No local install required. Point your MCP host at the hosted endpoint with an agent key. The agent never sees a data-source credential: the control plane resolves credentials server-side, rewrites scopes before any statement runs, and appends every event to a hash-chained audit trail.
Install
{
"mcpServers": {
"hebrah": {
"url": "https://mcp.hebrah.com/mcp",
"headers": { "Authorization": "Bearer hb_conn_YOUR_KEY" }
}
}
} No key yet? create_account is available without one — headless signup with $1 in free credit, 100 queries, 5 MB egress, 7-day trial. Or hand your agent /SKILL.md and it onboards itself.
Agent tool surface
| Tool | Purpose |
|---|---|
| create_account | Self-serve signup + $1 trial — no card required (headless) |
| discover_data_sources | List every target: connector, required scopes, tiers, health |
| connect_to_data_source | Open a scoped, TTL-bound connection |
| query_data_source | Read-only, scope-enforced query — rows, metering, audit event id |
| get_data_source_audit | Read the hash-chained audit events for a connection |
| get_connect_usage | Trial quota and usage counters |
| revoke_data_source_connection | Revoke instantly (confirm + human intent message) |
The full hosted surface also carries legacy dashboard tools (mapping, versions, promotions) — the tools above are the agent connection surface. See the connectors guide for what each target exposes.
The 90-second loop
create_account— headless signup, $1 trial applieddiscover_data_sources— pick a target, read its scope grammarconnect_to_data_source— open a scoped, TTL-bound connectionquery_data_source— run read-only queries, metered per callget_data_source_audit+ verify — export the evidence trailrevoke_data_source_connection— cut access instantly when done
Compatible clients
Cursor
One-click Install in Cursor deeplink, or copy ~/.cursor/mcp.json config.
Claude
Claude Desktop and Claude Code: copy CLI or manual config with Bearer PAT.
Codex
OpenAI Codex CLI loads the hosted Hebrah MCP server.
OpenCode
Configure the hosted Hebrah MCP URL in OpenCode settings.
Windsurf
Copy serverUrl JSON for mcp_config.json.
Google Antigravity
Copy serverUrl JSON for mcp_config.json.
Zed
Zed MCP extensions with Bearer PAT auth.
VS Code
One-click vscode.dev MCP install redirect with Bearer PAT.
Any MCP host
Streamable HTTP hosted MCP with no local install required.