Gazebo
    ServicesAgentsDocsSpecWritingPricing
    Log inSign up
    Log in

    Getting Started

    • Introduction
    • How Gazebo works
    • Core concepts
    • Quickstart

    Agent Access

    • Access profiles
    • Bearer tokens
    • Audit logs

    MCP

    • Overview
    • Cursor
    • Claude Code
    • Windsurf
    • Any MCP client
    • get_credential reference

    Open Standard

    • AIP Specification ↗

    Sharing Agents

    • Overview
    • Publishing an agent
    • The consent screen
    • Installing a shared agent
    • The identity stamp

    REST API

    • Authentication
    • Verification endpoint

    Security

    • Overview
    • Encryption model
    • Credential storage
    • Audit and compliance
    • Responsible disclosure
    Documentation

    Getting Started

    • Introduction
    • How Gazebo works
    • Core concepts
    • Quickstart

    Agent Access

    • Access profiles
    • Bearer tokens
    • Audit logs

    MCP

    • Overview
    • Cursor
    • Claude Code
    • Windsurf
    • Any MCP client
    • get_credential reference

    Open Standard

    • AIP Specification ↗

    Sharing Agents

    • Overview
    • Publishing an agent
    • The consent screen
    • Installing a shared agent
    • The identity stamp

    REST API

    • Authentication
    • Verification endpoint

    Security

    • Overview
    • Encryption model
    • Credential storage
    • Audit and compliance
    • Responsible disclosure
    DocsMCPAny MCP client

    Gazebo works with any client that supports the Model Context Protocol. The configuration is the same regardless of which tool you're using.

    Standard MCP configuration

    {
      "mcpServers": {
        "gazebo": {
          "url": "https://app.gazebohq.com/api/mcp",
          "headers": {
            "Authorization": "Bearer <your-agent-token>"
          }
        }
      }
    }
    

    The url points to the Gazebo MCP endpoint. The Authorization header carries the agent bearer token.

    How clients discover tools

    On connection, your MCP client calls tools/list to discover available tools. Gazebo returns:

    • get_identity — returns the agent's name and access policy
    • get_credential — retrieves a credential for a named service
    • list_audit_events — returns recent access events for this agent
    • create_workflow — creates an approval-gated configuration workflow

    Transport

    Gazebo's MCP server uses HTTP with SSE (Server-Sent Events) for streaming. Most MCP clients support this transport. If your client requires a different transport, check the client's documentation — Gazebo's endpoint follows the standard MCP transport spec.

    Authentication

    Authentication is always via the Authorization: Bearer <token> header. The token must be a valid Gazebo agent bearer token. If the token is missing or invalid, Gazebo returns 401 Unauthorized.

    Tool reference

    See the individual tool pages for full documentation:

    • get_credential reference — the most commonly used tool
    • MCP overview — all tools with example responses

    Explore Gazebo

    Gazebo gives each agent an independent access boundary around your agent credentials, with controls for approval, auditing, and revocation.

    Scoped identities for AI agentsGive every agent only the credentials it needs.Credential security and audit controlsSee how access is protected, recorded, and revoked.
    Windsurfget_credential reference
    Gazebo

    IAM for AI agents. Scoped credentials, access policies, and audit trails — without rotating keys.

    Product

    • Pricing
    • Status

    Explore

    • Services
    • Agents
    • Workflows
    • Integrations

    Content

    • Writing
    • Topics
    • Blog
    • Docs

    Free Tools

    • Scanner

    Company

    • About
    • hello@gazebohq.com
    • security@gazebohq.com

    © 2026 Gazebo. All rights reserved.

    PrivacyTermsSecurity