MCP Setup
Get Cursor, Claude Code, or any MCP client monitored and governed through SatGate.
Prerequisites: A SatGate Cloud account. Sign up free — no credit card required. You'll start in Observe mode (log everything, block nothing).
Important: SaaS MCP and hybrid MCP use different endpoints. SaaS users connect to the exact dashboard-shown endpoint (today that is https://satgate-mcp-saas.fly.dev). Hybrid enterprise users connect to their own gateway URL with the /mcp path.
This guide explains the flow first. The actual token minting and endpoint lookup happen in the authenticated cloud dashboard.
Sign up and get your token
Open the Connect an MCP Client dashboard flow and sign in (or create an account). SatGate will automatically mint a macaroon token scoped to your tenant.
This token is your agent's credential. It's cryptographically bound to your tenant — no API key management, no OAuth flows.
If you hit login first, that's expected — the dashboard preserves your destination and brings you back to the MCP setup flow.
Configure your MCP client
Add SatGate to your MCP client's configuration. Use the exact endpoint shown in Connect an MCP Client. For SaaS that will be https://satgate-mcp-saas.fly.dev. For hybrid it will be your tenant gateway with /mcp appended.
For Cursor, edit ~/.cursor/mcp.json:
{
"mcpServers": {
"satgate": {
"command": "npx",
"args": ["-y", "satgate-mcp-bridge"],
"env": {
"SATGATE_URL": "https://satgate-mcp-saas.fly.dev",
"SATGATE_TOKEN": "<your-token-from-step-1>"
}
}
}
}Hybrid example:
{
"mcpServers": {
"satgate": {
"command": "npx",
"args": ["-y", "satgate-mcp-bridge"],
"env": {
"SATGATE_URL": "https://gw.yourdomain.com/mcp",
"SATGATE_TOKEN": "<your-token-from-step-1>"
}
}
}
}For Claude Code, add to your MCP settings:
{
"mcpServers": {
"satgate": {
"command": "npx",
"args": ["-y", "satgate-mcp-bridge"],
"env": {
"SATGATE_URL": "https://satgate-mcp-saas.fly.dev",
"SATGATE_TOKEN": "<your-token-from-step-1>"
}
}
}
}After saving, restart your MCP client (or toggle the SatGate server off/on). You should see SatGate's tools appear in the tool list.
Call a tool
In your agent's chat, try one of these prompts:
"Use the echo tool to say hello"
"What's the current timestamp? Use the timestamp tool."
"Calculate 42 * 17 using the calculator tool"Each tool call flows through SatGate — authenticated via your macaroon, logged to the event stream, and cost-tracked in the Shadow Report.
Watch the MCP Monitor
Open the MCP Monitor in your browser. You'll see:
- Active Sessions — your agent's live connection
- Live Events — tool calls, session events, budget activity
- Active Budgets — credit allocations (once you set them up)
By default, events are filtered to hide keepalive noise. Switch to "All Events" if you need to debug connection issues.
What's next?
You're now in Observe mode — every tool call is logged and cost-tracked, but nothing is blocked. When you're ready to enforce budgets: