MCP Service
Connect Claude, Cursor, and other AI agents to your RequestRocket account using the Model Context Protocol (MCP) service
MCP Service
RequestRocket exposes a native Model Context Protocol (MCP) service, allowing AI agents — such as Cursor, Claude Desktop, and Claude.ai — to manage your proxies, credentials, targets, rules, and more entirely through natural language.
Once connected, an AI agent can create and configure proxies, inspect request history, execute test requests, and troubleshoot your integration without you needing to leave your editor or chat window.
The MCP service uses Streamable HTTP transport. It is stateless — each JSON-RPC call is an independent HTTPS POST — which means it works reliably behind API Gateway and does not require a persistent connection.
Prerequisites
Before connecting an AI agent you will need:
- A RequestRocket account
- A user API token (
u-...) — found under Settings → Keys in the dashboard
Treat your user token like a password. Do not commit it to version control or share it publicly.
MCP Endpoint
| Environment | URL |
|---|---|
| Production | https://api.requestrocket.com/mcp |
All requests must be sent as POST to the endpoint above. GET and other methods return 405.
Authentication
The MCP service accepts two authentication methods. For most users connecting Cursor or Claude Desktop, a user API token is the simplest option.
| Method | Header | When to use |
|---|---|---|
| User API token | Authorization: u-your-token | Cursor, Claude Desktop, any MCP client supporting custom headers |
| OAuth 2.0 (PKCE) | Authorization: Bearer <jwt> | Claude.ai connectors, clients that support OAuth auto-discovery |
For OAuth, the server publishes standard discovery metadata:
GET https://api.requestrocket.com/.well-known/oauth-protected-resourceGET https://api.requestrocket.com/.well-known/oauth-authorization-server
OAuth-capable clients discover these endpoints automatically — no manual configuration is needed beyond pointing the client at the MCP URL.
Connecting Cursor
Locate your MCP configuration file
Cursor reads MCP server definitions from ~/.cursor/mcp.json. Create the file if it does not exist.
Add the RequestRocket server
{
"mcpServers": {
"requestrocket": {
"url": "https://api.requestrocket.com/mcp",
"headers": {
"Authorization": "u-your-api-token-here"
}
}
}
}Replace u-your-api-token-here with the token copied from Settings → Keys.
Reload Cursor
Open the Command Palette (⌘ Shift P / Ctrl Shift P) and run MCP: Restart All Servers, or restart Cursor entirely.
Verify the connection
Open the Cursor chat panel and ask:
"List my RequestRocket clients"
The agent will call get_current_user and then list_clients and return your organisations.
Connecting Claude Desktop
Open the Claude Desktop configuration file
The configuration file is located at:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonCreate the file if it does not exist.
Add the RequestRocket server
{
"mcpServers": {
"requestrocket": {
"type": "http",
"url": "https://api.requestrocket.com/mcp",
"headers": {
"Authorization": "u-your-api-token-here"
}
}
}
}Replace u-your-api-token-here with your user token.
Restart Claude Desktop
Fully quit and relaunch Claude Desktop. Look for the MCP indicator (plug icon) in the chat toolbar to confirm the server is connected.
Verify the connection
Ask Claude:
"What proxies do I have configured in RequestRocket?"
Claude will call the appropriate tools and return your current proxy list.
Connecting Claude.ai (OAuth)
Claude.ai supports OAuth-based MCP connections which do not require you to manually manage a token.
Open Claude.ai settings
Navigate to claude.ai → Settings → Integrations (or Connectors, depending on your plan).
Add a new integration
Click Add integration and enter the MCP URL:
https://api.requestrocket.com/mcpAuthorise via RequestRocket
Claude.ai will redirect you to the RequestRocket authorisation page. Sign in with your RequestRocket account and grant access. The OAuth flow handles token exchange automatically.
Verify the connection
Once authorised, return to Claude.ai and start a new conversation. Ask:
"Show me my RequestRocket clients"
Available Capabilities
The MCP server exposes the full RequestRocket platform surface through approximately 90 tools, grouped by domain:
| Domain | What you can do |
|---|---|
| Clients | List, create, and manage client organisations |
| Targets | Configure target API endpoints |
| Credentials | Create and manage proxy and target credentials (all types) |
| Proxies | Build and configure proxies connecting credentials to targets |
| Rules | Add request/response transformation and access-control rules |
| Filters | Configure IP allow/deny lists and header filters |
| Overrides | Create per-route or per-client proxy overrides |
| Meters | Set up usage meters and inspect consumption |
| Requests | Query request history, logs, and telemetry |
| Proxy Execution | Send test requests directly through a proxy from the agent |
| Notifications | View and manage platform notifications |
| Configuration | Read and update organisation-level settings |
| Users | View and update your user profile |
| MSP | Managed service provider operations (client and member management) |
| Discovery | Explore and introspect platform resources |
| Guides | Fetch in-context setup guides (e.g. proxy creation order) |
Resources
In addition to tools, the server provides MCP resources the agent can read:
requestrocket://schemas/credentials/<type>— JSON Schema for each credential typerequestrocket://schemas/proxy/create— JSON Schema for proxy creationrequestrocket://examples/responses/*— Example API response payloadsrequestrocket://client/{clientId}/targets— Live list of targets for a clientrequestrocket://client/{clientId}/proxies— Live list of proxies for a clientrequestrocket://client/{clientId}/credentials— Live list of credentials for a client
Proxy Setup via Agent
When creating a new proxy through an AI agent, the recommended setup order is automatically guided by the server instructions:
1. create_target → Define the upstream API endpoint
2. create_credential → Create a proxy credential (how callers authenticate to you)
3. create_credential → Create a target credential (how RequestRocket authenticates to upstream)
4. create_proxy → Combine the above into a proxy
5. execute_proxy_read_request → Send a test request to confirm everything worksSimply tell the agent what you want to connect to, and it will walk through these steps with you.
Safety & Best Practices
Secrets are redacted by default. The agent will never display raw credential values in conversation unless you explicitly ask it to include secrets. If you do request secrets, clear your conversation history afterwards.
Delete operations are disabled by default on the MCP server. Destructive actions (deleting proxies, credentials, targets, etc.) require the DELETE_ENABLED flag to be active on the server. The agent will always ask for explicit confirmation before any delete.
Additional safety rules enforced by the server:
- The agent will warn you before setting a proxy or rule to inactive, as this immediately stops live traffic
- Resource IDs are never fabricated — the agent always retrieves them from live list/get calls
- Billing, subscription management, member invites, and password resets are always directed to the web UI
Troubleshooting
| Symptom | Likely cause | Resolution |
|---|---|---|
401 Unauthorized | Invalid or missing token | Confirm your u-... token in Settings → Keys and check for trailing whitespace |
403 Forbidden | Permission denied or rule blocked | Check your account role and any active rules on the target proxy |
404 Not Found | Wrong resource ID passed | Ask the agent to list resources first — never pass IDs from memory |
429 Too Many Requests | Rate limit hit | Check your meters; throttle request frequency |
502 Bad Gateway | Upstream unreachable | Verify target URL and target credential are correct |
| MCP server not appearing | Config file not saved / wrong path | Confirm JSON is valid and the file path is correct; restart the client |