# Connect an MCP client

> Create an API key and add the cSquare MCP server to Claude, Cursor or any MCP client.

Source: https://docs.csquaregrc.com/mcp/connect


## 1. Get your endpoint and key

1. In the app, open **Settings > MCP**. Copy the **MCP endpoint** shown there.
2. Open **Settings > API keys** and create a key for the agent. Copy it; it is shown once.

## 2. Add the server to your client

The server authenticates with the `x-api-key` header.

### Claude Desktop, Cursor and other JSON-configured clients

```json
{
  "mcpServers": {
    "csquare": {
      "url": "YOUR_MCP_ENDPOINT",
      "headers": { "x-api-key": "YOUR_API_KEY" }
    }
  }
}
```

### Clients that only support local servers

Bridge with `mcp-remote`:

```json
{
  "mcpServers": {
    "csquare": {
      "command": "npx",
      "args": ["mcp-remote", "YOUR_MCP_ENDPOINT", "--header", "x-api-key:YOUR_API_KEY"]
    }
  }
}
```

## 3. Test it

Ask your agent: "Use cSquare to look up access review controls in SOC 2." It should call `lookup_control` and return matching controls.

## Troubleshooting

### Unauthorized: missing x-api-key header

The client did not send the header. Check the `headers` block, or the `--header` argument for `mcp-remote`.

### Invalid API key

The key was revoked, expired or mistyped. Create a new key in **Settings > API keys**.

### BLOCKED_CREDITS

Your workspace is out of AI credits. Top up or upgrade in **Settings > Billing**.

## Prompts to try

Once connected, paste these into your assistant:

```text
Use cSquare to list my active compliance programs and their readiness scores.
```

```text
Use cSquare to look up the SOC 2 controls about access reviews, then tell me which ones I still need evidence for.
```

```text
Use cSquare to check whether our setup meets ISO 27001 Annex A 5.15 access control, and explain any gaps.
```