Skip to main content

Announcing StackOne Defender: leading open-source prompt injection guard for your agent • Read More →

Connect

Connectors Agent Auth MCP Connector Builder

Optimize

Tool Discovery Falcon Engine

Secure

Defender
Connectors

HRIS / HCM

Employee Onboarding Employee Offboarding

Recruiting

Application Screening Interview Scheduling

Customer Support

Ticket Triage Voice Call Summarization

Sales & CRM

Deal Risk Scoring Lead Qualification

Accounting & Finance

Invoice Processing Month-End Accruals

Marketing

Campaign Reports Lead Nurture Sequences
View all use cases

Developers

Docs Changelog Status

Learn

Blog Case Studies Events Partners
Pricing
Login Book Demo Start Free

Rippling MCP Server
for AI Agents

Production-ready Rippling MCP server with 37 extensible actions — plus built-in authentication, security, and optimized execution.

Start Free Book Demo Read Docs →
Rippling logo
Rippling MCP Server
Built by StackOne StackOne

Coverage

37 Agent Actions

Create, read, update, and delete across Rippling — and extend your agent's capabilities with custom actions.

MCP Actions → Create Actions →

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Rippling MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Rippling tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Rippling call.

Tools Discovery →

What is the Rippling MCP Server?

A Rippling MCP server lets AI agents read and write Rippling data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Rippling MCP server ships with 37 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Rippling MCP Tools and Actions

Every action from Rippling's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.

Compensations

  • List Compensations

    Retrieves compensation information for workers

  • Get Compensation

    Retrieves detailed compensation data for a specific compensation record

Employment Types

  • List Employment Types

    Returns a paginated list of employment types

  • Retrieve Employment Type

    Retrieves details for a specific employment type by ID

Teams

  • List Teams

    Retrieves teams with parent-child relationships and hierarchies

  • Get Team

    Retrieves detailed information about a specific team

A Time Entrys

  • Update A Time Entry

    Updates an existing time entry by ID using partial update semantics

  • Delete A Time Entry

    Permanently deletes a time entry by ID

Users

  • List Users

    Retrieves a paginated list of all users in the system

  • Get User

    Fetches detailed user information including name, emails, and addresses

Workers

  • List Workers

    Retrieves a list of workers with filtering, expansion, and sorting capabilities

  • Get Worker

    Retrieves detailed information about a single worker by ID

Other (25)

  • Create A New Department

    Creates a new department within the organization

  • Create A New Leave Request

    Creates a new leave request and returns its ID and details

  • Create A New Time Entry

    Creates a new time entry and returns its ID and details

  • List Companies

    Retrieves a paginated list of companies representing the tenant organization on Rippling

  • List Departments

    Returns a paginated list of all departments within the organization

  • Retrieve A Specific Department

    Retrieves details for a specific department by ID

  • List Entitlements

    Retrieves app access entitlements for identity and access management

  • List Leave Balances

    Returns a paginated list of all leave balances within the organization

  • Retrieve A Specific Leave Balance

    Retrieves details for a specific leave balance by ID

  • List Leave Requests

    Returns a paginated list of all leave requests within the organization

  • Retrieve A Specific Leave Request

    Retrieves details for a specific leave request by ID

  • List Leave Types

    Returns a paginated list of all leave types within the organization

  • Retrieve A Specific Leave Type

    Retrieves details for a specific leave type by ID

  • List Levels

    Returns a paginated list of all levels within the organization

  • Retrieve A Specific Level

    Retrieves details for a specific level by ID

  • List Time Cards

    Returns a paginated list of all timecards for the organization

  • Retrieve A Specific Time Card

    Retrieves details for a specific timecard by ID

  • List Time Entries

    Returns a paginated list of all time entries for the organization

  • Retrieve A Specific Time Entry

    Retrieves details for a specific time entry by ID

  • List Tracks

    Returns a paginated list of all career tracks within the organization

  • Retrieve A Specific Track

    Retrieves details for a specific career track by ID

  • List Work Locations

    Returns a paginated list of all work locations configured for the organization

  • Retrieve A Specific Work Location

    Retrieves details for a specific work location by ID

  • Update A Department

    Updates a department within the organization by ID

  • Update A Leave Request

    Updates an existing leave request by ID

Set Up Your Rippling MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Rippling in under 10 lines of code.

MCP Clients

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

More HRIS / HCM MCP Servers

UKG Ready

140+ actions

Workday (Rest and Soap)

128+ actions

Factorial

127+ actions

HiBob

123+ actions

Oracle Fusion HCM

120+ actions

Humaans

117+ actions

BambooHR

100+ actions

All HRIS / HCM MCP Servers →

Rippling MCP Server Resources

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Indirect Prompt Injection Defense for MCP Tools: A Technical Guide

MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.

12 min

Rippling MCP Server FAQ

Rippling MCP server vs direct API integration — what's the difference?
A Rippling MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling Rippling. A Rippling MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling Rippling at runtime. StackOne provides both.
How does Rippling authentication work for AI agents?
Rippling authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Rippling account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are Rippling MCP tools vulnerable to prompt injection?
Yes — Rippling MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a Rippling agent and how do I avoid it?
Context bloat happens when Rippling tool schemas and API responses eat your Rippling agent's memory, preventing it from reasoning effectively. A single Rippling query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my Rippling agent can access?
Yes — you can limit which actions your Rippling agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Rippling MCP server?
Yes — you can create custom agent actions for your Rippling MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Rippling's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Rippling MCP server?
Skip a Rippling MCP server if your integration is purely software-to-software — direct Rippling API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Rippling actions at runtime.
What AI frameworks and AI clients does the StackOne Rippling MCP server support?
The StackOne Rippling MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo