Priya starts Wednesday. Marcus’s last day is Friday. Finance wants a group that only finance can post to. A few months ago that meant three tabs and most of an afternoon. Now it’s one message to your AI assistant.
In May we gave your AI a way to read your ShiftControl data, plus one write for subscription costs, and said more was coming. It’s here. The ShiftControl MCP server can now do most of the day-to-day admin work you’d do in the web app, across Google Workspace and JumpCloud. You ask, your AI proposes the change, you say yes, and it’s done. This is AI-first administration, where the tedious part of the job is a sentence instead of a checklist.
What You Can Ask
- “Onboard Priya Sharma. Create her account, add her to Sales and the all-staff group, give her Salesforce and Slack, and send her the sign-in email.”
- “Marcus leaves Friday at 5pm. Schedule his suspension, and when we delete the account, hand his Google files to his manager.”
- “Who has access to Figma, and how did they get it?”
- “Make the finance group invitation-only.”
- “Approve the pending access requests for Notion.”
- “Dana is locked out of JumpCloud. Unlock her and send a fresh sign-in email.”
You don’t need to know which tool does what. Your AI picks them, and tells you what it’s about to change.
What’s Covered
- People. Create, update, suspend, reactivate and delete accounts. Schedule a suspension or activation for a date and time. Unlock accounts, send password resets and sign-in emails, sign people out, and change someone’s ShiftControl role. When someone leaves, your AI can hand their Google data to a colleague and follow the deletion through to the end.
- Groups. Create and edit groups, manage members and nested groups, set dynamic rules, change email addresses and aliases, and adjust Google group settings, one group or many at once. Tag groups and link them to the right team, location or department.
- Apps and access. Add apps from the catalog, update their details and costs, give people and groups access, and see who has access and why. Block a risky third-party Google app when you spot one.
- Requests. See pending work items, then approve or deny them.
- Org structure. Departments, teams and locations, along with the groups behind them.
How It Works
- Same permissions as you. Your AI acts as you. If your role can’t do something in the web app, it can’t do it here.
- Your AI asks before it changes anything. Looking things up never changes anything. Every tool that makes a change requires an explicit confirmation, so your AI proposes the change and waits for your go-ahead before it runs.
- Works across your directories. Google Workspace, JumpCloud, or both. When a change touches more than one, your AI tells you what happened in each.
- On the record. Changes made through your AI are recorded in the audit log, tagged as coming through the MCP server.
- Answers you can read. Lists come back as tables with names instead of IDs. When something can’t be done, your AI explains why in plain words and tells you nothing was changed.
Getting Started
- In your AI tool (Claude, Cursor, or any client that supports MCP), add a remote server:
https://mcp.shiftcontrol.io/mcp. - Choose Login with ShiftControl and approve the consent screen once.
- Start small, like “Who is in the finance group?”, then work up to onboarding.
Setup steps for each tool are in the MCP docs. Already connected? Start a new chat and your AI will pick up the new abilities.
Not everything is here yet. Some tasks still live only in the web app today, such as device management and the security health checks. If there’s something you’d like to hand to your AI next, tell us.