Connect
Optimize
Secure
Live 70 Actions
Traffit MCP Server
for AI Agents
Connect your AI agent to StackOne's Traffit MCP server and give it 70 MCP tools out of the box. Auth, tool execution, and security all managed.
Traffit MCP Server
Built by 
StackOne
StackOne 
Coverage
70 Agent Actions
Create, read, update, and delete across Traffit — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Traffit MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Traffit tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Traffit call.
Tools Discovery →What is the Traffit MCP Server?
A Traffit MCP server lets AI agents read and write Traffit data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Traffit MCP server ships with 70 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Traffit MCP Tools
Every action from Traffit's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Employees
- Create Employee
Create a new candidate profile in Traffit
- List Employees
Retrieve a paginated list of candidates from Traffit with optional filtering and sorting
- Get Employee
Retrieve a single candidate by their ID
- Update Employee
Fully replace all fields of a candidate profile (PUT)
Employee Tags
- Get Employee Tags
Retrieve all tags assigned to a candidate
- Update Employee Tags
Add tags to a candidate
Employee Files
- Upload Employee File
Upload a file attachment to a candidate
- List Employee Files
List all file attachments for a candidate
- Get Employee File
Get metadata for a specific file attached to a candidate
Recruitments
- Create Recruitment
Create a new job opening in Traffit
- List Recruitments
Retrieve a paginated list of job openings from Traffit
- Get Recruitment
Retrieve a single job opening by its ID
- Update Recruitment
Update a job opening in Traffit
Job Posts
- List Job Posts
Retrieve all job posts from Traffit (requires authentication)
- Get Job Post
Retrieve a single job post by its ID
Clients
- Create Client
Create a new client company in Traffit
- List Clients
Retrieve a paginated list of client companies from Traffit
- Get Client
Retrieve a single client company by its ID
- Update Client
Fully replace all fields of a client company record (PUT)
CRM Persons
- Create CRM Person
Create a new CRM contact person in Traffit
- List CRM Persons
Retrieve a paginated list of CRM contact persons from Traffit
- Get CRM Person
Retrieve a single CRM contact person by their ID
- Update CRM Person
Fully replace all fields of a CRM contact person record (PUT)
Users
- Create User
Create a new user account in Traffit
- List Users
Retrieve a paginated list of users from Traffit
- Get User
Retrieve a single user by their ID
- Update User
Update a user account in Traffit
Talents
- Create Talent
Create a new talent pool in Traffit
- List Talents
Retrieve all talent pools from Traffit
Sources
- List Sources
List all candidate acquisition sources in Traffit
- Get Source
Retrieve a single acquisition source by its ID
- Update Source
Update a candidate acquisition source in Traffit
Other (38)
- Add Employee Note
Add a note to a candidate's profile
- Add Candidate To Recruitment
Add an existing candidate to a job opening
- Add Recruitment Owner
Add a user as owner/responsible person for a job opening
- Add User To Group
Add a user to a group in Traffit
- Add Employees To Talent
Add candidates to a talent pool
- Upload File
Upload a file to the Traffit system
- List Employee Recruitments
Get all job openings a candidate is associated with
- List Employee Activities
Get all activities and history events for a candidate
- List Recruitment Candidates
List all candidates in a specific job opening
- List Recruitment States
Get all pipeline stages (states) for a job opening
- List Candidates By State
List all candidates in a specific pipeline stage of a job opening
- List Recruitment Rejections
List all rejected candidates for a job opening
- Get Recruitment Form
Get the application form field definitions for a job advert
- List Published Job Posts
List all publicly published job posts without authentication
- List CRM Activities
Retrieve a paginated list of CRM activities from Traffit
- Get CRM Activity
Retrieve a single CRM activity by its ID
- List User Groups
List all user groups in Traffit
- List Permission Groups
List all permission groups in Traffit
- List Provisions
List all available provisions (candidate labels) in Traffit
- List Provision Types
List all provision type categories in Traffit
- List Workflows
List all recruitment workflow templates in Traffit
- Get Workflow States
Get all pipeline stages for a workflow template
- Get Workflow State Stats
Get statistics across all states for a specific workflow
- List Dictionaries
List all available system dictionaries in Traffit
- List Dictionary Items
Get all items/values in a specific system dictionary
- List Webhook Types
List all available webhook event types in Traffit
- Move Employee To Next State
Advance a candidate to the next pipeline stage in a job opening
- Move Employee To State
Move a candidate to a specific pipeline stage in a job opening
- Remove Employees From Talent
Remove candidates from a talent pool
- Delete Webhook
Remove a registered webhook from Traffit
- Patch Employee
Partially update selected fields of a candidate profile
- Reject Employee In Recruitment
Reject a candidate in a specific job opening
- Apply To Recruitment
Submit a job application to a published advert
- Patch Client
Partially update selected fields of a client company record
- Patch CRM Person
Partially update selected fields of a CRM contact person record
- Enable User
Enable a disabled user account in Traffit
- Disable User
Disable an active user account in Traffit
- Register Webhook
Register a new webhook endpoint to receive Traffit event notifications
Traffit AI Agent Use Cases
Connect your AI agent to Traffit and help your team scale the recruiting operations they run by hand today.
Job Posting Distribution
Use StackOne to connect your AI agent to your ATS and job boards to automate job posting distribution.
View Reference Check Automation
Use StackOne to connect your AI agent to your ATS, survey tools, and messaging systems to automate reference checks.
View Offer Letter Generation
Use StackOne to connect your AI agent to your ATS, HRIS, and document management tools to automate offer letter generation.
ViewSet Up Your Traffit MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Traffit in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What 200+ Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building 200+ connectors that serve both, here's when each approach wins.
14 min read
Traffit MCP Server FAQ
Does StackOne have a Traffit MCP server?
Yes. StackOne offers a hosted Traffit MCP server with 70 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Traffit MCP server vs direct API integration — what's the difference?
A Traffit MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Traffit. A Traffit MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Traffit at runtime. StackOne provides both.
How does Traffit authentication work for AI agents?
Traffit authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Traffit account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Traffit MCP tools vulnerable to prompt injection?
Yes — Traffit MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Traffit agent and how do I avoid it?
Context bloat happens when Traffit tool schemas and API responses eat your Traffit agent's memory, preventing it from reasoning effectively. A single Traffit query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Traffit agent can access?
Yes — you can limit which actions your Traffit agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Traffit MCP server?
Yes — you can create custom agent actions for your Traffit MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Traffit's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Traffit MCP server?
Skip a Traffit MCP server if your integration is purely software-to-software — direct Traffit API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Traffit actions at runtime.
What AI frameworks and AI clients does the StackOne Traffit MCP server support?
The StackOne Traffit MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.