MCP

Growth plan and above (and all Demo workspaces).

Endpoint: https://railguardsecurity.com/api/public/mcp (JSON-RPC over HTTP). Auth: the agent's own Authorization: Bearer rg_… key, so the same policies apply.

Tool	What the model can do
`request_spend`	Submit a spend request (amount, merchant, category, reasoning). Evaluated exactly like the REST API.
`get_transaction`	Check status of an earlier request, e.g. after human approval.

The model cannot edit policies, approve its own requests, or read other agents' data.

Claude Code

claude mcp add --transport http railguard https://railguardsecurity.com/api/public/mcp \
  --header "Authorization: Bearer rg_..."