Configuring an Agent With Its Credentials and Gateway URL

Give your AI agent the credentials and the gateway URL it needs to authenticate to the MCP gateway and route its calls through AI Security.

Before you begin

Before you begin, make sure that you have:

Registered the agent in AI Security. See Registering an Agent.
The client ID and client secret issued to the agent when you registered it. See Copying the Client ID.
Your gateway URL. See Copying the Client Secret.
A gateway connector added for the business application the agent needs to reach. See Copying Your Gateway URL.

You do this in the agent itself, not in Forcepoint Data Security Cloud. The exact steps depend on the agent framework you use.

Steps

Open the configuration for your AI agent.
Enter the client ID issued to the agent.
Enter the client secret issued to the agent.

Retrieve the secret from your secret manager. Reference it from your organization's secret store rather than writing it into a configuration file in plain text.
Set the MCP server endpoint to your gateway URL.
Save the agent configuration.
Have the agent make a call to one of the tools exposed by your gateway connector.

Note: Some agent frameworks apply configuration changes only after a restart. Check your framework's documentation.

Result

The agent authenticates to the MCP gateway. Its Last Active time updates in the agent list, and its calls are recorded in your audit trail.

Next steps

If the agent cannot authenticate, confirm that the client ID and secret are correct, that the agent's token has not expired, and that the agent has been granted access to the connector it is calling.