Grouper MCP server - administrator guide
- 1 Introduction
- 2 Enabling the MCP server
- 3 Configuration
- 4 Authorization groups
- 5 SQL readonly tools
- 6 Document search tools (RAG)
- 7 LDAP tools
- 8 Admin tools
- 9 External system user lookup
- 9.1 Configuration
- 9.2 Tool reference
- 9.2.1 Action: listExternalSystems
- 9.2.2 Action: getUser
- 9.3 Example configurations
- 9.3.1 Azure (Microsoft Entra ID)
- 9.3.2 Duo
- 9.3.3 SCIM 2.0
- 9.3.4 Box
- 9.3.5 Google (Workspace)
- 9.3.6 FreshService Requesters
- 9.3.7 Remedy (BMC ITSM)
- 9.3.8 Remedy Digital Marketplace
- 9.3.9 TeamDynamix
- 9.3.10 AssetSonar
- 9.3.11 Smartsheet
- 10 Institutional tools (GSH templates)
- 10.1 Requirements
- 10.2 Authorization levels
- 10.3 Configuration
- 10.3.1 Calls which change nothing (mcpReadonlyWhen)
- 10.3.1.1 What it does
- 10.3.1.2 How a call is matched
- 10.3.1.3 What you are promising
- 10.3.1.4 Example
- 10.3.2 Input scope restrictions
- 10.3.1 Calls which change nothing (mcpReadonlyWhen)
- 10.4 How it works
- 10.5 Example configuration
- 11 Protected resources
- 12 Audit logging
- 12.1 Audit table columns
- 12.2 Cleanup
- 13 Throttling
- 14 Registration security
- 15 Multi-container / load-balanced deployments
- 15.1 Diagnostics