Detect installed MCP clients and configure them to use Ultra as their MCP server.Documentation Index
Fetch the complete documentation index at: https://docs.ultra.security/llms.txt
Use this file to discover all available pages before exploring further.
Usage
Flags
| Flag | Short | Default | Description |
|---|---|---|---|
--client | -c | Target client (claude, cursor, vscode, cline, claude_code, windsurf, goose, codex, opencode, gemini, roocode, amazonq, lmstudio, ona, hermes) | |
--all | false | Install into all detected MCP clients (non-interactive) | |
--config | Path to Ultra config file | ||
--no-backup | false | Skip backup of existing client config | |
--yes | -y | false | Skip confirmation prompt |
--list | -l | false | List detected clients without installing |
Examples
Supported Clients
| Client | Flag Value | Aliases |
|---|---|---|
| Claude Desktop | claude | claude-desktop, claude_desktop |
| Cursor | cursor | |
| Codex | codex | codex-cli |
| VS Code | vscode | |
| Claude Code | claude_code | claude-code |
| Windsurf | windsurf | |
| Goose | goose | |
| OpenCode | opencode | |
| Gemini | gemini | |
| Roo Code | roocode | roo-code, roo_code |
| Amazon Q | amazonq | amazon-q, amazon_q |
| LM Studio | lmstudio | lm-studio, lm_studio |
| Ona | ona | |
| Hermes | hermes |
What It Does
The install command writes Ultra as an MCP server entry in the client’s configuration. For example, Claude Desktop’s config becomes:~/.codex/config.toml becomes:
~/.hermes/config.yaml becomes:
enabled: false are filtered out when discovering existing entries.
If --config is specified, the args include --config <path>.
Auto-linking with deploy keys
Ultra auto-links the gateway to Hub at install time when invoked via:ultra install --all— used by MDM deployments to configure every detected client in one shotultra install --client ona— used by the Ona devcontainer entry point, which needs the gateway named before any MCP client starts
ULTRA_DEPLOY_KEY environment variable, config file, or managed preferences). If a deploy key is found, the gateway is linked immediately:
- The gateway registers with the workspace scoped by the deploy key
- Device identity (email, external ID) is resolved from available sources (MDM preferences, environment variables)
- The gateway appears in the Hub dashboard before any MCP client launches
ultra install --yes, and per-client installs other than Ona — the gateway links during the first ultra start instead. OAuth-authenticated users always link at ultra start, regardless of which install path was used.
Backups
By default, the existing client config is backed up before modification. Use--no-backup to skip.