Live 89 Actions

Twingate MCP Server
for AI Agents

Q: What AI frameworks and AI clients does the StackOne Twingate MCP server support?

The StackOne Twingate MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Connect your AI agent to StackOne's Twingate MCP server and give it 89 MCP tools out of the box. Auth, tool execution, and security all managed.

Start Free Book Demo Read Docs →

Twingate MCP Server

Built by

StackOne

Coverage

89 Agent Actions

Agents can read, write and delete in Twingate. Extend your agent's capabilities with custom actions.

MCP Actions → Build Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Twingate MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Twingate tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Twingate call.

Tools Discovery →

What is the Twingate MCP Server?

A Twingate MCP server lets AI agents read and write Twingate data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's Twingate MCP server ships with 89 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Twingate MCP Tools

Every StackOne action for Twingate, ready for your agent. Read, write and delete, scoped to exactly what you need.

Access Requests

List Access Requests
List requests from users for access to Twingate Resources.
Get Access Request
Get one Twingate access request by ID.

SSH Certificate Authoritys

Create SSH Certificate Authority
Register an SSH certificate authority in Twingate.
Delete SSH Certificate Authority
Delete a Twingate SSH certificate authority.

X.509 Certificate Authoritys

Create X.509 Certificate Authority
Register an X.509 certificate authority in Twingate.
Delete X.509 Certificate Authority
Delete a Twingate X.509 certificate authority.

Connectors

Create Connector
Register a new Connector in a Twingate Remote Network.
List Connectors
List the Connectors of a Twingate network.
Get Connector
Get one Twingate Connector by ID.
Update Connector
Rename a Twingate Connector or change its status notifications.
Delete Connector
Delete a Twingate Connector.

Devices

List Devices
List the devices that have signed in to a Twingate network.
Get Device
Get one Twingate device by ID.
Update Device
Manually trust or untrust a Twingate device.

DNS Filtering Profiles

Create DNS Filtering Profile
Create a DNS filtering profile in Twingate.
List DNS Filtering Profiles
List the DNS filtering profiles of a Twingate network.
Get DNS Filtering Profile
Get one Twingate DNS filtering profile by ID.
Update DNS Filtering Profile
Change the domains, categories, groups or priority of a Twingate DNS filtering profile.
Delete DNS Filtering Profile
Delete a Twingate DNS filtering profile.

Gateways

Create Gateway
Create a Twingate Gateway for SSH, Kubernetes or web app Resources.
List Gateways
List the Gateways of a Twingate network.
Get Gateway
Get one Twingate Gateway by ID.
Update Gateway
Change the address, Remote Network or certificate authorities of a Twingate Gateway.
Delete Gateway
Delete a Twingate Gateway.

Groups

Create Group
Create a manual group in a Twingate network.
List Groups
List the groups of a Twingate network.
Get Group
Get one Twingate group by ID.
Update Group
Rename a Twingate group or add and remove its users and Resources.
Delete Group
Delete a Twingate group.

Unified Groups

List Unified Groups
List unified groups in a Twingate network.
Get Unified Group
Get a unified Twingate group by ID.

Unified Roles

List Unified Roles
List the Admin Console roles of Twingate.
Get Unified Role
Get a unified Twingate role by ID.

Unified Users

List Unified Users
List unified users in a Twingate network.
Get Unified User
Get a unified Twingate user by ID.

Remote Networks

Create Remote Network
Create a Remote Network in Twingate.
List Remote Networks
List the Remote Networks of a Twingate network.
Get Remote Network
Get one Twingate Remote Network by ID or exact name.
Update Remote Network
Rename, relocate, enable or disable a Twingate Remote Network.
Delete Remote Network
Delete a Twingate Remote Network.

Resources

Create Resource
Create a network Resource in Twingate.
List Resources
List the Resources of a Twingate network.
Get Resource
Get one Twingate Resource by ID.
Update Resource
Change the settings of a Twingate network Resource.
Delete Resource
Delete a Twingate Resource.

Resource Access

Add Resource Access
Grant groups or service accounts access to a Twingate Resource.
Get Resource Access
List the groups and service accounts that can reach a Twingate Resource.
Set Resource Access
Replace the full access list of a Twingate Resource.
Remove Resource Access
Remove groups or service accounts from the access list of a Twingate Resource.

Kubernetes Resources

Create Kubernetes Resource
Create a Kubernetes cluster Resource reached through a Twingate Gateway.
Update Kubernetes Resource
Change the settings of a Twingate Kubernetes Resource.

