How to Use the CyberArk Privilege Cloud MCP in CrewAI

Deploy a specialized crew of agents to manage your CyberArk vault infrastructure.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect CyberArk Privilege Cloud MCP to CrewAI

Create your Vinkius account to connect CyberArk Privilege Cloud to CrewAI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup CyberArk Privilege Cloud with CrewAI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Role-based vault access in CrewAI

Assign a researcher agent to `list_accounts` and a security agent to `list_safes`. Your crew separates the tasks of discovery and auditing. This keeps your operations organized. You avoid cluttering your agents with irrelevant data by filtering the tools they have access to.

Automated session monitoring for CrewAI

Use `list_users` to track who is currently active in the PAM sessions. Your moderator agent evaluates these users against your known allow-list. When you find an unauthorized actor, the agent executes `terminate_session`. This happens in seconds without you lifting a finger.

Secure credential rotation with CrewAI

Call `get_account` to verify the state of your secrets before the crew interacts with them. This ensures your agents aren't trying to use expired or locked credentials. Your crew can handle the full lifecycle from auditing to decommissioning. Just use `delete_account` when you clear out your old systems.

Setup guide

Set up CyberArk Privilege Cloud MCP in CrewAI

Prerequisites

Python 3.10+ installed
crewai package (pip install crewai)
Active Vinkius subscription with a valid endpoint token

1

Install CrewAI
Run pip install crewai to install the framework. MCP support is built-in via the mcps parameter.
2

Add the MCP URL to your agent
Pass your Vinkius endpoint directly to the mcps list. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. CrewAI handles tool discovery and caching automatically.
3

Kick off your crew
Create a Crew with your agent and tasks. Call crew.kickoff() — the agent will automatically invoke CyberArk Privilege Cloud tools as needed.

crew.py

from crewai import Agent, Task, Crew

agent = Agent(
    role="CyberArk Privilege Cloud Analyst",
    goal="Access and analyze CyberArk Privilege Cloud data via MCP.",
    backstory="Expert analyst with direct CyberArk Privilege Cloud access.",
    mcps=[
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ],
)

task = Task(
    description="List recent CyberArk Privilege Cloud transactions",
    agent=agent,
    expected_output="A summary of recent activity",
)

crew = Crew(agents=[agent], tasks=[task])
result = crew.kickoff()
print(result)

Get your connection token →

Prerequisites

Python 3.10+ installed
crewai + crewai-tools packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run pip install crewai crewai-tools. The MCPServerAdapter handles lifecycle management and tool conversion.
2

Connect with MCPServerAdapter
Use MCPServerAdapter as a context manager with SseServerParameters pointing to your Vinkius endpoint. The adapter automatically manages connection lifecycle.
3

Assign tools and run
Pass the returned mcp_tools to your agent's tools parameter. The adapter converts MCP tools to native BaseTool objects compatible with all CrewAI agents.

crew.py

from crewai import Agent, Task, Crew
from crewai_tools import MCPServerAdapter
from mcp import SseServerParameters

server_params = SseServerParameters(
    url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
)

with MCPServerAdapter(server_params) as mcp_tools:
    agent = Agent(
        role="CyberArk Privilege Cloud Analyst",
        goal="Access and analyze CyberArk Privilege Cloud data via MCP.",
        backstory="Expert analyst with direct CyberArk Privilege Cloud access.",
        tools=mcp_tools,
    )

    task = Task(
        description="List recent CyberArk Privilege Cloud transactions",
        agent=agent,
        expected_output="A summary of recent activity",
    )

    crew = Crew(agents=[agent], tasks=[task])
    result = crew.kickoff()
    print(result)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by CyberArk. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect CyberArk Privilege Cloud now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about CyberArk Privilege Cloud MCP in CrewAI

You use tool filters in your agent configuration. This ensures that only the authorized agent can call sensitive functions like password retrieval.

Yes. Agents share the context of the vault state. One agent can find the secret and pass it to another for an automated maintenance task.

The server supports multiple transport types including SSE and HTTP. It fits right into your existing hierarchical or sequential agent structures.

The server triggers standard SIEM alerts for retrieval actions. Your agents operate within the audit trail defined by your vault policy.

The server processes credentials as transient variables. It never writes clear-text secrets to your disk or persistent agent memory.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript

Mastra AI sdk-typescript

Start using the CyberArk Privilege Cloud MCP today

We host it, we monitor it, we maintain it. You just paste one token.

Get started