---
title: Use the MCP Catalog | Keycard
description: Add a pre-built MCP server to your agent in a few clicks
---

The MCP Catalog provides pre-built MCP servers that you can add to your Keycard MCP Gateway in a few clicks — no code required. Each server is automatically protected with your zone’s identity provider, [access policies](/console/access-policies/index.md), and [audit logging](/console/audit-log-export/index.md).

This guide walks through adding **Linear** as an example, but the same steps work for any provider in the catalog.

Note

Don’t see the MCP server you need in the catalog? You can [build your own](/guides/mcp-server/index.md) and optionally [add delegated API access](/guides/delegated-access/index.md).

## Prerequisites

- A Keycard zone with an [identity provider](/console/identity-providers/index.md) connected
- A [Linear](https://linear.app) account
- [Cursor](https://cursor.com) or [Claude Code](https://claude.ai/claude-code) installed

## Add Linear from the MCP Catalog

1. **Navigate to the MCP Catalog**

   In [Keycard Console](https://console.keycard.ai), go to **Applications** → **Add Application** → **Explore MCP Servers**.

   ![Add Application button with Explore MCP Servers option in the dropdown](/images/light/mcp-catalog/add-application-dropdown.png) ![Add Application button with Explore MCP Servers option in the dropdown](/images/dark/mcp-catalog/add-application-dropdown.png)

2. **Find and install Linear**

   Locate **Linear** in the catalog and click **Install**.

   ![Explore MCP Servers dialog showing available servers including Linear](/images/light/mcp-catalog/catalog-dialog.png) ![Explore MCP Servers dialog showing available servers including Linear](/images/dark/mcp-catalog/catalog-dialog.png)

3. **Confirm Linear is protected**

   Linear now appears on the **Applications** page with a **Gateway** badge, indicating it is proxied through the Keycard MCP Gateway.

   ![Applications page showing Linear installed with a Gateway badge](/images/light/mcp-catalog/applications-linear.png) ![Applications page showing Linear installed with a Gateway badge](/images/dark/mcp-catalog/applications-linear.png)

## Connect to your development tool

Click the installed **Linear** application in the Applications list, then use the **Install** dropdown to choose your client.

![Install dropdown showing Cursor, Claude Code, and Manual options](/images/light/mcp-catalog/install-to-client-dropdown-linear.png) ![Install dropdown showing Cursor, Claude Code, and Manual options](/images/dark/mcp-catalog/install-to-client-dropdown-linear.png)

- [Cursor](#tab-panel-64)
- [Claude Code](#tab-panel-65)
- [Any MCP Client](#tab-panel-66)

1. Select **Cursor** from the Install dropdown
2. Cursor will open with a prompt to add the MCP server — confirm
3. The Keycard MCP Gateway URL is automatically configured

1) Select **Claude Code** from the Install dropdown
2) Copy the configuration snippet
3) Add it to your Claude Code MCP settings

1. Select **Manual** from the Install dropdown
2. Copy the MCP server URL shown
3. Add it to your MCP client’s configuration using the URL as the server endpoint

## Authenticate

1. **Sign in with your identity provider**

   When your AI agent first calls a Linear tool, you will be prompted to sign in through your zone’s identity provider (e.g., Okta, Auth0).

2. **Authorize access to Linear**

   After signing in, authorize the connection to Linear. This grants Keycard permission to manage Linear credentials on your behalf.

3. **Confirmation**

   You will see an **Authentication Successful** message. Return to your development tool to complete the connection — your AI agent can now call Linear tools.

   ![Authentication Successful confirmation page in the browser](/images/dark/mcp-catalog/auth-successful.png)

## Use Linear tools

Try these prompts in your connected dev tool:

- **“List my assigned issues”** — see what’s on your plate
- **“Create an issue in the Backend team titled ‘Add rate limiting to API’”** — create work items without leaving your editor
- **“Show all in-progress issues for the current cycle”** — track sprint progress

Each request flows through the Keycard MCP Gateway, so every MCP server access is tied to your identity and logged.

## Verify in Audit Logs

In Keycard Console, navigate to **Audit Logs** to see the full flow:

| Event                | Description                                                                |
| -------------------- | -------------------------------------------------------------------------- |
| `users:authenticate` | User signed in via your zone’s identity provider                           |
| `users:authorize`    | User authorized access to Linear through the gateway                       |
| `credentials:issue`  | Access token issued — shows the identity chain (user + Linear application) |

Each `credentials:issue` event includes an **identity chain** showing both the user identity (e.g., `alice@acme.com`) and the application identity (Linear), so you can trace exactly which user accessed which MCP server.

## Next steps

- [Access Policies](/console/access-policies/index.md) — control who can access Linear and what actions are allowed
- [MCP Catalog](/console/mcp-catalog/index.md) — browse all available MCP servers in the catalog