Use the MCP Catalog

The MCP Catalog provides pre-built MCP servers that you can add to your Keycard MCP Gateway in a few clicks — no code required. Each server is automatically protected with your zone’s identity provider, access policies, and audit logging.

This guide walks through adding Linear as an example, but the same steps work for any provider in the catalog.

• A Keycard zone with an identity provider connected
• A Linear account
• Cursor or Claude Code installed

1. Navigate to the MCP Catalog

   In Keycard Console, go to Applications → Add Application → Explore MCP Servers.

   

2. Find and install Linear

   Locate Linear in the catalog and click Install.

   

3. Confirm Linear is protected

   Linear now appears on the Applications page with a Gateway badge, indicating it is proxied through the Keycard MCP Gateway.

   

Click the installed Linear application in the Applications list, then use the Install dropdown to choose your client.

• Cursor
• Claude Code
• Any MCP Client

1. Select Cursor from the Install dropdown
2. Cursor will open with a prompt to add the MCP server — confirm
3. The Keycard MCP Gateway URL is automatically configured

1. Sign in with your identity provider

   When your AI agent first calls a Linear tool, you will be prompted to sign in through your zone’s identity provider (e.g., Okta, Auth0).

2. Authorize access to Linear

   After signing in, authorize the connection to Linear. This grants Keycard permission to manage Linear credentials on your behalf.

3. Confirmation

   You will see an Authentication Successful message. Return to your development tool to complete the connection — your AI agent can now call Linear tools.

   

Try these prompts in your connected dev tool:

• “List my assigned issues” — see what’s on your plate
• “Create an issue in the Backend team titled ‘Add rate limiting to API’” — create work items without leaving your editor
• “Show all in-progress issues for the current cycle” — track sprint progress

Each request flows through the Keycard MCP Gateway, so every MCP server access is tied to your identity and logged.

In Keycard Console, navigate to Audit Logs to see the full flow:

Event	Description
users:authenticate	User signed in via your zone’s identity provider
users:authorize	User authorized access to Linear through the gateway
credentials:issue	Access token issued — shows the identity chain (user + Linear application)

Each credentials:issue event includes an identity chain showing both the user identity (e.g., alice@acme.com) and the application identity (Linear), so you can trace exactly which user accessed which MCP server.

• Access Policies — control who can access Linear and what actions are allowed
• MCP Catalog — browse all available MCP servers in the catalog