BoxyHQ (Enterprise SSO) MCP. Manage user identity and connections via chat.
Gemini Works with every AI agent you already use
…and any MCP-compatible client
Just plug in your AI agents and start using Vinkius.
BoxyHQ Enterprise SSO MCP manages user provisioning and enterprise authentication connections. Use your AI agent to configure SAML/OIDC, automate SCIM directories, audit existing tenants, and maintain a clean security posture without logging into multiple dashboards.
What your AI agents can do
Add connection
Creates a new Single Sign-On link using either SAML or OIDC protocols.
Create directory
Sets up a new Directory Sync (SCIM) connection to manage user identities.
Delete connection
Removes an existing Single Sign-On link from your system.
Add, update, or delete SAML and OIDC connections for specific tenants and products.
Create and configure directories to automatically provision and de-provision users from an identity source.
Retrieve detailed metadata on existing connections using tenant, product, or client IDs.
Update security settings or delete unused connections to keep your platform secure.
Ask AI about this MCP
Supported MCP Clients
OAuth 2.0 Compatible Gemini Waiting for input…
BoxyHQ (Enterprise SSO) MCP - 8 Tools
These tools let your agent manage every part of the BoxyHQ lifecycle: connecting new tenants, syncing user data, auditing status, and keeping configurations secure.
Make your AI actually useful.
Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.
Start using BoxyHQ (Enterprise SSO) on Vinkius019e386fadd connection
Creates a new Single Sign-On link using either SAML or OIDC protocols.
019e386fcreate directory
Sets up a new Directory Sync (SCIM) connection to manage user identities.
019e386fdelete connection
Removes an existing Single Sign-On link from your system.
019e386fget connections
Fetches a list of all active SSO connections managed by the account.
019e386fget directory groups
Lists all user groups within a specific tenant or product directory.
019e386fget directory users
Retrieves a list of users belonging to a specific directory.
019e386fhealth check
Runs a check to confirm that the BoxyHQ service is running correctly and accessible.
019e386fupdate connection
Modifies settings for an existing SSO connection, like changing metadata or keys.
Choose How to Get Started
Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.
Build Your Own
Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.
- Import from OpenAPI, Swagger, or YAML specs
- Create Agent Skills with progressive disclosure
- Deploy to edge with MCPFusion framework
- Built in DLP, auth, and compliance on every call
- Real time usage dashboard and cost metering
- Publish to catalog or keep private
Make Your AI Do More
Start with BoxyHQ (Enterprise SSO), then connect any of our 4,800+ other servers whenever your AI needs more. One click, no limits.
- Use this MCP plus 4,800+ others, all in one place
- Add new capabilities to your AI anytime you want
- Every connection is secured and compliant automatically
- Track usage and costs across all your servers
- Works with Claude, ChatGPT, Cursor, and more
- New servers added to the catalog every week
Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by BoxyHQ. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
VINKIUS INFRASTRUCTURE
Cloud Hosted
Managed infra
V8 Isolated
Sandboxed per request
Zero-Trust Proxy
No stored credentials
DLP Enforced
Policy on every call
GDPR Compliant
EU data residency
Token Compression
~60% cost reduction
Works with Claude, ChatGPT, Cursor, and more
The Model Context Protocol standardizes how applications expose capabilities to LLMs. Instead of operating in isolation, your AI gains direct access to external platforms, live data, and real-world actions through secure, standardized connections.
This server provides 8 capabilities that interface natively with Claude, ChatGPT, Cursor, and any MCP client. No middleware. No custom integration required.
Managing Enterprise Access Feels Like Clicking Forever
Today, managing identity is a nightmare of clicks. You have to log into Tenant A's dashboard to check the SAML settings; then switch over to Product B and click through multiple tabs to see if SCIM syncing is running. If you manage fifty clients, that means fifty separate logins, fifty sets of menus to navigate, and at least three hours just for auditing.
With this MCP, you ask your agent directly: 'Check the status of all SAML connections.' The answer comes back in plain text, listing everything needed. It takes the tedious work out of dashboard navigation and puts it into a simple conversation.
The BoxyHQ Enterprise SSO MCP Provides Full Control
You no longer have to manually update keys or delete old directories. The agent can handle the `update_connection` and `delete_connection` calls on your behalf, ensuring that stale access points are removed automatically.
It's simple: you state the intent ('We need a new OIDC connection'), and it executes the complex sequence of steps required to make it happen. You just get the result.
What you can do with this MCP connector
You can manage the entire lifecycle of your organization’s identity infrastructure through natural conversation. This MCP lets you handle complex authentication tasks—like adding new Single Sign-On connections or setting up user syncing directories—without ever touching a dashboard. Need to audit which products are connected? Ask your agent. Want to delete stale access points? Command it.
It handles the technical details of SAML and OIDC, making identity management simple. When you connect this MCP through Vinkius, you get one place to manage all your enterprise authentication needs from any compatible client.
019e386f-c220-732d-b0c9-db6a7568ec0c 
How BoxyHQ (Enterprise SSO) MCP Works
- 1 Subscribe to this MCP and provide your BoxyHQ Instance URL and API Key.
- 2 Your agent connects the credentials, giving it access to your identity workflows.
- 3 You simply instruct your AI client in natural language—for example, 'List all users for the Acme Corp directory.' — and get the result.
The bottom line is you use conversational commands instead of clicking through web dashboards.
