Connect
Integrator appendix. Obtain a client connection without tribal knowledge and without exporting signing material. Buyers evaluating the stack contract should start at Overview or book an infrastructure review before wiring a client.
Maturity for install wizard and BFF tokens is Early Access / by arrangement until Integration Surfaces marks them Live.
Prerequisites
- A Stratum peer deployment where Legate is entitled for your tenant
- Operator access to the Stratum dashboard
- An MCP client (Cursor, Claude, or a custom Streamable HTTP / stdio client)
Obtain a connection
| Path | What you receive | Notes |
|---|---|---|
| Dashboard install / deeplink | Client config that points at your Legate HTTPS endpoint | Prefer when the install wizard is Live |
| Short-lived connection token | Bearer credential minted by Stratum (BFF) | Audience-bound. Rotates. Not a wallet export |
| Agent Card URL | Discovery document for A2A clients | See Agent Card |
| Local stdio config | Command + env for a trusted operator machine | Multi-user traffic should use HTTPS + JWT |
If the install wizard is not yet Live, your BlockSkunk contact can issue a by-arrangement connection. Do not copy signing material into Cloud Functions, laptops, or chat transcripts.
Transports
| Transport | When to use |
|---|---|
| Remote MCP over HTTPS (Streamable HTTP) | Default for shared environments |
| Local stdio | Trusted operator workstation for smoke tests |
Remote MCP is stateless. Point the client at the MCP URL issued for your deployment.
Minimal remote config (placeholders)
{
"mcpServers": {
"legate": {
"url": "https://legate.example.internal/mcp",
"headers": {
"Authorization": "Bearer <short-lived-token>"
}
}
}
}
Agent Card
https://<your-legate-host>/.well-known/agent-card.json
High-level skills that map to published packs. Discovery contract, not an admin dump.
Liveness
| Endpoint | Meaning |
|---|---|
GET /health | Process is up |
GET /ready | Safe to send traffic |
Use /ready for load-balancer and client retry gates.
What never leaves the peer
- Long-lived write private keys / signing material
- Wallet or identity archives for export
- Production JWTs in tickets or public examples
Next: Quickstart.
Related BlockSkunk docs
One stack: eligibility fact, shared sealed record, assessor-ready evidence, delegated agent access.