withoneai JumpCloud through One
JumpCloud is a cloud directory and identity management platform that provides single sign-on, device management, and access control APIs, allowing IT teams to manage users, endpoints, and authentication policies across applications, networks, and operating systems from a unified service.
One exposes JumpCloud through four MCP tools. The table below carries real action ids from One's knowledge base, so for a common operation you can skip search and go straight to reading the action's parameters.
How to run an action
- Find the action in the table below, or call
search_one_platform_actionswith platformjump-cloudif it is not listed. - Call
get_one_action_knowledgewith the action id. Do this every time, including for actions in this table. The table gives you the id, not the parameters. - Call
execute_one_actionwith parameters copied from that knowledge.
Never guess a parameter name, a body field, or an enum value. The knowledge has the real schema, and a guessed field is either a 400 or a silent write of the wrong thing.
Before you start
Call list_one_integrations once and confirm JumpCloud is connected. If it is missing, the user has not connected it: say so and point them at https://app.withone.ai rather than reaching for raw HTTP.
Each connection carries an access field. If it reports {"policy": "methods", "methods": ["GET"]} the agent is read-only here, so plan a read-only answer instead of attempting a write that will be refused.
Before a write
Creates, updates, deletes and sends land on a real JumpCloud account and cannot be recalled. State the action and the specific target in one line before the first write in a task, and let the user stop you. Reads need no confirmation.
Actions
SystemUsers
| Action | Method | Path | Action id |
|---|---|---|---|
| Get a System User by ID | GET | /systemusers/{{id}} |
conn_mod_def::GLCUojZ99Jg::62rTB4yiTWyl6lIT6nnsLQ |
| Get a System User's TOTP Enrollment Info | GET | /systemusers/{{id}}/totpinfo |
conn_mod_def::GLCUoWhHLxg::ZBu9D4cRTiG_trHx87-g2A |
| List a System's Users | GET | /systems/{{systemId}}/users |
conn_mod_def::GLCUZYK2ZGg::wtnjkGSeRnGX0hEawgNMqQ |
| List All System Users | GET | /api/systemusers |
conn_mod_def::GLCUol4HvGA::hRWBMrBKShW9t_iTKo5bVw |
| Activate a System User | POST | /systemusers/{{id}}/state/activate |
conn_mod_def::GLCUoMG0KdA::NM9Z-AFsSX6cHPcd-oROrQ |
| Create a System User | POST | /api/systemusers |
conn_mod_def::GLCUoNWOyig::8IvcJ-J1Qk-k5DCfmEkDSw |
| Delete a System User | DELETE | /systemusers/{{id}} |
conn_mod_def::GLCUoWhauwA::PYYllWf1TYqgzMFOnfkF6w |
| Expire a System User's Password | POST | /systemusers/{{id}}/expire |
conn_mod_def::GLCUoWnGm1g::jQdlslVbQMusNOVCN4hiwQ |
| Force Set a System User's Password | POST | /systemusers/{{id}}/password |
conn_mod_def::GLCUoiDPrYA::83DZljOwTEapUtCR9MP-8w |
| Reactivate a System User | POST | /systemusers/{{id}}/reactivate |
conn_mod_def::GLCUohw3YLA::FrI_YAa1S_ebeuVLUvezBQ |
| Reset a System User's MFA Token | POST | /systemusers/{{id}}/resetmfa |
conn_mod_def::GLCUouj_tZg::eHh7Xx1xRlmYw5lQ-lpnwA |
| Search System Users | POST | /api/search/systemusers |
conn_mod_def::GLCUkvkLP9A::PBhCUUGyQ4m92RWY0Vav0A |
5 more SystemUsers actions are available through search.
Applications
| Action | Method | Path | Action id |
|---|---|---|---|
| Get an Application (by ID) | GET | /applications/{{applicationId}} |
conn_mod_def::GLCUSuGXurA::MnAwpnArQFqK0frinFCOYQ |
| Get an Application (by ID) | GET | /applications/{{id}} |
conn_mod_def::GLCUSvKYFdA::b50s84bLTjSWYqvU1TBnZQ |
| Get an Application by ID | GET | /saas-management/applications/{{applicationId}} |
conn_mod_def::GLCUj5VV6wA::Vf8r30ZOQUOnzmgtT3I9mw |
| List Applications | GET | /api/applications |
conn_mod_def::GLCUSbEhRSg::SfC0CQ_XRAS_CcCYK4ljDw |
| List Applications | GET | /api/v2/saas-management/applications |
conn_mod_def::GLCUkEJF5-g::n2MFTMhcQiW40s79uC_ycA |
| List Importable Users for an Application | GET | /applications/{{applicationId}}/import/users |
conn_mod_def::GLCUSmmOa5A::UF3a7Pc0T-2XeqeYuvBz1Q |
| Create an Application | POST | /api/applications |
conn_mod_def::GLCUSYl3mVA::YGq8_fuOQUS79qKiyP3-TA |
| Create Application | POST | /api/v2/saas-management/applications |
conn_mod_def::GLCUjuuU10g::q09jBnVJQSm_F5prcmLNGg |
| Delete an Application | DELETE | /saas-management/applications/{{applicationId}} |
conn_mod_def::GLCUj4j-jiA::TJAOkdZ6TpCgjNskE6QjsA |
| Delete an Application (by ID) | DELETE | /applications/{{id}} |
conn_mod_def::GLCUShxtMjg::-cpRFDp2ROCROGe8KKyeaA |
| Delete an Application Image | DELETE | /applications/{{applicationId}}/logo |
conn_mod_def::GLCUSiUZeNg::UHpxPOv3Rqm_TDMdSCiI8w |
| Manage an Application's Associations | POST | /applications/{{applicationId}}/associations |
conn_mod_def::GLCUa8bNs1g::FmkZqXooQzuvEx0mt-6A8A |
3 more Applications actions are available through search.
Systems
| Action | Method | Path | Action id |
|---|---|---|---|
| Get a System's FDE Key | GET | /systems/{{systemId}}/fdekey |
conn_mod_def::GLCUntoDwmg::oCIV7e13Q0uTOPgj8YE6Mg |
| Get an Individual System | GET | /systems/{{id}} |
conn_mod_def::GLCUnvyUPVg::kPLWifkATxS0ct0IZCQHZg |
| List All Systems | GET | /systems |
conn_mod_def::GLCUnvELSFA::LozbKYVPTGu6JyZPqn9Zaw |
| Delete a System | DELETE | /systems/{{id}} |
conn_mod_def::GLCUnkimn-g::0pAZ20TyS6qAdwjsjmAxNg |
| Erase a System | POST | /systems/{{systemId}}/command/builtin/erase |
conn_mod_def::GLCUnsGqxeA::zWsWTKuxRNi8KdPBkxRrFQ |
| Lock a System | POST | /systems/{{systemId}}/command/builtin/lock |
conn_mod_def::GLCUn4cNOsA::r1Yqs-TXQhyeB__5FECbvQ |
| Restart a System | POST | /systems/{{systemId}}/command/builtin/restart |
conn_mod_def::GLCUn4MB3BA::dfCW1bRMREubO-3I3oXQ5Q |
| Search Systems | POST | /search/systems |
conn_mod_def::GLCUkum4jOA::UVMGbLb2RJKJVC_042hLYA |
| Shutdown a System | POST | /systems/{{systemId}}/command/builtin/shutdown |
conn_mod_def::GLCUn4Lg7mA::hXB3seDTTliv48rf9323Zw |
| Transfer a Device Between Organizations | POST | /systems/{{systemObjectId}}/transfer |
conn_mod_def::GLCUWh9pGdg::61K92lZsQr2sLvmeEjzsiA |
| Update a System | PUT | /systems/{{id}} |
