# Atlassian Crowd MCP for AI Agents AI Agent Connect

> Atlassian Crowd MCP lets you manage corporate user directories, security groups, and account provisioning through your AI agent. It connects to the Atlassian Crowd API so you can handle identity management, audit memberships, and search for user attributes using natural language instead of clicking through a complex admin console.

## Overview
- **Category:** industry-titans
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_LcsW9MFsfwq7wfCKODJkLdU73lTys856Y032VAlx/ai-agent-connect
- **Tags:** sso, user-provisioning, directory-services, iam, group-management, access-control

## Description

You can manage your corporate user directories and security groups through a chat interface. Instead of logging into a complex admin console to handle manual tickets, you can tell your agent to add a new hire to the engineering group or pull a list of everyone with admin access. This Connector handles the heavy lifting of interacting with the Atlassian Crowd API so you don't have to. It's one of the many tools available in the Vinkius catalog that turns manual identity management into a conversation. You can search for users by specific attributes, audit group memberships, and keep your directory clean by identifying inactive accounts. It moves the work of identity and access management into a simple dialogue, letting you focus on high-level security rather than manual data entry.

## Tools

### list_inactive_users
List all disabled or inactive user accounts. Use this to find accounts that need to be removed for security.

### create_new_user
Provision a new user account in Crowd. This helps you set up new employees quickly with specific attributes.

### get_group_details
Get details for a specific group. Use this to see the settings and members of a security group.

### get_user_details
Get full profile and attributes for a specific user. This lets you see exactly what data is stored for an individual.

### list_group_members
List all users who are members of a specific group. It's the fastest way to see who has access to a specific resource.

### list_all_groups
List all security and organizational groups. This provides a complete overview of your group structure.

### list_user_memberships
List all groups a specific user belongs to. This helps you verify what permissions a person currently holds.

### list_active_users
List all active users managed in Crowd. This gives you a high level view of your current user base.

### search_users_by_name
Search for users whose name starts with a prefix. This is great for finding people when you only know part of their name.

### search_users_by_attribute
Search for users using a CQL-like restriction string. Use this to filter your directory by specific criteria like department.

## Prompt Examples

**Prompt:** 
```
Can you add a new user named 'Alex Rivera' to the 'Engineering' group?
```

**Response:** 
```
I've successfully provisioned the new account for **Alex Rivera**. 

- **Status**: Active
- **Primary Group**: Engineering
- **Attributes**: Assigned to North America region.

Would you like me to add them to any other security groups?
```

**Prompt:** 
```
Who is currently in the 'Admin-Access' group?
```

**Response:** 
```
Here are the members of the **Admin-Access** group:

| Name | Status | Role |
| :--- | :--- | :--- |
| jsmith | Active | System Admin |
| lchen | Active | Security Lead |
| rgarcia | Inactive | Former Admin |

Note: **rgarcia** is currently listed as inactive. Should I remove them?
```

**Prompt:** 
```
Find all users who are part of the 'Finance' group but aren't in the 'HR' group.
```

**Response:** 
```
I've filtered the directory for you. There are **14 users** who belong to the **Finance** group but do not have membership in the **HR** group.

Would you like to see the full list of names and email addresses for these users?
```

## Capabilities

### Provision new accounts
Create new user profiles with specific attributes using natural language.

### Audit group memberships
See exactly who belongs to which security or organizational group.

### Search user attributes
Filter your directory to find specific people based on custom criteria.

### Identify inactive users
Get a list of all disabled or inactive accounts to help with directory cleanup.

### Verify user permissions
Check every group a specific user belongs to in one go.

## Use Cases

### Automated new hire onboarding
An IT admin asks the agent to create a new user account with 'Engineering' attributes and add them to the 'Dev-Team' group using create_new_user.

### Security access audit
A security analyst asks the agent to list all members of the 'Admin' group and verify if any inactive accounts are still listed using list_group_members.

### Directory cleanup project
A manager asks the agent to find all inactive users and list their details so they can be removed from the system using list_inactive_users.

### Permission verification
A DevOps engineer asks the agent to check which groups a specific contractor belongs to before granting them temporary access using list_user_memberships.

## Benefits

- Faster onboarding: Use create_new_user to set up new employee accounts in seconds instead of filling out manual forms.
- Simplified audits: Use list_group_members to instantly see who has access to sensitive groups during security reviews.
- Precise filtering: Use search_users_by_attribute to find specific users by department, location, or any other custom field.
- Easier cleanup: Use list_inactive_users to identify and remove stale accounts, keeping your directory clean and secure.
- Instant membership checks: Use list_user_memberships to verify exactly what groups a person belongs to without searching.
- Complete visibility: Use list_all_groups to get a full overview of your organizational structure in one simple request.

## How It Works

The bottom line is you get a conversational interface for complex identity and access management.

1. Connect the Atlassian Crowd integration to your preferred AI client.
2. Provide your Crowd Base URL, Application Name, and Application Password for authorization.
3. Ask your agent to perform tasks like listing active users or provisioning new accounts.

## Frequently Asked Questions

**Can I use Atlassian Crowd MCP to manage my Jira users?**
This Connector is specifically for Atlassian Crowd, which is an identity management and SSO platform. While Crowd often manages users for Jira, this tool interacts with the Crowd directory directly rather than Jira's internal project settings.

**How does Atlassian Crowd MCP help with security audits?**
It allows you to instantly query group memberships and search for specific user attributes. You can quickly identify who has access to sensitive groups or find users with specific permissions across your entire directory.

**Can I automate new hire onboarding with Atlassian Crowd MCP?**
Yes, you can use the tool to provision new accounts and assign them to specific groups via natural language. This replaces the need to manually enter user details into the Crowd admin console for every new employee.

**Does Atlassian Crowd MCP support searching by specific attributes?**
Yes, it can filter your user directory based on specific criteria. You can find users by name prefixes or use more complex attribute-based searches to locate specific people in your organization.

**How do I find inactive accounts using Atlassian Crowd MCP?**
You can simply ask your agent to list inactive users. The tool will pull a list of all disabled or inactive accounts from your Crowd directory, helping you keep your identity management clean and secure.

**Is Atlassian Crowd MCP good for managing SSO groups?**
Exactly. It is designed to manage your security and organizational groups. You can use it to audit memberships, view group details, and ensure that only the right people have access to your SSO-connected resources.

**How do I register an application in Crowd?**
Log in to the Crowd console as an administrator, navigate to **Applications**, and click **Add Application**. Follow the wizard to define the name and password used for this integration.

**What permissions are required?**
The application registered in Crowd must have the 'Allow to authenticate users' permission and be mapped to the directories you want the agent to manage.

**Can the agent reset user passwords?**
Currently, the integration supports creating users with an initial password. Direct password resets for existing users should be handled via the Crowd console or self-service portal.