SaaS Quickstart

01Sign up for ShieldAgent

Create your account at app.shieldagent.io/signup. Your workspace is provisioned instantly — no credit card required to start.

02Create your first tenant

A tenant is an isolated workspace for a team or project. In the dashboard, go to Settings → Tenants → New Tenant.

You can create multiple tenants to isolate different teams or environments (dev / staging / prod).

03Register your AI agent

Go to Agents → Register Agent. Give it a name and description. ShieldAgent generates an agent key — this is the credential your AI agent will use to authenticate with our proxy endpoint.

Copy the agent key now — it won't be shown again. You can rotate it any time from the agent settings.

04Point your agent at the ShieldAgent proxy

Update your AI agent's MCP configuration to route through ShieldAgent instead of connecting directly to your MCP server. The SaaS proxy endpoint is shown in the dashboard under Settings → Connection.

{
  "mcpServers": {
    "filesystem": {
      "url": "https://proxy.shieldagent.io/mcp",
      "headers": {
        "Authorization": "Bearer sa_live_YOUR_AGENT_KEY",
        "X-Upstream": "https://your-mcp-server.example.com"
      }
    }
  }
}

Replace sa_live_YOUR_AGENT_KEY with the key from Step 03 and X-Upstream with your actual MCP server URL.

05Watch events in the dashboard

As your agent makes tool calls, they appear in real time in the Events tab. Each entry shows:

• ▸The tool name and arguments (redacted per your DLP policy)
• ▸The policy decision: ALLOW / DENY / TRANSFORM
• ▸Risk score and which rule triggered
• ▸Latency added by the proxy (typically <2 ms)

No setup required — events stream automatically as long as your agent is routing through the proxy.