conn_mod_def::GLCUoEBXJMg::LC-XoTn7TQut5mHgbNrwyA |
Commands
| Action | Method | Path | Action id |
|---|---|---|---|
| Get an Individual Command | GET | /commands/{{id}} |
conn_mod_def::GLCUUjkJutA::1mntswMiQmi7P-slclJbrw |
| Get Results for a Specific Command | GET | /commands/{{id}}/results |
conn_mod_def::GLCUUjtRZMg::tN1QpjHVS9WvlaZBfILTRQ |
| List All Commands | GET | /commands |
conn_mod_def::GLCUUlleAWA::LOWWZdusQ8aSY1tbFjCbjw |
| Create A Command | POST | /api/commands |
conn_mod_def::GLCUUSChQpg::trr1WwrDRE-HEuBrQ7AVlA |
| Delete a Command | DELETE | /commands/{{id}} |
conn_mod_def::GLCUUR6KFrA::etRrWApwQ7qoFeLrb-gWTw |
| Launch a Command via a Trigger | POST | /command/trigger/{{triggername}} |
conn_mod_def::GLCUUR6jqZA::1ubYD2HnTlmOpghIb7Hg0g |
| Manage a Command's Associations | POST | /commands/{{commandId}}/associations |
conn_mod_def::GLCUZraPZeA::JL1X6z1uQSCneg77ZuHIKA |
| Run a Command | POST | /runCommand |
conn_mod_def::GLCUUh7xENA::_GvHaEXOTqWP85bAatsKxQ |
| Search Commands | POST | /api/search/commands |
conn_mod_def::GLCUkumh2GA::areRVJHuQxq0CGHQcIhr-g |
| Update a Command by ID | PUT | /commands/{{id}} |
conn_mod_def::GLCUUtBBz8g::wt-f8Sz9TPaYKERV_LeVmQ |
UserGroups
| Action | Method | Path | Action id |
|---|---|---|---|
| Get a User Group by ID | GET | /usergroups/{{id}} |
conn_mod_def::GLCUpK8mUCg::9CRa5AQHQ2eLrosYCH2AGQ |
| List a Routing Policy's User Groups | GET | /identity-provider/policies/{{idpRoutingPolicyId}}/associations/usergroups |
conn_mod_def::GLCUZEONMSg::vg7gqmVGSZ21b8N35cH-3g |
| List a User Group's Bound System Groups | GET | /usergroups/{{groupId}}/systemgroups |
conn_mod_def::GLCUYr5WK1A::ltG283O3QzypG1EeJepNjA |
| List a User Group's Office 365 Instances | GET | /usergroups/{{groupId}}/office365s |
conn_mod_def::GLCUX2iWhcg::cBaHF-v9QYie1qTrVL3v1w |
| List User Groups | GET | /api/v2/usergroups |
conn_mod_def::GLCUpMV1X2g::KiHm-YRaRjClxCaPnlss-g |
| Apply Suggestions for a User Group | POST | /usergroups/{{groupId}}/suggestions |
conn_mod_def::GLCUpCGq3Hg::EBn1LZiSR-KGLNgvLPHcbw |
| Create a New User Group | POST | /api/v2/usergroups |
conn_mod_def::GLCUpCH7BAA::mUJLZkCwTAyn6iW8XRxaAA |
| Delete a User Group | DELETE | /usergroups/{{id}} |
conn_mod_def::GLCUpLtM6Kg::ThuggrfTSUiK-kCeBPo8ow |
| Manage a User Group's Associations | POST | /usergroups/{{groupId}}/associations |
conn_mod_def::GLCUa7_cijg::SQ0u2clgTnSLxasowwOu-A |
| Update a User Group | PUT | /usergroups/{{id}} |
conn_mod_def::GLCUpLs5PYA::iOpq9-TmSG6Pjy7nvILm0Q |
AppleMdmDevices
| Action | Method | Path | Action id |
|---|---|---|---|
| Get an Apple MDM Device | GET | /applemdms/{{appleMdmId}}/devices/{{deviceId}} |
conn_mod_def::GLCURx6zurA::ijyjd_SCRvWHp1VvXcSsjw |
| Get Recovery Lock Password for an Apple MDM Device | GET | /applemdms/{{deviceManagerObjectId}}/devices/{{deviceObjectId}}/getrecoverylockpassword |
