Lastpass MCP server

Connect Lastpass to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Lastpass MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the provision users tool in Lastpass
  • Use the manage user tool in Lastpass
  • Use the deprovision user tool in Lastpass
  • Use the get shared folders tool in Lastpass
  • Use the get users tool in Lastpass
  • Use the manage group membership tool in Lastpass

Supported Tools

provision_users

Provision Users

Create new user accounts in LastPass Enterprise. Add one or more users by email, optionally assigning them to groups and setting a full name. New users may receive activation emails; notifications and audit history cannot be rolled back.

manage_user

Manage User

Perform administrative actions on a LastPass user account. Reset the master password, disable multifactor authentication, or disable the user account.

deprovision_user

Deprovision User

Remove or deactivate a user from the LastPass Enterprise account. Choose between deactivating (blocks login, retains data), removing (removes from enterprise but keeps personal account), or fully deleting the account.

get_shared_folders

Get Shared Folders

Retrieve all shared folders in the LastPass Enterprise account with their user permissions (read-only, admin, give access), and security scores.

get_users

Get Users

Retrieve user account data from LastPass Enterprise. Fetch a specific user by email or one page of administrative user metadata, login history, group memberships, and account status. This does not read vault contents.

manage_group_membership

Manage Group Membership

Add or remove users from groups in LastPass Enterprise. Supports batch operations to modify group memberships for multiple users at once.

get_event_report

Get Event Report

Query the audit event log for the LastPass Enterprise account. Retrieve events such as login attempts, password changes, shared folder activity, and administrative actions within a specified date range, using the account reporting time zone. Optionally filter by user and continue with the native next cursor.

Connect Lastpass to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Lastpass in Metorial. In your Metorial portal, enable the Lastpass MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Lastpass tools.

Run Lastpass through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Lastpass and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Lastpass tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Lastpass

Supabase

Manage PostgreSQL databases, authenticate users, store files, and run edge functions on Supabase. Perform CRUD operations on database tables via auto-generated REST and GraphQL APIs with row-level security. Create and manage user accounts with password, magic link, OTP, social login, and SSO authentication. Upload, download, list, and delete files organized in storage buckets. Deploy and invoke server-side TypeScript edge functions. Listen to realtime database changes, broadcast messages, and track user presence. Configure database webhooks for INSERT, UPDATE, and DELETE events. Programmatically manage Supabase organizations and projects, including creating/deleting projects, managing API keys, configuring auth settings, custom domains, network restrictions, and Edge Function secrets.

Datadog

Monitor infrastructure, applications, and services across cloud environments. Submit, discover, and query metrics; create and manage monitors and alerts; build and clean up dashboards; search and analyze logs; manage incidents; track SLOs; run synthetic tests; inspect users and hosts; and schedule or cancel monitor downtimes.

Cloudflare

Manage internet infrastructure including DNS records, domains, and zone settings. Deploy and configure serverless Workers scripts, R2 object storage buckets, and Pages deployments. Configure security rules including WAF, firewall rules, rate limiting, DDoS protection, and IP access controls. Manage SSL/TLS certificates, load balancers, origin pools, and health monitors. Upload and deliver video content via Cloudflare Stream. Access traffic, DNS, and security analytics via GraphQL. Configure Zero Trust Access applications, Gateway policies, and Tunnel connections. Set up alerting and webhook notifications for security events, health checks, certificate status, and usage thresholds. Register and manage domains, account members, roles, and API tokens.

Firebase

Manage backend services for mobile and web applications. Create, read, update, and delete documents in Cloud Firestore and Realtime Database. Manage user accounts including creating, updating, deleting, and listing users with authentication support. Send push notifications and data messages to devices, topics, and device groups via Cloud Messaging (FCM). Upload, download, and delete files in Cloud Storage. Read and publish Remote Config templates to change app behavior remotely. Deploy and manage serverless Cloud Functions triggered by database events, authentication events, storage events, and HTTP requests. Stream real-time database changes via Server-Sent Events. Query databases with filters, ordering, and pagination. Perform batch writes and transactions in Firestore. Generate and verify custom tokens and ID tokens for user authentication.

Kibana

Manage Kibana resources and the Elastic Stack visualization layer programmatically. Create, import, export, and organize saved objects such as dashboards, visualizations, and data views across spaces. Configure alerting rules with threshold, query, and metric conditions, and connect them to actions via connectors (email, Slack, PagerDuty, webhook, Jira, ServiceNow, and more). Manage data views (index patterns) that define which Elasticsearch indices Kibana queries. Create and organize spaces to separate dashboards and objects into meaningful categories. Track incidents with cases, define and monitor Service Level Objectives (SLOs), manage Fleet agent policies and enrollments, configure security detection rules for SIEM, and control role-based access with Kibana feature privileges.

Kubernetes

Manage and orchestrate containerized applications on Kubernetes clusters. Create, update, scale, and delete workloads including Pods, Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs. Configure service discovery and load balancing through Services, Ingress, and Endpoints. Manage configuration and storage with ConfigMaps, Secrets, PersistentVolumes, and StorageClasses. Control access with Namespaces, RBAC roles and bindings, ServiceAccounts, and NetworkPolicies. Administer cluster infrastructure including Nodes, ResourceQuotas, LimitRanges, and PriorityClasses. Autoscale workloads with HorizontalPodAutoscaler and VerticalPodAutoscaler. Define and manage Custom Resource Definitions (CRDs) to extend cluster functionality. Watch resources in real time for create, modify, and delete events. Configure admission webhooks to validate or mutate resources before persistence.

Technical notes for Lastpass

Manage LastPass Enterprise administrative users and group memberships, inspect user metadata and shared-folder permissions, and page audit events using the company ID and provisioning hash. Does not access vault contents or use early-access REST API keys.

Frequently asked questions

Common questions about connecting Lastpass to AI agents with Metorial.

  1. How many tools does the Lastpass MCP server have?
    The Lastpass MCP server exposes 7 tools, including Provision Users, Manage User, Deprovision User. Each one is governed and traced through Metorial.
  2. Lastpass exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Lastpass MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Lastpass and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Lastpass MCP server yourself or use the hosted gateway.

Connect Lastpass to production AI agents

See how Metorial gives your team governed access to Lastpass, with tracing and security controls built in.