LastPass

Live 32 Actions

LastPass Integration for AI Agents

Connect your AI agent to 32 production-ready LastPass actions via MCP, A2A, or SDK — with agent authentication, optimized tool-calling execution, and built-in security.

Start Free Book Demo LastPass MCP Server

LastPass AI Agent Actions

32 production-ready actions for your agent to do more on LastPass.

Start Free Book a Demo LastPass MCP server

32 Actions

Get Event Report - Retrieve audit event logs from the LastPass Business account

List Groups - Retrieve user data containing group memberships from the LastPass Business account

Get Group - Retrieve user data to look up a specific group from the LastPass Business account

Batch Change Group Membership - Add or remove users from groups in bulk

Get Current Credentials - Return the authentication type and identity for the current LastPass connection. LastPass provisioning API uses account-level credentials (CID + provisioning hash) rather than user-bound credentials — there is no "current user" concept. The auth_type is api_key. The name reflects the CID account number. Confirms credentials are valid via a getuserdata probe.

List IAM Groups - List all groups in the LastPass Business account, mapped to the StackOne IAM unified group schema. Wraps cmd=getuserdata and extracts the Groups object. Groups are identified by name (LastPass has no numeric group ID). Returns group name; created_at, updated_at, description, and roles are not exposed by the API.

Get IAM Group - Retrieve a single LastPass group by its name (used as ID), mapped to the StackOne IAM unified group schema. Wraps cmd=getuserdata and extracts the named group from the Groups object by key.

List IAM Organizations - Return the single LastPass Business account organization, mapped to the StackOne IAM unified organization schema. LastPass is a single-tenant product — one account = one organization identified by the CID (Company ID). Performs a getuserdata auth probe to confirm credentials. Returns id and name derived from the CID; created_at and updated_at are not exposed by the API.

Get IAM Organization - Retrieve the single LastPass Business account organization by its CID. LastPass has one organization per account — pass the CID from unified_list_organizations as the id. Performs a getuserdata auth probe to confirm credentials.

List IAM Resource Users (Shared Folder Members) - List users and groups that have access to LastPass shared folders, mapped to the StackOne IAM unified resource_users schema. Wraps cmd=getsfdata. Each entry represents a user or group permission on a specific shared folder, with role derived from the permission flags (can_administer → admin, give → editor, readonly → viewer). Pass resource_id to filter to a specific shared folder by its ID (client-side, getsfdata returns all folders).

List IAM Resource Types - Return the LastPass resource types available for IAM permission checks. LastPass exposes one resource type — shared_folder — representing shared vaults that users and groups can be granted access to. Performs a getuserdata auth probe to confirm credentials.

List IAM Roles - Return the two stable LastPass account-level IAM roles — admin and basic — synthesized from the admin flag on user records. LastPass has no native roles API. Shared-folder permission roles (can_administer, give, readonly) are surfaced per resource via unified_list_resource_users. Performs a getuserdata auth probe so 401/403 surfaces when credentials are bad.

Get IAM Role - Retrieve a single synthesized LastPass IAM role by its stable key. Only "admin" and "basic" are valid — any other id is rejected with a 400. Performs a getuserdata auth probe so 401/403 surfaces when credentials are bad.

List IAM Users - List all users in the LastPass Business account, mapped to the StackOne IAM unified user schema. Wraps the LastPass Provisioning API cmd=getuserdata. Returns identity, admin status, disabled/active status, created date, last login, and group memberships. Roles are synthesized from the admin flag (admin or basic). Supports optional filtering by email address (applied client-side).

Get IAM User - Retrieve a single LastPass user by their composite ID, mapped to the StackOne IAM unified user schema. The composite ID encodes the numeric userId. Wraps cmd=getuserdata and extracts the matching user record from the Users map by the userId key.

List Policies - Retrieve shared folder data containing permission sets from the LastPass Business account

Get Policy - Retrieve shared folder data to look up a specific policy by ID

List Roles - Retrieve shared folder data containing role permission sets from the LastPass Business account

Get Role - Retrieve shared folder data to look up a specific role by ID

Get Shared Folder Data - Retrieve a list of all shared folders in the LastPass Business account

Get Detailed Shared Folder Data - Retrieve detailed information about all shared folders including sites and permissions

Push Sites To Users - Distribute credential entries (sites) to users in the LastPass Business account

Get User Data - Retrieve account details for all users in the LastPass Business account

Batch Add Users - Create one or more new users in the LastPass Business account

Update User - Update attributes for an existing user in the LastPass Business account

Delete User - Delete a user from the LastPass Business account

Bulk Delete Users - Delete multiple users from the LastPass Business account in a single call

Disable User - Deactivate a user account while preserving their vault data

Enable User - Re-enable a previously disabled user account

Reinvite User - Resend an invitation email to a user who has not yet accepted

Disable Multifactor Authentication - Disable multifactor authentication for a user

Reset Password - Send a master password reset email to a user

Do More, Build Less

Integration Infrastructure for LastPass AI Agents

Multiple Interfaces

Access integrations via API, AI SDKs, MCP & A2A.

LastPass MCP server

Managed Authentication

Pre-built authentication UI.

Agent auth

Falcon Engine

Every LastPass action runs on Falcon.

Agent Execution Engine

StackOne Defender

88.7% prompt injection detection.

Prompt injection defense

"What impressed us most about StackOne is its ambition and clarity. They're creating infrastructure that modern software and the entire AI agent ecosystem can rely on. The depth of secure integrations, the pace of delivery, and the team's foresight into AI's future uniquely position StackOne to redefine this category."

Luna Schmid, Partner at GV

"We've been impressed by how quickly and deeply StackOne integrates with complex enterprise systems -- and now, with their focus on agent-to-agent interoperability, they're unlocking even more powerful use cases for customers. StackOne delivers all of the above in a universal layer -- without compromise."