conn_mod_def::GLCUb1yevrA::nQm-Pgb1R7uCPgS7MF_Ruw |
| List an Apple MDM's Devices | GET | /applemdms/{{appleMdmId}}/devices |
conn_mod_def::GLCUSG-TH9g::GC3ZeShiTSmTMfQBHNTUpg |
| Clear Activation Lock for an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/clearActivationLock |
conn_mod_def::GLCURy2a9eg::_ze0pILhTwqU86Tzk2lIrA |
| Clear Restrictions Password for an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/clearRestrictionsPassword |
conn_mod_def::GLCURyAC09g::eTKov6fqTL-5d0XJYsjTKw |
| Control Lost Mode for an Apple MDM Device | POST | /applemdms/{{deviceManagerObjectId}}/devices/{{deviceObjectId}}/lostmode |
conn_mod_def::GLCUb0bjSJg::R1roDLHWR3WHrg64quMT1A |
| Erase an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/erase |
conn_mod_def::GLCUR8_cxZg::EJD6FaQoQFigWEYxZ-wMSQ |
| Lock an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/lock |
conn_mod_def::GLCUSF5KYXg::gOWxB3K6QVOX1MEWIAbGug |
| Restart an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/restart |
conn_mod_def::GLCUSQYHXBg::Mol4zeQ5QJKti2FJe37vmw |
| Shut Down an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/shutdown |
conn_mod_def::GLCUSQV7Gdg::-XRzyxp4SiiYCtJ7vZjTaA |
ActiveDirectories
| Action | Method | Path | Action id |
|---|---|---|---|
| Get an Active Directory (by ID) | GET | /activedirectories/{{id}} |
conn_mod_def::GLCURPv21vg::D9woy7PBQeSJWeQerAe1nA |
| List a Provider's Active Directories | GET | /providers/{{providerId}}/activedirectories |
conn_mod_def::GLCUhUfGBXg::nr5nJLHUQYexJ4FAtJsF_A |
| List a User's Active Directory Instances | GET | /users/{{userId}}/activedirectories |
conn_mod_def::GLCUWk7e5YA::-mklWyoSR8mU--M75FydKw |
| List Active Directories | GET | /api/v2/activedirectories |
conn_mod_def::GLCURdjwvYA::iklf_vvCTEG25ZU9tE_MwQ |
| Bulk Translation Rules Operations for an Active Directory | POST | /activedirectories/{{activedirectoryId}}/translation-rules/bulk |
conn_mod_def::GLCUo4wksYg::q8BplzACQD-IvaU9zYWoLw |
| Create a New Active Directory | POST | /api/v2/activedirectories |
conn_mod_def::GLCURF2Fj3g::hahcyrhLSaGIOhVyyaQ7dg |
| Delete an Active Directory (by ID) | DELETE | /activedirectories/{{id}} |
conn_mod_def::GLCURTjZlgA::eiSce8hKQlSEVEhUIQxyJg |
| Preview Translation Rules for Active Directories | POST | /activedirectories/translation-rules/preview |
conn_mod_def::GLCUpCuJXaA::0xD4Gv07R1e6P40w3D6Xnw |
| Update an Active Directory Instance | PATCH | /activedirectories/{{id}} |
conn_mod_def::GLCUReLCB9g::QiMT1T11RdKlAkfNxahjbg |
Applemdms
| Action | Method | Path | Action id |
|---|---|---|---|
| Get an Apple MDM CSR Plist | GET | /applemdms/{{appleMdmId}}/csr |
conn_mod_def::GLCUR8_cXCA::yitElJAYQa6aB_U2-k6S-g |
| Get an Organization's ADUE Configuration | GET | /applemdms/{{organizationObjectId}}/account-driven-service-discovery |
conn_mod_def::GLCUbok4rCA::crh7sIIaTCagEjZVA8yxGg |
| Validate an Apple MDM Server Service Discovery URL | GET | /applemdms/{{deviceManagerObjectId}}/validate-service-discovery-url |
conn_mod_def::GLCUbrsO1fg::hTf_6Oq9SKq9zQqnxqJFuw |
| Delete an Apple MDM | DELETE | /applemdms/{{id}} |
conn_mod_def::GLCURx6Kj6A::2Hh3Xg1ZS0m6jdE6_Wu96Q |
| Delete an Apple MDM Server's Service Discovery URL | DELETE | /applemdms/{{deviceManagerObjectId}}/service-discovery-url |
conn_mod_def::GLCUbopjImA::xzN45auzQ3mCeOnBCKZ_9Q |
| Remove an Apple MDM Device's Enrollment | DELETE | /applemdms/{{appleMdmId}}/devices/{{deviceId}} |
conn_mod_def::GLCUSP1qRDA::coYIAsmIQHCACL_YQdMLaA |
| Request the Status of an OS Update for an Apple MDM Device | POST | /applemdms/{{appleMdmId}}/devices/{{deviceId}}/osUpdateStatus |
conn_mod_def::GLCUSQknozA::v_59q4LHQDaoDMBQCe-dPA |
| Update an Apple MDM (by ID) | PUT | /applemdms/{{id}} |
conn_mod_def::GLCUSZt0mDg::z1onmlgqTl-KvOlzvSaR2w |
| Update an Apple MDM Server's Service Discovery URL | POST | /applemdms/{{deviceManagerObjectId}}/service-discovery-url |
conn_mod_def::GLCUbn6rfDg::mQJFeR-7ShGoJ31fIFtiPg |
GoogleEmmDevices
| Action | Method | Path | Action id |
|---|---|---|---|
| Get a Device's Android Policy JSON | GET | /google-emm/devices/{{deviceId}}/policy_results |
conn_mod_def::GLCUWPnztEg::nszpGIozSt6eJbALOGvgCg |
| Get a Google EMM Device by ID | GET | /google-emm/devices/{{deviceId}} |
conn_mod_def::GLCUWPdn0Xg::3taSRlMoSAyDbVn8Zev4Kg |
| Erase an Android Device | POST | /google-emm/devices/{{deviceId}}/erase-device |
conn_mod_def::GLCUWFsx9yA::N7F1rJhMShGnQrHd7Qf6Qw |
| Lock a Google EMM Device | POST | /google-emm/devices/{{deviceId}}/lock |
conn_mod_def::GLCUWY_QnkA::8y9dK3GrTgGHCunq2J2xGw |
| Reboot a Google EMM Device | POST | /google-emm/devices/{{deviceId}}/reboot |
conn_mod_def::GLCUWZPwjpA::QvEpCpF9Q5-9ZTeIsTffgg |
| Reset Password of a Device | POST | /google-emm/devices/{{deviceId}}/resetpassword |
conn_mod_def::GLCUWY_Ycig::_yhDMwQ9RwWACAG3jqrL-w |
| Start Lost Mode for a Google EMM Device | POST | /google-emm/devices/{{deviceId}}/lostmode/start |
conn_mod_def::GLCUWZIKzwA::QW2mEwU3TTehC9U_mMfjLQ |
1 more GoogleEmmDevices actions are available through search.
This lists 90 of 703 actions. For anything not here, call search_one_platform_actions with platform jump-cloud. The full catalog is at https://www.withone.ai/knowledge/jump-cloud.
When a call fails
The error comes from JumpCloud, not from One. A 400 or 422 means your parameters do not match the schema, so re-read the knowledge and fix the field. A 401 or 403 means the connection needs re-authorizing, which no retry will fix. A 404 means the id is not on this account. A 429 means slow down. Never retry a write more than once: the first attempt may have landed.
Full catalog: https://www.withone.ai/knowledge/jump-cloud
Integration knowledge by One (withone.ai), licensed under One-Knowledge-1.0. Attribution must be preserved in derivative works.