jump-cloud

name

jump-cloud

description

JumpCloud is a cloud directory and identity management platform that provides single sign-on, device management, and access control APIs, allowing IT teams to manage users, endpoints, and authentication policies across applications, networks, and operating systems from a unified service. Read and write JumpCloud data through One: systemusers, applications, systems, commands, usergroups, applemdmdevices and more, 703 actions with real parameter documentation. Use whenever the user asks to look something up in JumpCloud, create or update a record there, or build code against the JumpCloud API.

JumpCloud through One

JumpCloud is a cloud directory and identity management platform that provides single sign-on, device management, and access control APIs, allowing IT teams to manage users, endpoints, and authentication policies across applications, networks, and operating systems from a unified service.

One exposes JumpCloud through four MCP tools. The table below carries real action ids from One's knowledge base, so for a common operation you can skip search and go straight to reading the action's parameters.

How to run an action

1. Find the action in the table below, or call search_one_platform_actions with platform jump-cloud if it is not listed.
2. Call get_one_action_knowledge with the action id. Do this every time, including for actions in this table. The table gives you the id, not the parameters.
3. Call execute_one_action with parameters copied from that knowledge.

Never guess a parameter name, a body field, or an enum value. The knowledge has the real schema, and a guessed field is either a 400 or a silent write of the wrong thing.

Before you start

Call list_one_integrations once and confirm JumpCloud is connected. If it is missing, the user has not connected it: say so and point them at https://app.withone.ai rather than reaching for raw HTTP.

Each connection carries an access field. If it reports {"policy": "methods", "methods": ["GET"]} the agent is read-only here, so plan a read-only answer instead of attempting a write that will be refused.

Before a write

Creates, updates, deletes and sends land on a real JumpCloud account and cannot be recalled. State the action and the specific target in one line before the first write in a task, and let the user stop you. Reads need no confirmation.

Actions

SystemUsers

Action	Method	Path	Action id
Get a System User by ID	GET	/systemusers/{{id}}	conn_mod_def::GLCUojZ99Jg::62rTB4yiTWyl6lIT6nnsLQ
Get a System User's TOTP Enrollment Info	GET	/systemusers/{{id}}/totpinfo	conn_mod_def::GLCUoWhHLxg::ZBu9D4cRTiG_trHx87-g2A
List a System's Users	GET	/systems/{{systemId}}/users	conn_mod_def::GLCUZYK2ZGg::wtnjkGSeRnGX0hEawgNMqQ
List All System Users	GET	/api/systemusers	conn_mod_def::GLCUol4HvGA::hRWBMrBKShW9t_iTKo5bVw
Activate a System User	POST	/systemusers/{{id}}/state/activate	conn_mod_def::GLCUoMG0KdA::NM9Z-AFsSX6cHPcd-oROrQ
Create a System User	POST	/api/systemusers	conn_mod_def::GLCUoNWOyig::8IvcJ-J1Qk-k5DCfmEkDSw
Delete a System User	DELETE	/systemusers/{{id}}	conn_mod_def::GLCUoWhauwA::PYYllWf1TYqgzMFOnfkF6w
Expire a System User's Password	POST	/systemusers/{{id}}/expire	conn_mod_def::GLCUoWnGm1g::jQdlslVbQMusNOVCN4hiwQ
Force Set a System User's Password	POST	/systemusers/{{id}}/password	conn_mod_def::GLCUoiDPrYA::83DZljOwTEapUtCR9MP-8w
Reactivate a System User	POST	/systemusers/{{id}}/reactivate	conn_mod_def::GLCUohw3YLA::FrI_YAa1S_ebeuVLUvezBQ
Reset a System User's MFA Token	POST	/systemusers/{{id}}/resetmfa	conn_mod_def::GLCUouj_tZg::eHh7Xx1xRlmYw5lQ-lpnwA
Search System Users	POST	/api/search/systemusers

5 more SystemUsers actions are available through search.