SSH Resources

Create SSH Resource
Create an SSH server Resource reached through a Twingate Gateway.
Update SSH Resource
Change the settings of a Twingate SSH Resource.

Web App Resources

Create Web App Resource
Create a web application Resource reached through a Twingate Gateway.
Update Web App Resource
Change the settings of a Twingate web app Resource.

Security Policys

Get Security Policy
Get one Twingate security policy by ID or exact name.
Update Security Policy
Change which groups a Twingate security policy applies to.

Serial Numbers

Create Serial Numbers
Add device serial numbers to the Twingate trusted list.
List Serial Numbers
List the trusted device serial numbers of a Twingate network.
Delete Serial Numbers
Remove device serial numbers from the Twingate trusted list.

Service Account Keys

Create Service Account Key
Issue a new key for a Twingate service account.
Get Service Account Key
Get one Twingate service account key by ID or exact name.
Update Service Account Key
Rename a Twingate service account key.
Delete Service Account Key
Delete a Twingate service account key.

Service Accounts

Create Service Account
Create a Twingate service account.
List Service Accounts
List the service accounts of a Twingate network.
Get Service Account
Get one Twingate service account by ID.
Update Service Account
Rename a Twingate service account or change its Resources.
Delete Service Account
Delete a Twingate service account.

Users

Create User
Add a user to a Twingate network.
List Users
List the users of a Twingate network.
Get User
Get one Twingate user by ID.
Delete User
Delete a Twingate user.

Other (16)

List Certificate Authorities
List the X.509 and SSH certificate authorities of a Twingate network.
Get Certificate Authority
Get one Twingate certificate authority by ID.
Get Device Posture
Get the security posture checks of a Twingate device.
List Security Policies
List the security policies of a Twingate network.
Get Events Sync OIDC Provider URL
Get the OIDC provider URL used to sync Twingate network events to Amazon S3.
Update User Details
Change the name or state of a Twingate user.
Update User Role
Change the Admin Console role of a Twingate user.
Approve Access Request
Approve a pending Twingate access request.
Reject Access Request
Reject a pending Twingate access request.
Generate Connector Tokens
Generate the tokens used to deploy a Twingate Connector.
Block Device
Block a Twingate device from connecting.
Unblock Device
Unblock a blocked Twingate device.
Archive Device
Archive a Twingate device.
Unarchive Device
Restore an archived Twingate device.
Revoke Service Account Key
Revoke a Twingate service account key.
Reset User MFA
Reset the Twingate multi-factor authentication of a user.

Set Up Your Twingate MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Twingate in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop-

JSON

Claude Desktop Docs

{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More developer MCP Servers

Wiz

696+ actions

IONOS

501+ actions

266+ actions

259+ actions

251+ actions

234+ actions

232+ actions

All developer MCP Servers →

Platform Resources

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

MCP vs A2A: Architecture, Security, and When to Use Each

MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.

12 min

MCP vs API: What Hundreds of Connector Builds Taught Us

MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.

14 min read

Twingate MCP Server FAQ

Does StackOne have a Twingate MCP server?

Yes. StackOne offers a hosted Twingate MCP server with 89 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.

Twingate MCP server vs direct API integration: what's the difference?

A Twingate MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software work, where backend code calls Twingate. A Twingate MCP server is for AI agents that discover and call Twingate at runtime, such as MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI. StackOne provides both.

How does Twingate authentication work for AI agents?

Twingate authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK to get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Twingate account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.

Are Twingate MCP tools vulnerable to prompt injection?

Yes. Twingate MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content, such as documents, messages, tickets, records, or free-text fields, is a potential vector. StackOne Defender scans every tool response before it enters the agent's context. It runs regex patterns in ~1ms, then a MiniLM classifier in ~4ms. Accuracy is 88.7%, and it runs entirely on CPU.

What is the context bloat of a Twingate agent and how do I avoid it?

Context bloat happens when Twingate tool schemas and API responses eat your Twingate agent's memory, preventing it from reasoning effectively. A single Twingate query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery reduces it by loading only the tools relevant to each query.

Can I limit which actions my Twingate agent can access?

Yes. You can limit which actions your Twingate agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.

Can I create custom agent actions for my Twingate MCP server?

Yes. You can create custom agent actions for your Twingate MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Twingate's API, generate production-ready connector YAML, test against the live API, and validate before you ship.

When should I NOT use a Twingate MCP server?

Skip a Twingate MCP server if your integration is purely software-to-software, because direct Twingate API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Twingate actions at runtime.

What AI frameworks and AI clients does the StackOne Twingate MCP server support?

The StackOne Twingate MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo

Twingate MCP Serverfor AI Agents