Docs/Quick Start: MCP Agent

Connect an MCP Agent in 5 Minutes

Get Cursor, Claude Code, or any MCP client monitored and governed through SatGate.

Prerequisites: A SatGate Cloud account. Sign up free — no credit card required. You'll start in Observe mode (log everything, block nothing).

1

Sign up and get your token

Go to the MCP onboarding wizard and sign in (or create an account). SatGate will automatically mint a macaroon token scoped to your tenant.

This token is your agent's credential. It's cryptographically bound to your tenant — no API key management, no OAuth flows.

2

Configure your MCP client

Add SatGate to your MCP client's configuration. For Cursor, edit ~/.cursor/mcp.json:

{
  "mcpServers": {
    "satgate": {
      "url": "https://mcp.your-tenant.satgate.io/sse",
      "env": {
        "SATGATE_TOKEN": "<your-token-from-step-1>"
      }
    }
  }
}

For Claude Code, add to your MCP settings:

{
  "mcpServers": {
    "satgate": {
      "command": "npx",
      "args": ["-y", "@anthropic/mcp-proxy", "https://mcp.your-tenant.satgate.io/sse"],
      "env": {
        "SATGATE_TOKEN": "<your-token-from-step-1>"
      }
    }
  }
}

After saving, restart your MCP client (or toggle the SatGate server off/on). You should see SatGate's tools appear in the tool list.

3

Call a tool

In your agent's chat, try one of these prompts:

"Use the echo tool to say hello"
"What's the current timestamp? Use the timestamp tool."
"Calculate 42 * 17 using the calculator tool"

Each tool call flows through SatGate — authenticated via your macaroon, logged to the event stream, and cost-tracked in the Shadow Report.

4

Watch the MCP Monitor

Open the MCP Monitor in your browser. You'll see:

  • Active Sessions — your agent's live connection
  • Live Events — tool calls, session events, budget activity
  • Active Budgets — credit allocations (once you set them up)

By default, events are filtered to hide keepalive noise. Switch to "All Events" if you need to debug connection issues.

5

What's next?

You're now in Observe mode — every tool call is logged and cost-tracked, but nothing is blocked. When you're ready to enforce budgets: