Connect an AI agent (MCP)
Our Model Context Protocol (MCP) server lets an artificial intelligence (AI) agent manage the instances, apps, Secure Shell (SSH) keys, and dedicated servers in your workspace through Open Authorization (OAuth), so the agent never sees your password.
https://mcp.galaxygate.net/mcpAdd the server
Select the app your agent runs in.
In Claude, open Customize, then Connectors, and select Add custom connector. Name it GalaxyGate, paste the server address, and add it. If a dialog offers Sign in now, choose it. Then select Connect on the new connector and approve access in your browser.
Custom connectors work on every plan. The Free plan allows one. On Team and Enterprise, an owner adds the connector under Organization settings and each member then selects Connect on it.
Any other client that supports Streamable HTTP with OAuth works with the same address.
Approve access
Your browser opens an Application Access Request page. Check the address under Credentials will be sent to, select Allow Access, sign in to the panel if asked, and select Authorize.
What the agent can do
| Area | Actions |
|---|---|
| Workspaces | List workspaces, read quotas, and manage SSH keys and recipes. |
| Instances | Create, update, power, upgrade, back up, and delete instances, and run scripts on them. |
| Apps | Create, start, stop, restart, and delete apps, and read their logs and metrics. |
| Dedicated servers | List and update dedicated servers, power cycle them, and reset their remote console. |
| Workflows | Check the status of tasks that take time to finish. |
Scopes and revoking
The agent asks for these scopes. Each shows as Read & write on the approval page. You can clear one there, and tools that need it then fail with a message naming the scope.
| Scope | What it covers |
|---|---|
workspace:write | Your workspaces |
instance:write | Your instances |
app:write | Your apps |
image:write | Your images |
dedibox:write | Your dedicated servers |
A connection lasts 30 days. After that, connect again.
To revoke access early, open the menu with your name in the panel, then Preferences, then Authorized Apps, and select Disconnect on its row. Access ends immediately.