StackOne + Glean: AI Agents That Write Into Dayforce, Xero and Jira

StackOne is the tool gateway for successful AI rollouts. One MCP connection gives an agent governed access to 500+ enterprise systems, with write access as well as read. In this demo we connect StackOne to Glean and run three agents across a new finance hire's first month. Sam Okafor is an incoming FP&A manager at a 3,000-person company. Jacob and Alex, sales engineers at StackOne, follow him from the moment his offer is accepted through to his first month-end close, using SmartRecruiters, Dayforce, Google Workspace, Google Sheets, Jira, Slack, Notion, Expensify and Xero. THE THREE AGENTS Onboarding. A SmartRecruiters webhook fires the moment a candidate is marked hired. The Glean agent confirms the candidate, creates the employee record in Dayforce, creates the Google Workspace account and assigns the right group, drafts a nine-month onboarding plan in Google Sheets, and opens a Jira ticket for equipment. Access and IT ops. Sam asks what he has access to. The agent checks Dayforce to confirm he is a finance hire, grants the finance group in Google Workspace (which also provisions Expensify), confirms Notion is already covered by SSO, and routes Xero to a human by opening a Jira ticket and posting to Slack as Sam. Month-end close. The agent reconciles Expensify expenses against Xero bills, flags a suspected fraudulent invoice and two duplicate bookings, drafts a £1,000 accrual in Xero, and posts exceptions to a finance channel. It drafts and flags for review, and never posts or pays. WHAT WE SHOW ON THE STACKONE SIDE Search and execute: Loading hundreds of tool descriptions into an agent's context window is a good way to break it. The agent gets two actions instead, and searches by provider for the one it needs. Profiles: Choose the auth type, switch individual actions on or off, and configure which events fire a webhook. The SmartRecruiters profile here is read-only and fires on a status change to hired. Per-user OAuth: Every Glean user connects their own accounts, so an agent only reaches data that person can already see. Versioning and user groups: Pin a connector to a major or minor version, or to your own custom build. Assign profiles to groups and sync those groups with SCIM. Logs: Incoming webhook payloads, the user who called the action, status codes, response messages, and an error explainer that reads failures back in plain language. Defender: An invoice in Xero carries hidden instructions in its reference and description fields telling the agent to change the remittance bank details. Defender scores the response at 90% confidence, sanitizes it down to 70%, and reports the whole thing in the logs. CHAPTERS 0:00 What StackOne and Glean each do 0:56 Meet Sam, an incoming FP&A manager 1:35 Three processes, and the systems they touch 2:05 Agent 1: onboarding, triggered by a SmartRecruiters webhook 3:15 Running it in Glean chat and watching it plan 3:50 Search and execute: two tools instead of hundreds 5:00 What the agent created in Dayforce, Sheets and Jira 5:20 The StackOne connector catalog and custom connectors 6:40 Profiles: auth type, action scoping, webhook events 7:45 OAuth and scopes on Google Workspace 8:40 Connector versioning, user groups and SCIM 9:40 Runtime logs and the AI error explainer 10:50 Connecting StackOne to Glean over MCP 11:45 Why per-user OAuth matters for data access 12:40 Setting up the agent, system prompt and triggers 13:15 Agent 2: access and IT ops 14:00 "What do I have access to?" run live as Sam 14:50 Checking Dayforce, granting the finance group, escalating Xero 16:30 Three types of access provisioning 17:40 The approval request in Slack and the Jira ticket 18:05 Agent 3: month-end close, and why it needs more guardrails 18:45 Reconciling Expensify against Xero live 20:00 Fraud and duplicate flags routed to Slack 20:50 Drafting a £1,000 accrual in Xero for approval 21:30 Prompt injection hidden inside an invoice 22:40 How Defender scored and sanitized it 23:40 Defender settings, thresholds and false positives 24:30 Recap: scoped access, approval gates, injection defense Presented by Jacob Kalinowski and Alex Cox, sales engineers at StackOne. Glean securely indexes your company's knowledge and applications, respects your existing permissions, and lets you build agents on top. StackOne is the action layer those agents call. Try for free or book a demo here: https://www.stackone.com/?utm_source=...