Quickstart
Get your first governed MCP call running in under 5 minutes. Follow these steps to install the CLI, authenticate, and connect your first provider.
Install the CLI
The fastest way to get started is with npx. This downloads and runs the latest version:
npx @squidward/cli initOr install globally for repeated use:
npm install -g @squidward/cliVerify the installation:
squidward --versionAuthenticate
Log in to your Squidward account. This opens your browser for secure authentication:
squidward login
# Output:
# Opening browser for authentication...
# Waiting for confirmation...
# ✓ Authenticated as you@company.com
# ✓ Token saved to ~/.squidward/credentialsSecure Authentication
Squidward uses secure browser-based OAuth. Your credentials are never stored in plain text and tokens are encrypted at rest.
For CI/CD environments, use a service account token instead:
# Set token via environment variable
export SQUIDWARD_TOKEN=mcp_live_xxxxxxxxxxxxx
# Or pass directly
squidward --token mcp_live_xxxxxxxxxxxxx providers listConnect a Provider
Connect your first integration. We will use GitHub as an example:
squidward providers connect github
# Output:
# Opening browser to authorize GitHub...
# ✓ GitHub connected successfully
# Connected as: your-username
# Scopes: repo, read:org, read:userView your connected providers:
squidward providers list
# Output:
# ┌──────────┬────────────┬───────────────────┬─────────────┐
# │ Provider │ Status │ Connected As │ Last Used │
# ├──────────┼────────────┼───────────────────┼─────────────┤
# │ github │ connected │ your-username │ Just now │
# └──────────┴────────────┴───────────────────┴─────────────┘Run Your First Governed Call
Now run an MCP tool through the governed proxy:
squidward mcp invoke github:list_repos --limit 5
# Output:
# ┌─────────────────────────────┬─────────────────┬──────────────┐
# │ Repository │ Visibility │ Last Updated │
# ├─────────────────────────────┼─────────────────┼──────────────┤
# │ your-username/project-a │ public │ 2 hours ago │
# │ your-username/project-b │ private │ 1 day ago │
# │ your-company/internal-tool │ internal │ 3 days ago │
# └─────────────────────────────┴─────────────────┴──────────────┘
#
# ✓ Policy: allowed (matched: default-allow-read)
# ✓ DLP: passed (no sensitive data detected)
# ✓ Audit: logged (event-id: evt_xxxxx)Every Call Is Governed
Notice the policy, DLP, and audit information. Every MCP call through Squidward is evaluated against your security policies and logged for compliance.
Configure Your AI Tools
Now configure your AI tools to use Squidward as the gateway. Generate a ready-to-use config:
// ~/.cursor/mcp.json
{
"mcpServers": {
"squidward": {
"url": "https://gateway.squidward.app/mcp",
"headers": {
"Authorization": "Bearer ${SQUIDWARD_TOKEN}"
}
}
}
}Or generate it automatically:
squidward config generate cursor
# Output:
# ✓ Config written to ~/.cursor/mcp.json
# Restart Cursor to apply changes.Next Steps
You're all set!
Your AI tooling is now secured with Squidward. All MCP calls are being governed by your security policies and logged for compliance.