BoxyHQ (Enterprise SSO) MCP Server with 8 Tools for Claude, Cursor, and AI Agents
GDPR Free for SubscribersManage Enterprise SSO and Directory Sync (SCIM) via BoxyHQ — configure SAML/OIDC connections and automate user provisioning directly from your AI agent. Vinkius routes your AI agents directly to BoxyHQ (Enterprise SSO) through a governed connection. 8 tools ready to use with Claude, ChatGPT, Cursor, or any AI agent — no hosting, no setup, connect in 30 seconds.
Ask AI about this server
Compatible with every major AI agent and IDE
Gemini* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
What is the BoxyHQ MCP Server?
The BoxyHQ MCP Server routes AI agents like Claude, ChatGPT, and Cursor directly to BoxyHQ via 8 tools. Manage Enterprise SSO and Directory Sync (SCIM) via BoxyHQ — configure SAML/OIDC connections and automate user provisioning directly from your AI agent. Powered by Vinkius — your credentials stay on your side of the connection, every request is auditable. Connect in under 2 minutes.
Built-in capabilities (8)
Tools for your AI Agents to operate BoxyHQ
Ask your AI agent "Add a new SAML connection for tenant 'acme.com' and product 'saas-app' using metadata URL 'https://idp.com/metadata.xml'." and get the answer without opening a single dashboard. With 8 tools connected to real BoxyHQ data, your agents reason over live information, cross-reference it with other MCP servers, and deliver insights you would spend hours assembling manually.
Works with Claude, ChatGPT, Cursor, and any MCP-compatible client. Powered by Vinkius — your credentials never touch the AI model, every request is auditable. Connect in under two minutes.
Why teams choose Vinkius
One subscription gives you the infrastructure to connect your AI agents to thousands of MCP servers — and deploy your own to the Vinkius Edge. Your credentials stay yours. Your data flows directly between your agent and the API. DLP blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade routing and governance, zero maintenance.
Build your own MCP Server with our secure development framework →The BoxyHQ (Enterprise SSO) App Connector works with every AI agent you already use
…and any MCP-compatible client
Use all 8 BoxyHQ (Enterprise SSO) tools with your AI agents right now
Vinkius routes your AI agents to BoxyHQ (Enterprise SSO) through a governed proxy. Beyond a simple connection, you get full visibility into every action your agents perform, with enterprise-grade security and up to 60% savings on AI costs.
Add connection on BoxyHQ (Enterprise SSO)
Add a new SAML or OIDC connection
Create directory on BoxyHQ (Enterprise SSO)
0 protocol. Create a Directory Sync (SCIM) connection
Delete connection on BoxyHQ (Enterprise SSO)
Delete an SSO connection
Get connections on BoxyHQ (Enterprise SSO)
Get SSO connections
Get directory groups on BoxyHQ (Enterprise SSO)
List all groups for a tenant/product directory
Get directory users on BoxyHQ (Enterprise SSO)
List all users for a tenant/product directory
Health check on BoxyHQ (Enterprise SSO)
Check BoxyHQ service health
Update connection on BoxyHQ (Enterprise SSO)
Update an existing SSO connection
What the BoxyHQ (Enterprise SSO) MCP Server unlocks
Connect your BoxyHQ instance to any AI agent to streamline enterprise authentication and user lifecycle management through natural language.
What you can do
- SSO Connections — Add, update, and manage SAML and OIDC connections for specific tenants and products.
- Directory Sync (SCIM) — Create and configure SCIM 2.0 directories to automate user provisioning and de-provisioning.
- Connection Auditing — Retrieve detailed connection metadata using tenant IDs, product IDs, or client IDs.
- Metadata Management — Configure IdP metadata via raw XML (Base64) or direct metadata URLs for rapid deployment.
- Lifecycle Control — Update existing security configurations or delete stale connections to maintain a clean security posture.
How it works
1. Subscribe to this server
2. Enter your BoxyHQ Instance URL and API Key
3. Start managing enterprise identity workflows from Claude, Cursor, or any MCP-compatible client
Who is this for?
- Security Engineers — quickly audit and update SSO configurations across multiple tenants without manual dashboard navigation.
- DevOps & SREs — automate the creation of SCIM directories and SAML connections during customer onboarding.
- Product Managers — verify the status of enterprise integrations and connection health directly from the chat interface.
Frequently asked questions about the BoxyHQ (Enterprise SSO) MCP Server
Can I configure a SAML connection using just the metadata URL?
Yes! Use the add_connection tool and provide the metadataUrl. The server will fetch and process the IdP configuration automatically.
How do I find the clientID for an existing connection?
You can use the get_connections tool by providing the tenant and product IDs. It will return all matching connections including their unique clientIDs.
Does this support SCIM for automated user provisioning?
Absolutely. Use the create_directory tool to set up a SCIM 2.0 directory for providers like Okta, Azure AD, or Google, including webhook support for events.
More in this category
Google Pub/Sub Subscription
2 toolsThis MCP does exactly one thing: it pulls and acknowledges messages from a single Google Pub/Sub Subscription. That's its only function, and nothing else. Incredible for building secure AI workers.
Azure Cosmos DB Container
4 toolsThis MCP does exactly one thing: it manages documents in a single Azure Cosmos DB Container. That's its only function, and nothing else. Incredible for giving your AI a secure NoSQL database.
Azure Functions Invoke
1 toolsThis MCP does exactly one thing: it invokes a single Azure Function. That's its only function, and nothing else. Incredible for letting your AI execute secure serverless compute.
Google Cloud Logging Stream
1 toolsThis MCP does exactly one thing: it queries logs using Google Cloud Logging. That's its only function, and nothing else. Incredible for giving your AI secure observability.
You might also like
ChannelAdvisor (Rithum)
8 toolsManage multi-channel commerce via ChannelAdvisor — track products, inventory, and orders across global marketplaces directly from any AI agent.
Wayfront
10 toolsManage your parking operations with digital permits, enforcement tracking, and revenue analytics for parking facility operators.
Traefik Proxy
18 toolsMonitor and manage your Traefik Proxy infrastructure — inspect routers, services, and middlewares directly from your AI agent.
Apify Alternative
10 toolsManage your cloud automation — audit actors, tasks, and datasets via AI.
We built the connector to BoxyHQ (Enterprise SSO). Now put your agents to work. Fully governed.
Vinkius is the AI Gateway with managed hosting. Stop building connectors. Every connection runs inside eight layers of security.
Hosted, sandboxed, and live on AWS. You don't provision anything. You don't maintain anything. You connect.
Every tool call, every token, every response. Logged and auditable. Data flows direct from BoxyHQ (Enterprise SSO) to your agent. Nothing is stored on our side. Ever.
Eight governance layers on every request. Sensitive data redacted before it reaches the model. Kill switch if anything goes sideways. Always on.