Skip to main content

The #1 agentic semantic tool search: 91.6% first-try accuracy on S1 Search Bench Explore Tool Discovery

MCP Gateway

MCP Gateway
for Glean agents

One MCP gateway to connect Glean to 310+ enterprise SaaS apps. No auth hassle. Token-efficient by design. Security and governance built-in.

DrataGPLocalyzeFlipMindtoolsScreenloop

What is an MCP gateway?

An MCP gateway (also called an MCP aggregator) is a single endpoint that connects an AI agent to multiple MCP servers via the open Model Context Protocol (opens in new tab). Some gateways act as proxies, routing traffic to MCP servers customers operate themselves. Others provide the underlying MCP servers as a managed service.

StackOne is the managed kind. We provide pre-built MCP servers for 310+ enterprise SaaS apps, including ones with no official MCP server today. For each app you connect, StackOne provides the MCP protocol layer, the SaaS API integration, action coverage, and the auth orchestration framework. Authentication is configured per app per organization — your team registers OAuth credentials with the SaaS provider, links them in StackOne, and end users then authorize access through that flow. Once set up, the agent reaches every connected app through one URL, with token storage, refresh, and per-user scoping handled by StackOne.

StackOne's MCP gateway — SOC2, HIPAA, CCPA, and GDPR compliant — bundles 310+ pre-built SaaS integrations exposing 20,000+ actions, all reachable from your Glean agent through one URL.

Act across all your apps
from inside Glean

One MCP gateway, every enterprise SaaS your Glean agent
could ever need to act on.

Coverage

310+ connectors.
20,000+ tested actions.

Every action is built and maintained by StackOne, tested against the live API, and updated when vendors change their endpoints.

Browse all connectors

Trust

Auth & governance,
simplified.

StackOne handles OAuth, API keys, refresh, and scopes for every connector, giving enterprise IT full control through auth configs in a multi-tenant setup.

Agent Auth

Performance

Agent context window,
managed.

Tool Discovery and Code Mode keep the Glean agent's context lean — only relevant actions, no raw response noise. Sharper agents, lower token costs.

Tools Discovery

Security

Agent security,
built in.

Defender scans every MCP tool response for prompt injection in real time. Up to 97.44%¹ detection, 0.2% false positives. SOC2, HIPAA, CCPA, GDPR compliant.

Prompt Injection Defense

¹ Jayavibhav test, 65,000 samples.

Connect the Glean agent
to more apps in 4 steps

From auth config to first agent tool call in 5 minutes.

1

Add StackOne as a Custom MCP server in Glean.

Open Admin Console → Platform → Actions → Add → Import tools from MCP server, paste the StackOne gateway URL with OAuth, and import. Available immediately to every Glean Agent in your workspace.

Admin Console → Platform → Actions → Add

Import tools from MCP server

MCP server name
StackOne
MCP server URL
https://api.stackone.com/mcp/{...}
Authentication method
OAuth
Import
View setup guide (opens in new tab)
2

Connect each SaaS integration in StackOne.

OAuth or API key per app, done once in your dashboard. Tokens stay server-side.

salesforce
workday
stripe
datadog
greenhouse
Browse all connectors
3

Scope agent actions.

Read-only, specific objects, or per-role exposure. Toggle from the StackOne dashboard.

Read Salesforce opp (enabled)
Get Workday employee (enabled)
Read Stripe invoice (enabled)
Update CRM record (disabled)
Delete record (disabled)
Agent Auth
4

Ask your Glean agent in plain English.

StackOne maps your prompt to the right action in the right system. Done.

"Why did Acme Corp's renewal slip? Pull the open Salesforce opp and cross-reference with Stripe billing health."

Glean
salesforce_get_opportunity
Completed
stripe_list_invoices
Completed
customer: Acme Corp
last_6_invoices: 2 late payments (37d, 22d)
result: MRR flat YoY, no upsell SKUs

Surfaced renewal risk for Acme Corp: $480K opp stalled in Negotiation + 2 late invoices. Findable next time you search Glean for "Acme."

Get your Glean agent
to do more across your stack

Cross-app workflows your Glean agent now runs in seconds instead of click-throughs.

HR & People Operations

> Find the Workday manager + start date Glean's first-party catalog doesn't surface.

UKG ReadyWorkday (Rest and Soap)FactorialHiBobOracle Fusion HCMHumaansSAP SuccessFactorsClockify
Finance & Billing

> Cross-reference open Stripe invoices with the account renewal Glean already surfaced.

KlaviyoStripeMagentoSquareBigCommerceShopifyEventbriteWooCommerce
Revenue Systems

> Pull Salesforce opportunity context Glean's HubSpot partner doesn't cover.

SalesforceZoho CRMPipedriveFreshsalesHubSpotPardotCloseJustCall
DevOps & Observability

> Pull live Datadog APM context into the on-call's Glean search.

Azure DevOpsCloudflareLinearBitbucketSupabaseGitLabTerraformOneLogin

Connect any Enterprise AI Agent
to the StackOne MCP Gateway

Same 310+ MCP servers. Same agent context. Pick yours.

Frequently Asked Questions

Glean Agents act across enterprise SaaS through StackOne's MCP gateway. Setup happens in the Glean Admin Console: open Platform → Actions → Add → Import tools from MCP server, paste the StackOne gateway URL with OAuth, and import. Available immediately to every Glean Agent in your workspace, and 310+ pre-built SaaS connectors are reachable through that single connection. Full walkthrough in the Connect remote MCP servers to Glean docs. Available on Glean Enterprise; agent runs consume FlexCredits.
An MCP gateway (also called an MCP aggregator) is a single endpoint that connects an AI agent to multiple MCP servers via the Model Context Protocol. Some gateways route traffic to MCP servers customers operate themselves; others provide the MCP servers as a managed service. StackOne is the managed kind — we provide pre-built MCP servers for 310+ enterprise SaaS apps, including ones with no official MCP server today. Authentication is configured per app per organization: your team registers OAuth credentials with the SaaS provider, links them in StackOne, and end users authorize access through that flow. Once set up, the agent reaches every connected app through one URL.
Glean Agents can access enterprise SaaS like Salesforce, Workday, Stripe, Datadog, NetSuite, ServiceNow, Greenhouse, SAP SuccessFactors, and BambooHR through the StackOne MCP gateway — categories that complement Glean's 17 first-party MCP partners. 310+ pre-built connectors total. New connectors ship continuously, and you can build custom ones with AI Integration Builder. See all connectors.
Glean ships 17 first-party MCP partners (Amplitude, Asana, Atlassian Rovo, Box, Canva, ClickUp, GitHub, HubSpot, Intercom, Linear, Lucid, Monday, Notion, PagerDuty, ThoughtSpot, Udemy, WisdomAI). StackOne adds the other 310+ — every app reachable through one MCP server import instead of 17+ separate ones, auth managed once in the dashboard, and tool definitions loaded only when relevant to the prompt.
Credentials sit at three layers: the StackOne MCP server record (OAuth in Glean Admin Console → Platform → Actions, controlled by Glean platform admins), SaaS connector credentials (server-side in your StackOne dashboard), and per-user OAuth or session tokens (server-side, scoped per user). StackOne stores OAuth tokens and API keys, refreshes them automatically, and only exposes the actions you've authorized to the agent.
Skip the StackOne MCP gateway when any of these is true:
  • Glean's 17 first-party MCP partners (Amplitude, Asana, Atlassian Rovo, Box, Canva, ClickUp, GitHub, HubSpot, Intercom, Linear, Lucid, Monday, Notion, PagerDuty, ThoughtSpot, Udemy, WisdomAI) already cover your apps
  • You only use a handful of actions across a few apps
  • You don't need multi-tenancy, per-user permissions, or per-action scoping
  • Indirect prompt injection isn't a concern
  • Your MCP provider already does tool discovery and server-side execution to keep the agent context lean

Connect All Your Apps to Glean.

One MCP gateway, 310+ pre-built SaaS connectors. Set up in 5 minutes.