jumpcloud-genai MCP Server

An MCP server that provides an API to LLMs to manage their JumpCloud resources.

Tools

Last Updated

Nov 2, 2026

What is the jumpcloud-genai MCP Server?

The jumpcloud-genai MCP server gives AI agents structured, permission-aware access to jumpcloud-genai through the Model Context Protocol. With 42 pre-built actions, agents can read, create, and update jumpcloud-genai data on behalf of authorized users.

Willow ships the jumpcloud-genai MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how jumpcloud-genai is being used by every AI agent in your stack.

Tools

admins_list

Lists JumpCloud console administrators and their roles.

application_get

Gets detailed info about an SSO application including configuration.

applications_list

Lists SSO applications configured for single sign-on.

bind_user_to_device

Binds a user to a device, granting the user access to the device.

command_device_groups_list

Lists device groups associated with a command.

command_devices_list

Lists devices that will run this command (direct or via group).

command_get

Gets detailed info about a command including its script content and schedule.

command_manage_associations

Associates or disassociates a command with devices or device groups.

command_result_list

Lists execution results for a specific command. Use commandresult_get for full output.

command_run

Executes a command on its associated devices, or specific devices if provided.

commandresult_get

Gets full details of a command result including output and exit code.

commandresults_list

Lists recent command execution results across all commands.

commands_list

Lists all commands (scripts) that can be run on devices.

device_erase

DESTRUCTIVE: Factory resets device, wiping ALL data permanently.

device_get

Gets detailed info about a device including OS, hardware, and security status.

device_group_membership

Lists all devices that belong to a specific device group.

device_groups_list

Lists all device groups in the organization.

device_lock

Remotely locks a device, requiring password/PIN to unlock.

device_restart

Remotely restarts/reboots a device.

device_shutdown

Remotely shuts down/powers off a device.

device_update

Updates device settings like display name and SSH authentication options.

devices_list

Lists all managed devices (computers, servers) in the organization.

di_events_get

Retrieves audit logs showing who did what and when. Filter by service, user, or event type.

manage_device_group_membership

Adds or removes a device from a device group. Use 'add' or 'remove' operation.

manage_user_group_membership

Adds or removes a user from a user group. Use 'add' or 'remove' operation.

policies_list

Lists security and configuration policies applied to devices.

policy_get

Gets detailed info about a policy including its settings and scope.

search_api

AI-powered search for aggregations, filters, support docs, and full-text search. USE THIS FOR: (1) Aggregations/counts: 'how many users per group', 'count devices by OS'. (2) Complex filters: 'users created after 2025-06-01', 'devices with outdated agents'. (3) Support/how-to: 'how do I create a policy', 'what is conditional access', phrase 'The user is asking a 'how to' for...' should be added to queries, understand what user is asking add that phrase to beginning of the query. (4) Broad searches: 'find anything related to linux'. DO NOT USE FOR: Simple full listings (use list_users, list_devices) or single lookups by ID (use user_get, device_get). This tool handles complex queries in ONE call - never do N+1 queries when this can aggregate.

softwareapp_list

Lists managed software applications deployed to devices.

unbind_user_from_device

Unbinds a user from a device, removing the user's access to the device.

user_add_mfa

Enables MFA requirement for a user. They'll be prompted to enroll on next login.

user_force_password_reset

Forces user to change their password on next login.

user_get

Gets detailed info about a user including their groups and devices.

user_group_membership

Lists all users that belong to a specific user group.

user_groups_list

Lists all user groups in the organization.

user_reactivate

Reactivates a suspended user, restoring their access.

user_remove_mfa_requirement

Removes MFA requirement from a user. They can still use MFA if already enrolled.

user_reset_mfa

Resets a user's MFA enrollment, requiring them to set up MFA again.

user_send_reset_password_email

Sends password reset email with a link for user to create new password.

user_suspend

Suspends a user account, blocking their access to all resources.

user_unlock

Unlocks a locked user account so they can sign in again.

users_list

Lists users in the organization. Supports search by name, email, or username.

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

Set Up Your jumpcloud-genai MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json

{
  "mcpServers": {
    "willow-jumpcloud-genai": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/jumpcloud-genai"
    }
  }
}

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "willow-jumpcloud-genai": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/jumpcloud-genai"
    }
  }
}

Claude Code

CLI

claude mcp add willow-jumpcloud-genai --transport http https://<org>.mcp-s.com/mcp/mcp/jumpcloud-genai

n8n

HTTP Request Node

{
  "url": "https://<org>.mcp-s.com/mcp/mcp/jumpcloud-genai",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for jumpcloud-genai

Willow adds the layer jumpcloud-genai and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

jumpcloud-genai MCP Server FAQ

What is the jumpcloud-genai MCP server?

The jumpcloud-genai MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write jumpcloud-genai data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's jumpcloud-genai MCP server different from the official one?

The official jumpcloud-genai MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the jumpcloud-genai MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the jumpcloud-genai MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in jumpcloud-genai, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which jumpcloud-genai actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow jumpcloud-genai MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved jumpcloud-genai MCP locally, you'll see it.

What does the jumpcloud-genai MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the jumpcloud-genai MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.