Applications

Action	Method	Path	Action id
Get an Application (by ID)	GET	/applications/{{applicationId}}	conn_mod_def::GLCUSuGXurA::MnAwpnArQFqK0frinFCOYQ
Get an Application (by ID)	GET	/applications/{{id}}	conn_mod_def::GLCUSvKYFdA::b50s84bLTjSWYqvU1TBnZQ
Get an Application by ID	GET	/saas-management/applications/{{applicationId}}	conn_mod_def::GLCUj5VV6wA::Vf8r30ZOQUOnzmgtT3I9mw
List Applications	GET	/api/applications	conn_mod_def::GLCUSbEhRSg::SfC0CQ_XRAS_CcCYK4ljDw
List Applications	GET	/api/v2/saas-management/applications	conn_mod_def::GLCUkEJF5-g::n2MFTMhcQiW40s79uC_ycA
List Importable Users for an Application	GET	/applications/{{applicationId}}/import/users	conn_mod_def::GLCUSmmOa5A::UF3a7Pc0T-2XeqeYuvBz1Q
Create an Application	POST	/api/applications	conn_mod_def::GLCUSYl3mVA::YGq8_fuOQUS79qKiyP3-TA
Create Application	POST	/api/v2/saas-management/applications	conn_mod_def::GLCUjuuU10g::q09jBnVJQSm_F5prcmLNGg
Delete an Application	DELETE	/saas-management/applications/{{applicationId}}	conn_mod_def::GLCUj4j-jiA::TJAOkdZ6TpCgjNskE6QjsA
Delete an Application (by ID)	DELETE	/applications/{{id}}	conn_mod_def::GLCUShxtMjg::-cpRFDp2ROCROGe8KKyeaA
Delete an Application Image	DELETE	/applications/{{applicationId}}/logo	conn_mod_def::GLCUSiUZeNg::UHpxPOv3Rqm_TDMdSCiI8w
Manage an Application's Associations	POST

3 more Applications actions are available through search.

Systems

Action	Method	Path	Action id
Get a System's FDE Key	GET	/systems/{{systemId}}/fdekey	conn_mod_def::GLCUntoDwmg::oCIV7e13Q0uTOPgj8YE6Mg
Get an Individual System	GET	/systems/{{id}}	conn_mod_def::GLCUnvyUPVg::kPLWifkATxS0ct0IZCQHZg
List All Systems	GET	/systems	conn_mod_def::GLCUnvELSFA::LozbKYVPTGu6JyZPqn9Zaw
Delete a System	DELETE	/systems/{{id}}	conn_mod_def::GLCUnkimn-g::0pAZ20TyS6qAdwjsjmAxNg
Erase a System	POST	/systems/{{systemId}}/command/builtin/erase	conn_mod_def::GLCUnsGqxeA::zWsWTKuxRNi8KdPBkxRrFQ
Lock a System	POST	/systems/{{systemId}}/command/builtin/lock	conn_mod_def::GLCUn4cNOsA::r1Yqs-TXQhyeB__5FECbvQ
Restart a System	POST	/systems/{{systemId}}/command/builtin/restart	conn_mod_def::GLCUn4MB3BA::dfCW1bRMREubO-3I3oXQ5Q
Search Systems	POST	/search/systems	conn_mod_def::GLCUkum4jOA::UVMGbLb2RJKJVC_042hLYA
Shutdown a System	POST	/systems/{{systemId}}/command/builtin/shutdown	conn_mod_def::GLCUn4Lg7mA::hXB3seDTTliv48rf9323Zw
Transfer a Device Between Organizations	POST	/systems/{{systemObjectId}}/transfer	conn_mod_def::GLCUWh9pGdg::61K92lZsQr2sLvmeEjzsiA
Update a System	PUT	/systems/{{id}}	conn_mod_def::GLCUoEBXJMg::LC-XoTn7TQut5mHgbNrwyA

Commands

Action	Method	Path	Action id
Get an Individual Command	GET	/commands/{{id}}	conn_mod_def::GLCUUjkJutA::1mntswMiQmi7P-slclJbrw
Get Results for a Specific Command	GET	/commands/{{id}}/results	conn_mod_def::GLCUUjtRZMg::tN1QpjHVS9WvlaZBfILTRQ
List All Commands	GET	/commands	conn_mod_def::GLCUUlleAWA::LOWWZdusQ8aSY1tbFjCbjw
Create A Command	POST	/api/commands	conn_mod_def::GLCUUSChQpg::trr1WwrDRE-HEuBrQ7AVlA
Delete a Command	DELETE	/commands/{{id}}	conn_mod_def::GLCUUR6KFrA::etRrWApwQ7qoFeLrb-gWTw
Launch a Command via a Trigger	POST	/command/trigger/{{triggername}}	conn_mod_def::GLCUUR6jqZA::1ubYD2HnTlmOpghIb7Hg0g
Manage a Command's Associations	POST	/commands/{{commandId}}/associations	conn_mod_def::GLCUZraPZeA::JL1X6z1uQSCneg77ZuHIKA
Run a Command	POST	/runCommand	conn_mod_def::GLCUUh7xENA::_GvHaEXOTqWP85bAatsKxQ
Search Commands	POST	/api/search/commands	conn_mod_def::GLCUkumh2GA::areRVJHuQxq0CGHQcIhr-g
Update a Command by ID	PUT	/commands/{{id}}	conn_mod_def::GLCUUtBBz8g::wt-f8Sz9TPaYKERV_LeVmQ

