Connect an MCP client

1. Get your endpoint and key

1. In the app, open Settings > MCP. Copy the MCP endpoint shown there.
2. Open Settings > API keys and create a key for the agent. Copy it; it is shown once.

2. Add the server to your client

The server authenticates with the x-api-key header.

Claude Desktop, Cursor and other JSON-configured clients

{
  "mcpServers": {
    "csquare": {
      "url": "YOUR_MCP_ENDPOINT",
      "headers": { "x-api-key": "YOUR_API_KEY" }
    }
  }
}

Clients that only support local servers

Bridge with mcp-remote:

{
  "mcpServers": {
    "csquare": {
      "command": "npx",
      "args": ["mcp-remote", "YOUR_MCP_ENDPOINT", "--header", "x-api-key:YOUR_API_KEY"]
    }
  }
}

3. Test it

Ask your agent: "Use cSquare to look up access review controls in SOC 2." It should call lookup_control and return matching controls.

Troubleshooting

Unauthorized: missing x-api-key header

The client did not send the header. Check the headers block, or the --header argument for mcp-remote.

Invalid API key

The key was revoked, expired or mistyped. Create a new key in Settings > API keys.

BLOCKED_CREDITS

Your workspace is out of AI credits. Top up or upgrade in Settings > Billing.

Prompts to try

Once connected, paste these into your assistant: