Skip to content
Agent Month

MCP integrations

Connect AI agents to your internal tools

The Model Context Protocol (MCP) lets Claude Code, Cursor, and other agents work against your real systems — safely, with auth and audit. Pick a tool to see how to wire it up, and what a production setup needs.

How to connect any MCP server

The wiring is the same for every tool on this page — only the server and its credentials change. Each tool page covers those specifics; here’s the shared flow.

Claude Code

  1. Pick or build the MCP server for your tool (see the tool’s page for whether an official or community server exists).
  2. Register it with claude mcp add <name> <command> [--env KEY=VALUE]. Project config lives in .mcp.json (commit it to standardize the team); user config in ~/.claude/mcp.json.
  3. Provide credentials out of band — from the environment or a secret store, never hardcoded in the repo.
  4. Restart Claude Code (or run /mcp) so it discovers the server’s tools, then confirm the expected tools appear.
  5. Run a read-only task first to validate scope before granting any write access.

Cursor

  1. Open Cursor → Settings → MCP and add the server (command or URL + transport).
  2. Commit .cursor/mcp.json so every engineer gets the same tools.
  3. Supply credentials via env or Cursor’s secret storage — not the committed file.
  4. Reload Cursor and verify the tools appear; pair with a .cursorrules file so agents use them inside your golden path.

If tools don’t appear, it’s almost always auth or transport — see MCP server not connecting, and note hosted servers often need OAuth rather than a plain API key.

The MCP security checklist

A working connection is the easy part. This is what separates a safe, team-wide integration from a liability — it applies to every tool on this page.

  • Scope every credential to the minimum access the task needs — never a full-access token.
  • Default to read-only; add write actions one at a time, deliberately.
  • Log every tool call with who, what, and when, queryable from your observability stack.
  • Keep credentials out of the repo and the agent’s sandbox — inject them at the boundary from a secret store.
  • Gate high-impact or irreversible actions (writes, deploys, money movement) behind explicit human approval.
  • Run a read-only smoke test to validate scope before granting any write access.