Who Is BoxyHQ (Enterprise SSO) MCP For?
This MCP is critical for security engineers, DevOps specialists, and product managers who manage large-scale enterprise applications. If your job involves auditing access or provisioning users across multiple client accounts, this saves hours of manual work.
Quickly audit SSO configurations across dozens of tenants and update connection details without logging into the BoxyHQ dashboard.
Automate the creation of SCIM directories or SAML connections as part of a customer onboarding script, ensuring repeatable compliance.
Verify the status and health of enterprise integrations directly from chat to confirm connection uptime for high-value clients.
What Changes When You Connect
- Audit status instantly. Instead of navigating deep into menus to check connection health, you can run a
get_connectionscall to see all active tenants at a glance. - Automate onboarding scripts. Use the
create_directorytool to set up SCIM sync directories for new customers immediately, without manual setup steps. - Maintain clean security. You don't have to remember which connections are stale; you can run checks or use
delete_connectionto keep your system secure and tidy. - Handle any protocol. Whether it's SAML or OIDC, the MCP lets you manage both types of enterprise authentication connections using a single command structure.
- Deep visibility into users. If you need user lists, the MCP lets you
get_directory_usersor check group memberships withget_directory_groups, giving immediate data context.
Real-World Use Cases
A client is acquired and needs SSO setup.
The DevOps engineer runs into a new client's requirements. Instead of following a 15-step wizard in the dashboard, they ask their agent to 'Add a SAML connection for Client X using this metadata URL.' The agent handles the full add_connection process and confirms success.
Quarterly security audit is due.
The Security Engineer needs to confirm every single active connection. They use the MCP's get_connections tool, which immediately lists all tenants and their protocols, providing a full compliance report faster than manual clicking.
A product is decommissioned.
The Product Manager needs to confirm that no connections remain for an old service. They first run get_directory_users against the directory and then use the agent to issue a delete_connection command, confirming zero residual access.
New user base requires provisioning.
The SRE needs to onboard a whole department. They ask their agent to 'Create an SCIM directory for the HR department.' The MCP executes create_directory, setting up the automated sync and providing the necessary API endpoint immediately.
The Tradeoffs
Doing a manual audit.
The engineer logs into 10 different tenant dashboards, clicking through settings menus just to verify connection status for every product and client. This takes hours and is prone to human error.
→
Use the MCP's get_connections tool. It aggregates all required metadata—tenant IDs, product IDs, etc.—in one API call, giving you a single source of truth instantly.
Bypassing structured tools.
The developer tries to write raw code that calls the underlying APIs directly without using the defined tools. This creates undocumented endpoints and breaks when BoxyHQ updates its system.
→
Stick to the MCP's defined functions, like update_connection or add_connection. These methods handle all the necessary validation and sequencing for you.
Ignoring connection health.
A critical client suddenly loses SSO access, but no one knows if it’s a network issue or a configuration change. The team wastes time checking everything except the actual link status.
→
Start by running health_check. It confirms the general service is up. Then, use the MCP to check specific connection statuses.
When It Fits, When It Doesn't
Use this MCP if your core operational task involves managing enterprise-grade authentication and user identities across multiple distinct products or tenants. If you are responsible for SAML/OIDC setup, SCIM provisioning, or auditing compliance data, this is necessary. Don't use it if all you need to do is check one single connection status; in that case, a simple API call might be faster. However, if the task involves creating, reading, updating, or deleting resources—even multiple steps—the MCP provides the necessary structure and context for your agent to operate correctly.
Common Questions About BoxyHQ (Enterprise SSO) MCP
How do I check if BoxyHQ is working correctly using the add_connection tool? +
You shouldn't use add_connection for a simple status check. Run the health_check tool first to confirm service uptime. If that passes, you can then run get_connections to see if your specific links are active.
What is the difference between get_directory_users and get_directory_groups? +
The MCP separates these for clarity. Use get_directory_users when you need a list of individual user accounts. Use get_directory_groups if you only want to know what groups exist in that directory, like 'Admins' or 'Viewers'.
Can I update an existing connection using the update_connection tool? +
Yes, update_connection handles modifying settings for a live SSO link. This is useful when metadata URLs change or credentials need refreshing without deleting and recreating the entire connection.
If I add a new connection, does it automatically sync users? +
No. Adding an SSO link only sets up authentication (SAML/OIDC). You must separately use create_directory to set up SCIM syncing if you want user accounts provisioned.
If I need an audit trail, how do I use the `get_connections` tool to list all existing SSO connections? +
It immediately returns a comprehensive list of every active SAML and OIDC connection managed by your account. This is essential for security audits, allowing you to verify which tenants or products are currently connected without manually checking dashboards.
When should I use the `delete_connection` tool to maintain a clean security posture? +
Use this when an SSO connection is obsolete, broken, or no longer required for a specific tenant. Deleting stale connections prevents potential security risks and keeps your identity management records accurate.
What is the required flow when I use `create_directory` to set up a new SCIM sync directory? +
The tool successfully establishes the container for user synchronization. After creating the directory, you must then list users and groups using other tools to begin populating it with data from your source system.
Before executing a major change, how does using `health_check` confirm the overall BoxyHQ service readiness? +
It provides an immediate status report on the core services. Running this first ensures the API is operational and that connection management tools will execute successfully, preventing unnecessary failures.
Use it with your favorite AI tools
Connect this server to Cursor, Claude, VS Code, and more.