# Solidgate • MCP server

Connect AI assistants such as Claude, Cursor, and VS Code to Solidgate through the Model Context Protocol (MCP).

[Model Context Protocol](https://modelcontextprotocol.io) is an open standard that lets AI assistants discover and call operations of external services. One MCP server works in every compatible client.

Pilot
The Solidgate MCP server works with Solidgate API v2 only. Most available tools are read-only, and the list of tools grows during the pilot.

With the Solidgate MCP server, an assistant can look up API keys, channels, webhooks, and legal entities, and create and download reports. For example, ask the assistant to list your webhook endpoints or to generate a report for last month.

## Endpoint and authentication

| Parameter | Value |
|  --- | --- |
| Endpoint | `https://api.solidgate.com/v2/mcp` |
| Transport | HTTP with single JSON-RPC requests over `POST` |
| Authentication | API key secret in the `Authorization` header with the `Bearer` scheme |


The Solidgate MCP server uses the same API keys as the API. Create a separate API key for the MCP server in **Solidgate Hub**, in the **Developers** section under **API v2**, as described in [API key management](/api/v2/get-started#api-key-management). A separate key limits what the assistant can do, and you can revoke it without affecting your integration. The tools that work with API keys, such as `api_keys_list`, need an account-level key marked as **Applies to all channels**.

```text Header
Authorization: Bearer your_secret_here
```

## Connect a client

The Solidgate MCP server works in clients that let you set a custom `Authorization` header, such as Claude Code, Claude Desktop, Cursor, and VS Code. In the examples, replace `your_secret_here` with the API key secret, and keep configuration files out of version control.

Claude Code
Run the following command in the terminal.

```bash Terminal
claude mcp add --transport http --scope user solidgate https://api.solidgate.com/v2/mcp \
  --header "Authorization: Bearer your_secret_here"
```

The `--scope user` option makes the server available in all your projects. To check the connection, run `/mcp` in Claude Code.

Claude Desktop
Download the Solidgate MCP extension file `solidgate.mcpb` and open it. Claude Desktop installs the extension and asks for the API key secret.

Claude Desktop keeps the secret in the secure storage of the operating system.

Cursor
Add the server to `~/.cursor/mcp.json`, or to `.cursor/mcp.json` in the project.

```json mcp.json
{
  "mcpServers": {
    "solidgate": {
      "url": "https://api.solidgate.com/v2/mcp",
      "headers": {
        "Authorization": "Bearer your_secret_here"
      }
    }
  }
}
```

VS Code
Add the server to `.vscode/mcp.json` in the workspace.

```json .vscode/mcp.json
{
  "servers": {
    "solidgate": {
      "type": "http",
      "url": "https://api.solidgate.com/v2/mcp",
      "headers": {
        "Authorization": "Bearer your_secret_here"
      }
    }
  }
}
```

## Security

A tool cannot do more than the API key that calls it. Every tool call goes through the same authentication, permission checks, validation, and audit as a direct API request.

Use a key with only the permissions the assistant needs. The client lists every available tool even when the key lacks the permission for it, and a call without the required permission returns a `403` error.

Tool results reach the AI client in the same form as API responses. The provider of the AI client processes this data, so connect the Solidgate MCP server only to clients that your organization approves for account data.

Treat the API key secret as a password. Keep it out of shared files, and rotate it with [zero-downtime key rotation](/api/v2/get-started#api-key-management) if it leaks.

## Limits and errors

A tool call that takes longer than four seconds returns an "outcome unknown" result. Check the result with a read tool before repeating the request.

API errors reach the assistant as tool errors with the same body as the API returns, as described in [error handling](/api/v2/get-started#error-handling).

Traffic to the Solidgate MCP server has its own rate limit, separate from direct API requests. When the limit is exceeded, the server returns a `429` error before any tool runs.

## Feedback

The Solidgate MCP server is in pilot. To request a tool or report an issue, contact [Solidgate support](https://solidgate.com/support/).