work entries with optional filtering
- List Vacation Calendars
Returns a paginated list of vacation calendars
- List Absence Types
Returns a paginated list of absence types
- List Employee Contracts
Returns a paginated list of contracts for a specific employee
- List Contract Types
Returns a paginated list of available contract types
- List Salaries
Returns a paginated list of salaries for a specific employee
- List Time Entries
Returns a paginated list of time entries with optional filtering
- List Check Incidences
Returns a paginated list of check incidences with optional filtering
- List Roles
Returns a paginated list of roles
- List Custom Fields
Returns a paginated list of custom fields
- Clock In
Clocks in an employee
- Clock Out
Clocks out an employee
- Clock
Auto clock-in or clock-out based on current state
- Accept Vacation Day Off Request
Accepts a pending vacation day off request
- Reject Vacation Day Off Request
Rejects a pending vacation day off request
- Accept Absence Day Off Request
Accepts a pending absence day off request
- Reject Absence Day Off Request
Rejects a pending absence day off request
- Show Token Info
Returns information about the current API token
Sesame HR AI Agent Use Cases
Connect your AI agent to Sesame HR and help your team scale the HR operations they run by hand today.
Employee Onboarding
Use StackOne to connect your AI agent to your HRIS, identity management, and LMS to automate employee onboarding.
View HR Policy Q&A Chatbot
Use StackOne to connect your AI agent to your HRIS, knowledge base, and messaging tools to automate HR policy Q&A.
View Employee Offboarding
Use StackOne to connect your AI agent to your HRIS, identity management, and ITSM to automate employee offboarding and deprovisioning.
ViewSet Up Your Sesame HR MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Sesame HR in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Check More HRIS / HCM MCP Servers
UKG Ready
139+ actions
Workday (Rest and Soap)
128+ actions
Factorial
127+ actions
HiBob
123+ actions
Oracle Fusion HCM
120+ actions
Humaans
117+ actions
SAP SuccessFactors
111+ actions
Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
Sesame HR MCP Server FAQ
Does StackOne have a Sesame HR MCP server?
Yes. StackOne offers a hosted Sesame HR MCP server with 60 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Sesame HR MCP server vs direct API integration — what's the difference?
A Sesame HR MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Sesame HR. A Sesame HR MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Sesame HR at runtime. StackOne provides both.
How does Sesame HR authentication work for AI agents?
Sesame HR authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Sesame HR account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Sesame HR MCP tools vulnerable to prompt injection?
Yes — Sesame HR MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Sesame HR agent and how do I avoid it?
Context bloat happens when Sesame HR tool schemas and API responses eat your Sesame HR agent's memory, preventing it from reasoning effectively. A single Sesame HR query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Sesame HR agent can access?
Yes — you can limit which actions your Sesame HR agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Sesame HR MCP server?
Yes — you can create custom agent actions for your Sesame HR MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Sesame HR's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Sesame HR MCP server?
Skip a Sesame HR MCP server if your integration is purely software-to-software — direct Sesame HR API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Sesame HR actions at runtime.
What AI frameworks and AI clients does the StackOne Sesame HR MCP server support?
The StackOne Sesame HR MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.