MCP server setup - AppGoat Docs

The AppGoat MCP server gives your agent app store tools: look up apps, read reviews and listing changes, research keywords and read the charts. Hosted at https://api.appgoat.ai/mcp (Streamable HTTP, OAuth sign-in or an x-api-key header). There is no package to install: every client connects to the hosted server.

Add to Claude

One click in claude.ai, Claude Desktop and the mobile apps.

Add to Cursor

One click, Cursor opens the sign-in page.

ChatGPT

Coming soon to the ChatGPT app directory.

Claude

Click Add to Claude, confirm in the Claude directory and sign in with your AppGoat account. Works in claude.ai, Claude Desktop and the mobile apps. Can’t use the directory? In Settings → Connectors choose Add custom connector and paste https://api.appgoat.ai/mcp.

Claude Code

Run this once, then /mcp in Claude Code to sign in. If you added AppGoat in Claude and Claude Code is logged in with the same Claude account, it is already there.

claude mcp add --transport http appgoat https://api.appgoat.ai/mcp

Or authenticate with an API key instead of signing in:

claude mcp add --transport http appgoat https://api.appgoat.ai/mcp \
  --header "x-api-key: $APPGOAT_API_KEY"

Cursor

Click Add to Cursor, confirm Install, and Cursor opens the AppGoat sign-in page. The manual setup is the mcpServers JSON under Other clients, in .cursor/mcp.json.

ChatGPT

AppGoat is coming soon to the ChatGPT app directory. Until then: Settings → Apps & Connectors → Advanced settings → turn on Developer mode, then Create an app with the URL https://api.appgoat.ai/mcp and sign in.

Other clients

Any MCP client that speaks Streamable HTTP can use https://api.appgoat.ai/mcp with OAuth 2.1 (sign in with your AppGoat account) or an x-api-key header. Most clients (Windsurf, VS Code, Zed, …) take the same mcpServers JSON:

{
  "mcpServers": {
    "appgoat": {
      "url": "https://api.appgoat.ai/mcp",
      "headers": {
        "x-api-key": "YOUR_APPGOAT_API_KEY"
      }
    }
  }
}

Clients that only run local (stdio) servers, such as claude_desktop_config.json, can bridge to the hosted server with mcp-remote:

{
  "mcpServers": {
    "appgoat": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.appgoat.ai/mcp"]
    }
  }
}

Errors and retries

Failed calls come back as a tool result with isError and a readable message: the HTTP status, the error code, the API’s hint and a docs link. Rate limits (429) and upstream errors are retried twice with backoff before they are reported; out of credits, plan limits, an invalid key or an unknown app are not retried.

Add to Claude

Add to Cursor

ChatGPT

​Claude

​Claude Code

​Cursor

​ChatGPT

​Other clients

​Errors and retries

Claude

Claude Code

Cursor

ChatGPT

Other clients

Errors and retries