How to Use the BoxyHQ (Enterprise SSO) MCP in CrewAI

Q: Can I limit which CrewAI agents have access to BoxyHQ (Enterprise SSO) MCP tools?

Yes, you can use a toolfilter with MCPServerHTTP to restrict tool access. For example, you can give your audit agent access to getconnections while reserving deleteconnection for your moderator agent.

Q: How do I connect this MCP Server to a Python-based CrewAI agent?

Install crewaitools and pass the Vinkius server URL in the agent's mcps list. CrewAI automatically discovers the BoxyHQ tools and makes them available for your agents to use during task execution.

Q: Can CrewAI agents handle SCIM group changes automatically with BoxyHQ (Enterprise SSO)?

Yes, your agents can use getdirectorygroups to monitor changes in the client's identity provider. If a group is removed, the agent can trigger internal workflows to clean up local permissions.

Q: How does this MCP setup protect our customer's directory data?

Vinkius processes directory payloads from getdirectoryusers using ephemeral sandboxing, so no SCIM data is written to persistent storage. Your CrewAI agents receive the data directly over encrypted channels, keeping your customer records secure.

Deploy a specialized crew of CrewAI agents to audit, configure, and monitor your BoxyHQ enterprise identity pipelines.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect BoxyHQ (Enterprise SSO) MCP to CrewAI

Create your Vinkius account to connect BoxyHQ (Enterprise SSO) to CrewAI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup BoxyHQ (Enterprise SSO) with CrewAI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Collaborative SSO Auditing and Provisioning

The `get_connections` tool pulls all active SAML and OIDC setups for your enterprise tenants. Your CrewAI audit agent reads this list to identify expired certificates or broken metadata endpoints across your customer base. Once the audit agent flags an issue, it hands the task to a provisioning agent. That agent uses `update_connection` to patch the certificates, so you don't have to manually chase down IT contacts.

Multi-Agent Directory Synchronization

The `create_directory` tool establishes SCIM linkages for new client organizations. Within your CrewAI team, an onboarding agent triggers this tool to generate the base SCIM credentials required by the client's identity provider. A second monitoring agent then tracks the synchronization progress by calling `get_directory_users`. This agent compares the returned user list against expected counts, alerting your support desk if any synchronization mismatch occurs.

Autonomous Connection Management via MCP Server

The `delete_connection` tool removes decommissioned enterprise SSO setups when a customer churns. A moderator agent executes this cleanup task only after a verification agent confirms the customer's account is closed. Before executing the deletion, the moderator agent runs `health_check` to ensure the platform is stable. This sequence prevents orphaned configurations and keeps your BoxyHQ instance clean without human intervention.

Setup guide

Set up BoxyHQ (Enterprise SSO) MCP in CrewAI

Prerequisites

Python 3.10+ installed
crewai package (pip install crewai)
Active Vinkius subscription with a valid endpoint token

1

Install CrewAI
Run pip install crewai to install the framework. MCP support is built-in via the mcps parameter.
2

Add the MCP URL to your agent
Pass your Vinkius endpoint directly to the mcps list. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. CrewAI handles tool discovery and caching automatically.
3

Kick off your crew
Create a Crew with your agent and tasks. Call crew.kickoff() — the agent will automatically invoke BoxyHQ (Enterprise SSO) tools as needed.

crew.py

from crewai import Agent, Task, Crew

agent = Agent(
    role="BoxyHQ (Enterprise SSO) Analyst",
    goal="Access and analyze BoxyHQ (Enterprise SSO) data via MCP.",
    backstory="Expert analyst with direct BoxyHQ (Enterprise SSO) access.",
    mcps=[
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ],
)

task = Task(
    description="List recent BoxyHQ (Enterprise SSO) transactions",
    agent=agent,
    expected_output="A summary of recent activity",
)

crew = Crew(agents=[agent], tasks=[task])
result = crew.kickoff()
print(result)

Get your connection token →

Prerequisites

Python 3.10+ installed
crewai + crewai-tools packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run pip install crewai crewai-tools. The MCPServerAdapter handles lifecycle management and tool conversion.
2

Connect with MCPServerAdapter
Use MCPServerAdapter as a context manager with SseServerParameters pointing to your Vinkius endpoint. The adapter automatically manages connection lifecycle.
3

Assign tools and run
Pass the returned mcp_tools to your agent's tools parameter. The adapter converts MCP tools to native BaseTool objects compatible with all CrewAI agents.

crew.py

from crewai import Agent, Task, Crew
from crewai_tools import MCPServerAdapter
from mcp import SseServerParameters

server_params = SseServerParameters(
    url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
)

with MCPServerAdapter(server_params) as mcp_tools:
    agent = Agent(
        role="BoxyHQ (Enterprise SSO) Analyst",
        goal="Access and analyze BoxyHQ (Enterprise SSO) data via MCP.",
        backstory="Expert analyst with direct BoxyHQ (Enterprise SSO) access.",
        tools=mcp_tools,
    )

    task = Task(
        description="List recent BoxyHQ (Enterprise SSO) transactions",
        agent=agent,
        expected_output="A summary of recent activity",
    )

    crew = Crew(agents=[agent], tasks=[task])
    result = crew.kickoff()
    print(result)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by BoxyHQ. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect BoxyHQ (Enterprise SSO) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about BoxyHQ (Enterprise SSO) MCP in CrewAI

Yes, you can use a `tool_filter` with `MCPServerHTTP` to restrict tool access. For example, you can give your audit agent access to `get_connections` while reserving `delete_connection` for your moderator agent.

You define a sequential or hierarchical process where an auditing agent first calls `get_directory_groups` to inspect roles, and a secondary agent uses that data to configure SAML connections via `add_connection`.

Install `crewai[tools]` and pass the Vinkius server URL in the agent's `mcps` list. CrewAI automatically discovers the BoxyHQ tools and makes them available for your agents to use during task execution.

Yes, your agents can use `get_directory_groups` to monitor changes in the client's identity provider. If a group is removed, the agent can trigger internal workflows to clean up local permissions.

Vinkius processes directory payloads from `get_directory_users` using ephemeral sandboxing, so no SCIM data is written to persistent storage. Your CrewAI agents receive the data directly over encrypted channels, keeping your customer records secure.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript