MCP

The Trustgrid MCP server lets AI assistants — Claude, Copilot, Cursor, and others — interact with your Trustgrid environment using natural language. Ask questions about node status, run network diagnostics, query alerts, and explore your topology without leaving your editor or chat interface.

What you can do

⚠️ Read-only access
The MCP server provides read-only access to your Trustgrid infrastructure. No changes can be made through the MCP interface at this time.

• Query infrastructure — list nodes, inspect configuration, check VPN routes, review certificates and policies
• Run live diagnostics — test TCP connectivity, DNS resolution, gateway latency, and packet paths directly on nodes
• Explore topology — understand how your virtual networks, clusters, and gateways are connected
• Search documentation — semantic search across Trustgrid docs returns relevant excerpts alongside live API data
• Execute code (codemode) — run sandboxed JavaScript with full API access for custom analysis and bulk queries
• Review audit history — query config changes, node events, and user activity logs

Endpoint URL

The MCP server is hosted at https://mcp.<domain>.trustgrid.io where <domain> matches your organization’s Trustgrid domain. For example, if your portal is at acme.trustgrid.io, your MCP endpoint is https://mcp.acme.trustgrid.io.

The default production endpoint is:

https://mcp.trustgrid.io/mcp/<group>/[<group>...]

The server exposes three tool groups, each at its own path:

You can put any number of suffixes after /mcp to combine groups as needed. For example, /mcp/codemode/tools gives you both codemode and traditional MCP tools access.

See Tools for details on what each group provides.

Transport

The Trustgrid MCP server uses Streamable HTTP transport. This is the only transport available for external integrations — there is no stdio or WebSocket option. Your MCP client must support HTTP-based MCP connections.

Authentication

The server accepts two authentication types:

• OAuth 2.0 - Clients that implement the MCP OAuth handshake (Claude Desktop, Claude Code, and others) will trigger a browser-based login automatically — no manual token needed.
• API token — a clientId:clientSecret pair generated in the Trustgrid portal.

See Authentication for setup details.

Rate limits

Requests are rate-limited per token:

The server returns 429 Too Many Requests with Retry-After and X-RateLimit-* headers when limits are exceeded.

Next steps

• Authentication — get credentials and understand auth options
• Tools — explore available tool groups
• Installation — connect your AI client
• Troubleshooting — common setup issues