Connect
Optimize
Secure
Personio MCP Server
for AI Agents
Production-ready Personio MCP server with 54 extensible actions — plus built-in authentication, security, and optimized execution.
Personio MCP Server
Built by 
StackOne
StackOne 
Coverage
54 Agent Actions
Create, read, update, and delete across Personio — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Personio MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Personio tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Personio call.
Tools Discovery →What is the Personio MCP Server?
A Personio MCP server lets AI agents read and write Personio data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Personio MCP server ships with 54 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Personio MCP Tools and Actions
Every action from Personio's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Absence Types
- Get Absence Type
Retrieve a specific absence type by ID.
- List Absence Types
Retrieve all available absence types configured in Personio.
Absence Periods
- Create Absence Period
Create a new absence period for a person.
- List Absence Periods
Retrieve absence periods with comprehensive filtering options.
- Get Absence Period
Retrieve a specific absence period by ID.
- Update Absence Period
Update an existing absence period.
- Delete Absence Period
Remove an absence period by ID.
Attendance Periods
- Create Attendance Period
Create a new attendance period for an employee.
- List Attendance Periods
Retrieve attendance periods with comprehensive filtering options.
- Get Attendance Period
Retrieve a specific attendance period by ID.
- Update Attendance Period
Update an existing attendance period.
- Delete Attendance Period
Remove an attendance period.
Compensations
- Create Compensation
Create a new compensation record for a person.
- List Compensations
Retrieve compensation records for persons within a date range.
Compensation Types
- Create Compensation Type
Create a new compensation type in Personio.
- List Compensation Types
Retrieve all available compensation types configured in Personio.
Documents
- Upload Document
Upload a document for a company employee.
- List Documents
Retrieve document metadata with filtering and pagination.
- Download Document
Download a document file from Personio document management.
- Delete Document
Delete a document from Personio document management.
Employees
- Create Employee
Create a new person with initial employment record in Personio.
- List Employees
Retrieve a paginated list of all persons with their attributes.
- Update Employee
Update person-level information for an existing employee.
Persons
- Get Person
Retrieve a specific person by ID with full details including custom attributes.
- Delete Person
Permanently delete a person record from Personio.
Employments
- Get Employment
Retrieve a specific employment record with full details.
- Update Employment
Update employment details for an existing person.
Projects
- Create Project
Create a project and return the newly created project ID.
- List Projects
Retrieve time tracking projects with filtering and pagination.
- Get Project
Retrieve a specific project by ID.
- Update Project
Update a project by the provided project ID.
- Delete Project
Remove a project and all its sub-projects by ID.
Project Members
- Add Project Members
Add members to a project by providing a list of person IDs.
- List Project Members
Retrieve all members assigned to a specific project.
- Remove Project Members
Remove members from a project, either individually or all at once.
Applications
- List Applications
Retrieve all recruiting applications with filtering and pagination.
- Get Application
Retrieve a specific recruiting application by ID.
Candidates
- List Candidates
Retrieve all recruiting candidates with filtering and pagination.
- Get Candidate
Retrieve a specific recruiting candidate by ID.
Jobs
- List Jobs
Retrieve all recruiting jobs with filtering and pagination.
- Get Job
Retrieve a specific recruiting job by ID.
Other (13)
- Get Absence Period Breakdowns
Retrieve detailed daily breakdown for an absence period.
- Get Absence Balance
Retrieve the absence balance for a specific employee across all absence types.
- List Cost Centers
Retrieve all cost centers with filtering and pagination.
- List Document Categories
Retrieve all document categories for the company.
- List Legal Entities
Retrieve all legal entities configured in Personio.
- Get Legal Entity
Retrieve a specific legal entity by ID.
- List Employee Attributes
List all allowed employee attributes including custom (dynamic) attributes.
- List Person Employments
Retrieve all employment records for a specific person.
- Get Application Stage Transitions
Retrieve stage transition history for a recruiting application.
- List Categories
Retrieve all recruiting job categories with their pipeline stages.
- Get Category
Retrieve a specific recruiting job category by ID.
- List Workplaces
Retrieve all workplaces with filtering and pagination.
- Update Document Metadata
Update metadata for an existing document.
Set Up Your Personio MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Personio in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More HRIS / HCM MCP Servers
UKG Ready
140+ actions
Workday (Rest and Soap)
128+ actions
Factorial
127+ actions
HiBob
123+ actions
Oracle Fusion HCM
120+ actions
Humaans
117+ actions
BambooHR
100+ actions
Personio MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
Personio MCP Server FAQ
Personio MCP server vs direct API integration — what's the difference?
A Personio MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Personio. A Personio MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Personio at runtime. StackOne provides both.
How does Personio authentication work for AI agents?
Personio authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Personio account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are Personio MCP tools vulnerable to prompt injection?
Yes — Personio MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Personio agent and how do I avoid it?
Context bloat happens when Personio tool schemas and API responses eat your Personio agent's memory, preventing it from reasoning effectively. A single Personio query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Personio agent can access?
Yes — you can limit which actions your Personio agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Personio MCP server?
Yes — you can create custom agent actions for your Personio MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Personio's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Personio MCP server?
Skip a Personio MCP server if your integration is purely software-to-software — direct Personio API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Personio actions at runtime.
What AI frameworks and AI clients does the StackOne Personio MCP server support?
The StackOne Personio MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.