Integration · Security and identity
AI agents for JumpCloud
Run people and device admin in JumpCloud: find users and read their details, suspend or restore an account, unlock a locked user, reset their MFA, list user groups and their members, add or remove group members.
- Actions
- 10
- Read
- 6
- Write
- 4
Actions
What your agents can do in JumpCloud
Run people and device admin in JumpCloud: find users and read their details, suspend or restore an account, unlock a locked user, reset their MFA, list user groups and their members, add or remove group members, list managed devices, and read the Directory Insights audit log.
Read 6
Look things up. Nothing changes.
Find users
Finds users by email, or with JumpCloud filters field:$operator:value (department:$eq:Finance, suspended:$eq:true, account_locked:$eq:true, lastname:$sw:Smi, email:$in:a@x.com|b@x.com).
Get a user
Reads one user by JumpCloud user ID: everything Find users returns, plus phoneNumbers, addresses, location, costCenter, employeeIdentifier, badLoginAttempts, account_locked_date.
List user groups
Lists user groups (which grant apps, devices, networks and directories), optionally by name: each group's id, name, description, type, email and attributes.
List a group's members
Lists the users in a user group by the group's ID.
List devices
Lists the devices (JumpCloud "systems") with the agent installed, optionally with filters field:$operator:value (os:$eq:Windows, hostname:$sw:LAPTOP, active:$eq:false).
Read the audit log
Reads Directory Insights events since a time, newest first: user portal and SSO sign-ins, device logins, admin changes, LDAP and RADIUS authentications, MDM and password manager events.
Write 4
Create, change or send.
Suspend or restore a userDeletes data
Suspends a user (suspended true): they can no longer sign in to the user portal, SSO apps, devices, LDAP or RADIUS; or restores them (false).
Unlock a user
Unlocks a user whose account was locked after too many wrong passwords, so they can sign in again.
Reset a user's MFADeletes data
Removes a user's TOTP authenticator so they must enroll a new one (a lost or replaced phone).
Add or remove a group memberDeletes data
Adds a user to a user group (op add), which gives them what the group grants, or removes them (op remove), which takes it away.
A person can approve first
Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything. Actions that delete data ask first by default.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Paste an API key from your JumpCloud account.
What you enter
- API key
Settings
- Region
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your JumpCloud data
Ask a question in plain words. The agent can find users, get a user or list user groups in JumpCloud, then answers with what it found.
- 02
Let an agent update JumpCloud
Have the agent unlock a user or suspend or restore a user in JumpCloud as part of a larger task. Turn on approval and a person signs off on each change first.
- 03
Share what it finds in Slack
Give one agent JumpCloud and Slack: it can find users in JumpCloud and post a summary to a Slack channel in the same run.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- Google Workspace Admin9 actionsManage people and groups in a Google Workspace domain.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- Vanta8 actionsTrack compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
FAQ
JumpCloud and MyDeepAgents
Can MyDeepAgents connect to JumpCloud?
Yes. The JumpCloud connector has 10 actions: 6 read and 4 make changes. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect JumpCloud?
Paste an API key from your JumpCloud account. You'll need: API key. The connection also asks for: Region. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in JumpCloud without asking?
Only if you let it. Each of the 4 actions that change data can be set to wait for a person's approval before it runs, and the 3 that delete data ask first by default.
Can I use JumpCloud in workflows as well as agents?
Yes. Every JumpCloud action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put JumpCloud to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.