UserGroups

Action	Method	Path	Action id
Get a User Group by ID	GET	/usergroups/{{id}}	conn_mod_def::GLCUpK8mUCg::9CRa5AQHQ2eLrosYCH2AGQ
List a Routing Policy's User Groups	GET	/identity-provider/policies/{{idpRoutingPolicyId}}/associations/usergroups	conn_mod_def::GLCUZEONMSg::vg7gqmVGSZ21b8N35cH-3g
List a User Group's Bound System Groups	GET	/usergroups/{{groupId}}/systemgroups	conn_mod_def::GLCUYr5WK1A::ltG283O3QzypG1EeJepNjA
List a User Group's Office 365 Instances	GET	/usergroups/{{groupId}}/office365s	conn_mod_def::GLCUX2iWhcg::cBaHF-v9QYie1qTrVL3v1w
List User Groups	GET	/api/v2/usergroups	conn_mod_def::GLCUpMV1X2g::KiHm-YRaRjClxCaPnlss-g
Apply Suggestions for a User Group	POST	/usergroups/{{groupId}}/suggestions	conn_mod_def::GLCUpCGq3Hg::EBn1LZiSR-KGLNgvLPHcbw
Create a New User Group	POST	/api/v2/usergroups	conn_mod_def::GLCUpCH7BAA::mUJLZkCwTAyn6iW8XRxaAA
Delete a User Group	DELETE	/usergroups/{{id}}	conn_mod_def::GLCUpLtM6Kg::ThuggrfTSUiK-kCeBPo8ow
Manage a User Group's Associations	POST	/usergroups/{{groupId}}/associations	conn_mod_def::GLCUa7_cijg::SQ0u2clgTnSLxasowwOu-A
Update a User Group	PUT	/usergroups/{{id}}	conn_mod_def::GLCUpLs5PYA::iOpq9-TmSG6Pjy7nvILm0Q

AppleMdmDevices

Action	Method	Path	Action id
Get an Apple MDM Device	GET	/applemdms/{{appleMdmId}}/devices/{{deviceId}}	conn_mod_def::GLCURx6zurA::ijyjd_SCRvWHp1VvXcSsjw
Get Recovery Lock Password for an Apple MDM Device	GET	/applemdms/{{deviceManagerObjectId}}/devices/{{deviceObjectId}}/getrecoverylockpassword	conn_mod_def::GLCUb1yevrA::nQm-Pgb1R7uCPgS7MF_Ruw
List an Apple MDM's Devices	GET	/applemdms/{{appleMdmId}}/devices	conn_mod_def::GLCUSG-TH9g::GC3ZeShiTSmTMfQBHNTUpg
Clear Activation Lock for an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/clearActivationLock	conn_mod_def::GLCURy2a9eg::_ze0pILhTwqU86Tzk2lIrA
Clear Restrictions Password for an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/clearRestrictionsPassword	conn_mod_def::GLCURyAC09g::eTKov6fqTL-5d0XJYsjTKw
Control Lost Mode for an Apple MDM Device	POST	/applemdms/{{deviceManagerObjectId}}/devices/{{deviceObjectId}}/lostmode	conn_mod_def::GLCUb0bjSJg::R1roDLHWR3WHrg64quMT1A
Erase an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/erase	conn_mod_def::GLCUR8_cxZg::EJD6FaQoQFigWEYxZ-wMSQ
Lock an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/lock	conn_mod_def::GLCUSF5KYXg::gOWxB3K6QVOX1MEWIAbGug
Restart an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/restart	conn_mod_def::GLCUSQYHXBg::Mol4zeQ5QJKti2FJe37vmw
Shut Down an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/shutdown	conn_mod_def::GLCUSQV7Gdg::-XRzyxp4SiiYCtJ7vZjTaA

ActiveDirectories

Action	Method	Path	Action id
Get an Active Directory (by ID)	GET	/activedirectories/{{id}}	conn_mod_def::GLCURPv21vg::D9woy7PBQeSJWeQerAe1nA
List a Provider's Active Directories	GET	/providers/{{providerId}}/activedirectories	conn_mod_def::GLCUhUfGBXg::nr5nJLHUQYexJ4FAtJsF_A
List a User's Active Directory Instances	GET	/users/{{userId}}/activedirectories	conn_mod_def::GLCUWk7e5YA::-mklWyoSR8mU--M75FydKw
List Active Directories	GET	/api/v2/activedirectories	conn_mod_def::GLCURdjwvYA::iklf_vvCTEG25ZU9tE_MwQ
Bulk Translation Rules Operations for an Active Directory	POST	/activedirectories/{{activedirectoryId}}/translation-rules/bulk	conn_mod_def::GLCUo4wksYg::q8BplzACQD-IvaU9zYWoLw
Create a New Active Directory	POST	/api/v2/activedirectories	conn_mod_def::GLCURF2Fj3g::hahcyrhLSaGIOhVyyaQ7dg
Delete an Active Directory (by ID)	DELETE	/activedirectories/{{id}}	conn_mod_def::GLCURTjZlgA::eiSce8hKQlSEVEhUIQxyJg
Preview Translation Rules for Active Directories	POST	/activedirectories/translation-rules/preview	conn_mod_def::GLCUpCuJXaA::0xD4Gv07R1e6P40w3D6Xnw
Update an Active Directory Instance	PATCH	/activedirectories/{{id}}	conn_mod_def::GLCUReLCB9g::QiMT1T11RdKlAkfNxahjbg

Applemdms

Action	Method	Path	Action id
Get an Apple MDM CSR Plist	GET	/applemdms/{{appleMdmId}}/csr	conn_mod_def::GLCUR8_cXCA::yitElJAYQa6aB_U2-k6S-g
Get an Organization's ADUE Configuration	GET	/applemdms/{{organizationObjectId}}/account-driven-service-discovery	conn_mod_def::GLCUbok4rCA::crh7sIIaTCagEjZVA8yxGg
Validate an Apple MDM Server Service Discovery URL	GET	/applemdms/{{deviceManagerObjectId}}/validate-service-discovery-url	conn_mod_def::GLCUbrsO1fg::hTf_6Oq9SKq9zQqnxqJFuw
Delete an Apple MDM	DELETE	/applemdms/{{id}}	conn_mod_def::GLCURx6Kj6A::2Hh3Xg1ZS0m6jdE6_Wu96Q
Delete an Apple MDM Server's Service Discovery URL	DELETE	/applemdms/{{deviceManagerObjectId}}/service-discovery-url	conn_mod_def::GLCUbopjImA::xzN45auzQ3mCeOnBCKZ_9Q
Remove an Apple MDM Device's Enrollment	DELETE	/applemdms/{{appleMdmId}}/devices/{{deviceId}}	conn_mod_def::GLCUSP1qRDA::coYIAsmIQHCACL_YQdMLaA
Request the Status of an OS Update for an Apple MDM Device	POST	/applemdms/{{appleMdmId}}/devices/{{deviceId}}/osUpdateStatus	conn_mod_def::GLCUSQknozA::v_59q4LHQDaoDMBQCe-dPA
Update an Apple MDM (by ID)	PUT	/applemdms/{{id}}	conn_mod_def::GLCUSZt0mDg::z1onmlgqTl-KvOlzvSaR2w
Update an Apple MDM Server's Service Discovery URL	POST	/applemdms/{{deviceManagerObjectId}}/service-discovery-url	conn_mod_def::GLCUbn6rfDg::mQJFeR-7ShGoJ31fIFtiPg

GoogleEmmDevices

Action	Method	Path	Action id
Get a Device's Android Policy JSON	GET	/google-emm/devices/{{deviceId}}/policy_results	conn_mod_def::GLCUWPnztEg::nszpGIozSt6eJbALOGvgCg
Get a Google EMM Device by ID	GET	/google-emm/devices/{{deviceId}}	conn_mod_def::GLCUWPdn0Xg::3taSRlMoSAyDbVn8Zev4Kg
Erase an Android Device	POST	/google-emm/devices/{{deviceId}}/erase-device	conn_mod_def::GLCUWFsx9yA::N7F1rJhMShGnQrHd7Qf6Qw
Lock a Google EMM Device	POST	/google-emm/devices/{{deviceId}}/lock	conn_mod_def::GLCUWY_QnkA::8y9dK3GrTgGHCunq2J2xGw
Reboot a Google EMM Device	POST	/google-emm/devices/{{deviceId}}/reboot	conn_mod_def::GLCUWZPwjpA::QvEpCpF9Q5-9ZTeIsTffgg
Reset Password of a Device	POST	/google-emm/devices/{{deviceId}}/resetpassword	conn_mod_def::GLCUWY_Ycig::_yhDMwQ9RwWACAG3jqrL-w
Start Lost Mode for a Google EMM Device	POST	/google-emm/devices/{{deviceId}}/lostmode/start	conn_mod_def::GLCUWZIKzwA::QW2mEwU3TTehC9U_mMfjLQ

1 more GoogleEmmDevices actions are available through search.

This lists 90 of 703 actions. For anything not here, call search_one_platform_actions with platform jump-cloud. The full catalog is at https://www.withone.ai/knowledge/jump-cloud.

When a call fails

The error comes from JumpCloud, not from One. A 400 or 422 means your parameters do not match the schema, so re-read the knowledge and fix the field. A 401 or 403 means the connection needs re-authorizing, which no retry will fix. A 404 means the id is not on this account. A 429 means slow down. Never retry a write more than once: the first attempt may have landed.

Full catalog: https://www.withone.ai/knowledge/jump-cloud

Integration knowledge by One (withone.ai), licensed under One-Knowledge-1.0. Attribution must be preserved in derivative works.