Cursor

Cursor reads MCP servers from a JSON file and sends static headers, so the gateway drops in with no OAuth round trip.

Connect it

{
  "mcpServers": {
    "sallyport": {
      "url": "https://mcp.sallyport.cloud/mcp",
      "headers": { "Authorization": "Bearer sp_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" }
    }
  }
}

Put it in the project instead of the home directory when a repository has its own agent identity. One identity per repository keeps the journal readable: every row says which agent, in which workspace, on whose behalf.

How an approval reaches you

The call comes back with an approval URL and a call id. Open the card, answer it, and the agent continues the same call. Nothing about the wait is a held connection, so a long think on your side costs the agent nothing.