SailPoint MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SAILPOINT_BASE_URL | Yes | The base URL of your SailPoint Identity Security Cloud tenant API (e.g., https://your-tenant.api.identitynow.com) | |
| SAILPOINT_CLIENT_ID | Yes | The Client ID generated from SailPoint Personal Access Tokens | |
| SAILPOINT_CLIENT_SECRET | Yes | The Client Secret generated from SailPoint Personal Access Tokens |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_identitiesB | List identities in SailPoint with optional filtering. Returns identity ID, name, email, lifecycle state, and manager information. |
| get_identityB | Get detailed information about a specific identity by ID, including attributes, accounts, and access. |
| list_accountsB | List accounts across all sources with filtering options. Returns account ID, name, source, identity owner, and status. |
| get_accountC | Get detailed information about a specific account including attributes and entitlements. |
| get_account_entitlementsC | List entitlements assigned to a specific account. |
| enable_accountC | Enable a disabled account. |
| disable_accountC | Disable an active account. |
| unlock_accountC | Unlock a locked account. |
| list_access_profilesC | List access profiles with optional filtering. Access profiles bundle entitlements for role-based access. |
| get_access_profileB | Get detailed information about a specific access profile including entitlements. |
| create_access_profileC | Create a new access profile. |
| list_rolesC | List roles with optional filtering. Roles bundle access profiles and entitlements for business functions. |
| get_roleB | Get detailed information about a specific role including access profiles and memberships. |
| get_role_assigned_identitiesC | List identities assigned to a specific role. |
| create_roleC | Create a new role. |
| list_certificationsB | List active certification reviews. Certifications are access review campaigns. |
| get_certificationC | Get detailed information about a specific certification including items to review. |
| list_certification_campaignsB | List certification campaigns with status and progress. |
| get_certification_campaignC | Get detailed information about a certification campaign including statistics. |
| list_workflowsC | List workflows (automation scripts) in the tenant. |
| get_workflowB | Get detailed information about a specific workflow including steps and triggers. |
| get_workflow_executionsC | List execution history for a specific workflow. |
| test_workflowC | Test a workflow with sample input. |
| list_sourcesC | List connected sources (identity repositories). Sources are the systems SailPoint connects to. |
| get_sourceB | Get detailed information about a specific source including connection status. |
| searchC | Perform a search across identities, accounts, access profiles, roles, or entitlements using query syntax. |
| search_aggregateC | Perform aggregate queries on search indices for analytics (counts, groupings, etc.). |
| list_entitlementsB | List entitlements (permissions/privileges) across sources. |
| get_entitlementC | Get detailed information about a specific entitlement. |
| list_access_requestsC | List access requests with status filtering. |
| create_access_requestC | Create a new access request for roles, access profiles, or entitlements. |
| list_identity_profilesC | List identity profiles (configurations for how identities are created/managed). |
| get_identity_profileB | Get detailed information about an identity profile including attribute mappings. |
| list_sod_policiesB | List Separation of Duties (SOD) policies for compliance monitoring. |
| get_sod_policyC | Get detailed information about a specific SOD policy. |
| list_sod_violationsC | List SOD violations for review and remediation. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 36 tools
Every tool has a clearly distinct purpose with no ambiguity. Tools are well-organized around specific SailPoint resources (e.g., access profiles, roles, accounts, identities) and actions (create, get, list, enable/disable), making it easy for an agent to select the correct tool for any given task without confusion.
Tool names follow a highly consistent verb_noun pattern throughout, such as create_access_profile, get_account, list_identities, and disable_account. This predictable naming convention enhances readability and usability for agents, with no deviations or mixed styles observed.
With 36 tools, the count is slightly high but reasonable for a comprehensive identity governance platform like SailPoint. It covers a wide range of operations across multiple resource types, though it may feel heavy compared to simpler servers; however, each tool appears to serve a specific purpose in the domain.
The tool surface provides complete CRUD/lifecycle coverage for SailPoint's domain, including creation, retrieval, listing, and management actions for key resources like identities, accounts, roles, and access profiles. It also includes specialized operations such as search, testing workflows, and handling certifications, with no obvious gaps that would hinder agent workflows.