Gazebo
    ServicesAgentsDocsSpecWritingPricing
    Log inSign up
    Log in

    Getting Started

    • Introduction
    • How Gazebo works
    • Core concepts
    • Quickstart

    Agent Access

    • Access profiles
    • Bearer tokens
    • Audit logs

    MCP

    • Overview
    • Cursor
    • Claude Code
    • Windsurf
    • Any MCP client
    • Get credential reference

    Open Standard

    • Agent Consent Flow
    • Agent Identity Protocol (AIP) ↗

    REST API

    • Overview
    • Authentication
    • Services
    • Agents
    • Access policies
    • Audit events
    • Consent administration
    • Agent credential access
    • Errors and limits

    Security

    • Overview
    • Encryption model
    • Credential storage
    • Audit and compliance
    • Responsible disclosure
    Documentation

    Getting Started

    • Introduction
    • How Gazebo works
    • Core concepts
    • Quickstart

    Agent Access

    • Access profiles
    • Bearer tokens
    • Audit logs

    MCP

    • Overview
    • Cursor
    • Claude Code
    • Windsurf
    • Any MCP client
    • Get credential reference

    Open Standard

    • Agent Consent Flow
    • Agent Identity Protocol (AIP) ↗

    REST API

    • Overview
    • Authentication
    • Services
    • Agents
    • Access policies
    • Audit events
    • Consent administration
    • Agent credential access
    • Errors and limits

    Security

    • Overview
    • Encryption model
    • Credential storage
    • Audit and compliance
    • Responsible disclosure
    DocsMCPClaude Code

    Claude Code

    Add Gazebo to Claude Code as an MCP server so it can retrieve credentials from your vault during coding sessions.

    Prerequisites

    • A Gazebo account with at least one service connected
    • An agent created in Gazebo with a bearer token

    Configuration

    In Claude Code's MCP server configuration, add Gazebo with endpoint https://app.gazebohq.com/api/mcp and the header Authorization: Bearer <your-agent-token>. Create the agent bearer token at Gazebo Agents.

    Claude Code and Claude Desktop have separate setup surfaces. This page is for Claude Code; use Claude Code's current documentation for its configuration location and syntax rather than Claude Desktop configuration instructions.

    Verify the connection

    Ask Claude to call get_identity:

    get_identity()
    → {
        status: "ok",
        name: "claude-dev",
        accessible_services: [
          { service: "github", allowed_methods: ["GET"] },
          { service: "stripe", allowed_methods: ["GET", "POST"] }
        ]
      }
    

    Retrieve a credential

    get_credential({ service: "github", method: "GET" })
    → "ghp_..."
    

    Claude Code receives the credential value and can use it for GitHub API calls within the permitted methods. Do not persist the returned value.

    Usage guidance for Claude

    Claude works well with Gazebo when given context about what it's allowed to do. You can prompt it directly:

    "Use the Gazebo MCP server to get my GitHub token, then list the open issues on my repo."

    Claude will call get_identity to confirm access, then get_credential to retrieve the token, then use it for the GitHub API call.

    Troubleshooting

    MCP server not appearing — Confirm the Claude Code MCP configuration follows Claude Code's current documentation and that the endpoint and header are correct.

    401 Unauthorized — Token is wrong or the agent was deleted. Check the Gazebo dashboard.

    Denial on get_credential — The method you requested isn't in the agent's access profile. Update the profile in the Gazebo dashboard.

    Explore Gazebo

    Gazebo gives each agent an independent access boundary around your agent credentials, with controls for approval, auditing, and revocation.

    Scoped identities for AI agentsGive every agent only the credentials it needs.Credential security and audit controlsSee how access is protected, recorded, and revoked.
    CursorWindsurf
    Gazebo

    Credential management for AI agents. Scoped access, approval controls, and complete audit logs—without hardcoding or rotating shared API keys.

    Gazebo

    • Platform
    • Agent Consent Flow
    • Pricing
    • Status

    Explore

    • Services
    • Agents
    • Vaults

    Content

    • Writing
    • Topics
    • Blog
    • Docs
    • Spec

    Free Tools

    • Scanner

    Company

    • About
    • [email protected]
    • [email protected]

    © 2026 Gazebo. All rights reserved.

    PrivacyTermsSecurity