Can Lyro actually enroll a new device in JumpCloud?

No, and neither can anything else over the API. JumpCloud does not support creating systems through its REST API - devices are enrolled by installing the JumpCloud Agent on each one. The Create System action validates your credentials and returns the enrollment instructions, documentation links, and Connect key guidance instead.

Can Lyro delete any role in JumpCloud?

Only custom ones. Built-in system roles such as Administrator, Read Only, and Manager cannot be deleted, so Delete Role applies to roles your own organization created and nothing else.

What stops a role from being deleted while someone is still using it?

The API does not check, so the check has to happen before the call: a role should be confirmed unassigned first, because the removal is permanent. Delete Role is also idempotent - deleting a role that does not exist returns success, with a 404 treated as a successful deletion - so a success message alone is not proof the intended role was removed.

Can Lyro provision users or reset passwords in JumpCloud?

No. The connected toolkit exposes two actions, Create System and Delete Role, so this connection covers enrollment guidance and custom-role deletion. User provisioning, password resets, device policy changes, and group membership are not part of it.

Jumpcloud MCP integration

Validates API credentials, returns the real device-enrollment steps with Connect key guidance, and permanently removes a custom role by ID.

Connect Jumpcloud See all integrations

2actions available

What your agent can do with Jumpcloud

Every action runs live through MCP. Nothing to build, nothing to maintain.

Create system
Lyro guides an IT admin through system enrollment in JumpCloud during onboarding support. New machines join the directory immediately without manual credential entry or ticket delays.

See all 2 actions

How businesses use Jumpcloud + Lyro

Each card is one request a support team gets, and the Jumpcloud actions Lyro runs to close it.

Answer how a new device actually gets enrolled
Lyro validates the API credentials and returns JumpCloud's agent-installation instructions with documentation links and Connect key guidance, so the person asking gets the real process rather than a wrong answer.
Create SystemDelete Role
Retire a custom role that is no longer needed
Once it is clear no administrator still holds the role, Lyro deletes it by ID. The call is idempotent, so re-running it against a role that is already gone returns success rather than an error.
Delete RoleCreate System
Check the credentials before an access change
The enrollment action performs a credential validation check on its own, so Lyro can confirm the connection is authorized and working before it attempts anything destructive like removing a role.
Create SystemDelete Role

How it works

Get started in 3 steps

Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Lyro reads the Jumpcloud actions it has and picks the ones a request needs.

01
Connect Jumpcloud
Authorize the Jumpcloud account your team already uses — one consent screen, no API keys, no mapping tables. Lyro can only do what you granted that account, and you can disconnect it at any time.
02
Tell your agent what you need
Describe the job the way you would hand it to a teammate. Lyro maps it to the Jumpcloud actions that close it and chains as many as the request needs.
03
Watch it work
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started free

Jumpcloud · Lyro

Everything else about Jumpcloud

Setup, permissions, and the limits of what Lyro can do inside Jumpcloud.

No, and neither can anything else over the API. JumpCloud does not support creating systems through its REST API - devices are enrolled by installing the JumpCloud Agent on each one. The Create System action validates your credentials and returns the enrollment instructions, documentation links, and Connect key guidance instead.

Every action available in Jumpcloud

All 2 actions your agent can call on Jumpcloud, straight from the live MCP connection.

Create system
Validates credentials and provides guidance for enrolling systems in JumpCloud.
Delete role
Deletes a specific custom role from JumpCloud by its ID.