> For the complete documentation index, see [llms.txt](https://shinkalabs.gitbook.io/hub/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shinkalabs.gitbook.io/hub/andromeda/mcp-reference/connect.md).

# Connect

The MCP server lives at `https://api.andromedainfra.pro/mcp`. It speaks streamable HTTP and authenticates with the same `X-Api-Key` header as REST.

## Configuration block

Most MCP clients take a JSON entry like:

```json
{
  "mcpServers": {
    "andromeda": {
      "url": "https://api.andromedainfra.pro/mcp",
      "headers": {
        "X-Api-Key": "<ANDROMEDA_KEY>"
      }
    }
  }
}
```

### Claude Desktop

Add the `andromeda` entry to your MCP servers configuration and restart the app. The tools appear in the tool picker.

### Cursor

Add the same entry in Cursor's MCP settings. Tools become available to the agent in the editor.

### Custom MCP clients

Point your client's HTTP transport at the `/mcp` URL and set the `X-Api-Key` header. The server handles capability negotiation and tool discovery over the protocol.

## Authentication and scopes

The key's [scope](/hub/andromeda/getting-started/auth.md) gates the tools:

* `read`: read-only tools (status checks, previews, challenges, ciphertext reads).
* `write`: signing, prepares, submits, the Encrypt surface.
* `admin`: webhooks, audit log, policy templates, future-sign triggers.

A call to a tool the key is not scoped for is rejected, the same as the equivalent REST call. Each tool call charges quota at the cost of its REST counterpart.

## Idempotency

Tool calls honour the `Idempotency-Key` mechanism: the same body with the same key replays the previous response. See [Idempotency keys](/hub/andromeda/guides/idempotency.md).

## Troubleshooting

* **No tools show up.** Check the URL is exactly `https://api.andromedainfra.pro/mcp` and the header name is `X-Api-Key`.
* **A tool returns "forbidden".** The key lacks the scope that tool needs. Use a key with `write` or `admin` as appropriate.
* **Calls fail with `429`.** You are hitting the rate limit; back off.