---
title: "MCP Integration Overview | Gazebo Docs"
description: "Connect Gazebo to any MCP-compatible AI tool. Overview of available tools — get_identity, get_credential, and list_audit_events."
url: "https://gazebohq.com/docs/mcp"
---

Gazebo exposes an MCP (Model Context Protocol) server that AI tools can connect to for credential retrieval. Any MCP-compatible client — Cursor, Claude Code, Windsurf, or a custom setup — can use the same endpoint.

## Endpoint

```
https://app.gazebohq.com/api/mcp
```

Authentication is via an agent bearer token passed as an `Authorization` header. Create the agent and its token at [Agents](https://app.gazebohq.com/agents); account API tokens and browser sessions cannot authenticate to this endpoint.

## Available tools

### `get_identity`

Returns the calling agent's name and full access policy. Call this first to confirm which services are accessible before fetching credentials. No credentials are returned; nothing is logged.

```
get_identity()
→ {
    status: "ok",
    agent_id: "...",
    name: "cursor-dev",
    accessible_services: [
      { service: "stripe", allowed_methods: ["GET", "POST"] },
      { service: "github", allowed_methods: ["GET"] }
    ]
  }
```

### `get_credential`

Retrieves the credential for a named service. It requires `service` and `method`; `key_name` is optional and, when omitted, returns the service's primary credential. Credential-access attempts (including denials) are logged. The credential value is delivered to the MCP client/agent and must not be persisted.

See the [Get credential reference](/docs/mcp/get-credential) for full documentation.

### `list_audit_events`

Returns recent credential-access attempts for the calling agent. Use `limit` from 1 through 50, and optionally filter with `service` and paginate with `cursor`. Every event includes a stable `event_id` for correlation.

```
list_audit_events({ limit: 10, service: "stripe" })
→ {
    status: "ok",
    count: 3,
    events: [
      { event_id: "...", service: "stripe", method: "POST", outcome: "success", timestamp: "..." },
      { event_id: "...", service: "github", method: "GET", outcome: "denied", timestamp: "..." }
    ]
  }
```

## Recommended usage pattern

```
1. get_identity()         → confirm which services are accessible
2. get_credential(...)    → fetch the credential you need
3. [use the credential]   → make your API call; do not persist the value
4. list_audit_events(...) → optionally verify the access was logged
```

## Client setup

- [Cursor](/docs/mcp/cursor)
- [Claude Code](/docs/mcp/claude-code)
- [Windsurf](/docs/mcp/windsurf)
- [Any MCP client](/docs/mcp/custom)