Get Started: JumpCloud MCP Server

JumpCloud’s Model Context Protocol (MCP) Server lets you connect compatible AI tools to JumpCloud and interact with your organization’s data and administrative capabilities. With MCP, you can view, edit, and modify many aspects of your JumpCloud org directly within your existing AI tools like code editors, large language models (LLMs), and AI agents.

Understanding the Benefits:

JumpCloud's MCP server helps integrate your organization's data with your existing AI tools:

• Find and view JumpCloud objects: Users, admins, devices, groups, SSO applications, Directory Insights (DI) events and more.
• Modify objects: Grant or revoke user access, reset passwords and MFA, send device security commands, modify group memberships and SSO application access.
• Perform bulk actions: Manage multiple users, devices, groups, and SSO applications in bulk.

Prerequisites:

• JumpCloud Administrator account with API access. See JumpCloud APIs to learn more.

Known Issues and Limitations:

• MCP servers typically support three elements: resources, tools, and prompts. JumpCloud’s MCP server currently supports tools only. 
• JumpCloud’s MCP server currently supports Streamable HTTP only as the transport mechanism. Stdio is not supported.
• At this time, JumpCloud’s MCP server doesn’t support integrating with ChatGPT. 

Supported Clients

JumpCloud's MCP server currently supports the following AI tools:

• AI Tools
  • Claude
• Code Editors
  • Cursor
  • Visual Studio Code (VS Code)

Enabling the MCP Server

To enable JumpCloud MCP:

1. Log in to the JumpCloud Admin Portal.

2. In the left navigation, click on Settings. 
3. Go to the Features tab.
4. Under JumpCloud AI, toggle MCP Server On.

Using the MCP Server

The JumpCloud MCP server endpoint is https://mcp.jumpcloud.com/v1 and currently supports API key and OAuth authentication. The MCP server doesn’t support the entirety of JumpCloud’s APIs. Instead, it offers structured tools specifically designed for AI clients, focusing on the following key areas:

• User and device management
• Directory Insights (DI) events and related information
• Applications and user groups

If you are a Managed Service Provider (MSP) using the Multi-Tenant Portal (MTP) to manage multiple organizations, you'll need to append the MCP server URL with the organization ID of the specific child org you want to connect to. See Manage Organizations in the MTP to learn more. Replace {org id} with the child org's ID:

https://mcp.jumpcloud.com/v1?organizationID={orgID}

API Authentication

This method transmits the API key to public API endpoints, mirroring your exact permissions in JumpCloud.

OAuth Authentication

This method uses browser-based authentication to JumpCloud to generate a token and enable MCP with the client. After configuring the MCP server in the client, you’ll be redirected to JumpCloud to authenticate via OAuth. Successful admin authentication activates the integration.

Connecting with Claude

To integrate JumpCloud's MCP server with Claude:

1. In Claude, at the bottom left, click your account details and go to Settings.
2. Under Settings, go to Connectors. 
3. At the bottom of the Connectors list, click Add custom connector. 
4. In the Add custom connector modal:
   1. Enter a Name for the connector, for example JumpCloud.
   2. Under Remote MCP server URL, paste the JumpCloud MCP Server: https://mcp.jumpcloud.com/v1
      • Note: For MSPs, append the specific child org's ID to the URL. For example: https://mcp.jumpcloud.com/v1?organizationID={orgID}
   3. Click Add.
5. To the right of the new connector, click Connect.
6. Authenticate using your JumpCloud administrator credentials.

JumpCloud is now connected to Claude, and you can ask or perform supported JumpCloud operations directly in your chats.  

Connecting with Cursor

To integrate JumpCloud's MCP server with Cursor:

1. In Cursor, go to Cursor Settings.
2. In Tools & Integrations, under MCP Tools, click New MCP Server. 
3. In the mcp.json file, enter the following configuration examples depending on your preferred authentication type.

To use OAuth:

1. In the mcp.json file, enter the configuration using the following example format:
   • Note: For MSPs, append the specific child org's ID to the URL. For example: https://mcp.jumpcloud.com/v1?organizationID={orgID}

2. Go back to Cursor Settings.
3. Under Installed MCP Servers, click Connect next to jumpcloud-mcp.
4. You'll be redirected to your browser to authenticate to the Admin Portal.
5. When finished, click Open Cursor in your browser to return to the app and complete authentication.

To use API authentication:

1. In the mcp.json file, enter the configuration using the following example format and replace YOUR_JUMPCLOUD_API_KEY with your JumpCloud API Key:
   • Note: For MSPs, append the specific child org's ID to the URL. For example: https://mcp.jumpcloud.com/v1?organizationID={orgID}

After adding the configuration, you can use Cursor to start a session and ask questions and perform operations related to JumpCloud. For example “How many Windows devices are in my JumpCloud account?”

See Cursor - Model Context Protocol (MCP) documentation to learn more.

Connecting with Visual Studio Code

To add JumpCloud's MCP server to VS Code using the Commands Palette:

1. In VS Code, go to Settings > Command Palette.
2. Enter mcp and select MCP: Add Server.
3. Under Choose the type of MCP server to add, select HTTP.
4. Under Enter Server URL, enter https://mcp.jumpcloud.com/v1
   • Note: For MSPs, append the specific child org's ID to the URL. For example: https://mcp.jumpcloud.com/v1?organizationID={orgID}
5. Under Enter Server ID, enter a name for the server, for example JumpCloud MCP.
6. The entry will be added to your mcp.json file and prompt you to authenticate.
7. Connect to the JumpCloud MCP server by providing an API key or signing into your JumpCloud account when prompted.

To manually add JumpCloud's MCP to VS Code using the mcp.json file:

1. In VS Code, go to File > New File and create an mcp.json file by entering the following in the search bar: .vscode/mcp.json
2. Paste the following into the file, replacing jca_**** with your API key:

3. Save the file, and then click Start above the server name.
4. Under The MCP Server Definition wants to authenticate to mcp.jumpcloud.com, click Allow.
5. Connect to the JumpCloud MCP server by providing an API key or signing into your JumpCloud account when prompted.

You can now interact with your JumpCloud org's data using MCP.

Supported JumpCloud Tools

The JumpCloud’s MCP server currently supports syncing the following with your AI tools:

• JumpCloud Admins
  • admins_list
• SSO Applications
  • application_get
  • applications_list
• Devices, Device Groups, and Commands
  • commands_list
  • device_erase
  • device_get
  • device_lock
  • device_restart
  • device_shutdown
  • device_update
  • devices_list
• Directory Insights (DI)
  • di_events_get
• Users
  • user_add_mfa
  • user_force_password_reset
  • user_get
  • user_group_membership
  • user_groups_list
  • user_reactivate
  • user_remove_mfa_requirement
  • user_resetmfa
  • user_send_invitation_email
  • user_send_reset_password_email
  • user_suspend
  • user_unlock
  • users_list
• Search
  • search_api

FAQ