MCP Setup
Get Cursor, Claude Code, or any MCP client monitored and governed through SatGate.
Prerequisites: A SatGate Cloud account. Sign up free — no credit card required. You'll start in Observe mode (log everything, block nothing).
Important: Cloud MCP is SaaS MCP on Fly. Connect to the exact dashboard-shown endpoint (today that is https://satgate-mcp-saas.fly.dev/mcp).
This guide explains the flow first. The actual token minting and endpoint lookup happen in the authenticated cloud dashboard.
Sign up and get your token
Open the Connect an MCP Client dashboard flow and sign in (or create an account). SatGate will automatically mint a macaroon token scoped to your tenant.
This token is your agent's credential. It's cryptographically bound to your tenant — no API key management, no OAuth flows.
If you hit login first, that's expected — the dashboard preserves your destination and brings you back to the MCP setup flow.
Configure your MCP client
Clients that connect to a remote URL need two things: the server URL and one header. Claude Desktop and Cursor run a small local bridge instead; their tabs show it. The URL is https://satgate-mcp-saas.fly.dev/mcp (the exact one for your account is on Connect an MCP Client). The header is Authorization: Bearer <your-token>.
Pick your client below. Replace the placeholder with your token from step 1, or copy the same config from the dashboard with your token already filled in.
Run in a terminal
claude mcp add --transport http \
satgate \
https://satgate-mcp-saas.fly.dev/mcp \
--header 'Authorization: Bearer <your-token-from-step-1>'Check: Run claude mcp list. satgate should show "Connected".
Add --scope user to use it in every project.
After saving, restart your MCP client (or toggle the SatGate server off and on). SatGate's tools should appear in the tool list.
Call a tool
In your agent's chat, try one of these prompts:
"Use the echo tool to say hello"
"What's the current timestamp? Use the timestamp tool."
"Calculate 42 * 17 using the calculator tool"Each tool call flows through SatGate — authenticated via your macaroon, logged to the event stream, and cost-tracked in the Shadow Report.
Watch the MCP Monitor
Open the MCP Monitor in your browser. You'll see:
- Active Sessions — your agent's live connection
- Live Events — tool calls, session events, budget activity
- Active Budgets — credit allocations (once you set them up)
By default, events are filtered to hide keepalive noise. Switch to "All Events" if you need to debug connection issues.
What's next?
You're now in Observe mode — every tool call is logged and cost-tracked, but nothing is blocked. When you're ready to enforce budgets: