Admin Setup

Installer
Terminal

Download and install Ultra

Request access to Ultra. Once your request is approved, sign in to Ultra Hub and download the installer for your platform from Settings > Downloads.Run the installer. It automatically detects your AI agents and configures them.

Restart your AI agent

Quit and reopen your AI agent (Claude Desktop, Cursor, Codex, etc.) so it picks up the Ultra connection.Ultra works with Claude Desktop, Cursor, VS Code, GitHub Copilot, Claude Code, Codex, Windsurf, Roo Code, Goose, Gemini, Antigravity, LM Studio, Amazon Q Developer, Zed, Ona, and Hermes.

Verify it's working

Ask your AI agent to check the connection:

“Check your connection to Ultra”

Your agent should confirm that Ultra is installed and running.

Connect to MCP connectors

Ask your AI agent to add the MCP connectors you want to use:

“Connect to the Notion MCP connector”
“Add the GitHub MCP connector”
“Set up the Linear MCP connector”
“Add the filesystem connector so you can read my project files”

Your agent will search the registry, install the connector, and handle any authentication setup.Restart your AI agent after adding connectors for them to become available.

Make sure your agent installs the official MCP connector for each service, not a community fork. If unsure, ask your agent to confirm the publisher before installing.

Connect to Ultra Hub

For centralized team management:

Go to hub.ultra.security and create an account
Create a workspace for your team
Ask your AI agent to connect:
- “Log in to Ultra Hub”
- “Link this device to Ultra Hub”

Once linked, your traces and audit events sync to Ultra Hub for team-wide visibility.

Invite your team

From the Hub web UI:

Go to Settings > Invites
Click Invite Member
Enter the team member’s email address and select a role
Click Send Invite

The invited user receives an email with a link to join your organization. See Roles & Permissions for details on available roles.

Install Ultra

curl -fsSL https://get.ultra.security/install.sh | bash

This auto-detects your OS and architecture, downloads the latest release from CDN, and installs the ultra binary to /usr/local/bin.

Other installation methods

macOS .pkg installer: Download the signed and notarized .pkg from get.ultra.security/v{VERSION}/Ultra-{VERSION}-macOS.pkg and double-click to install.Custom install directory:

curl -fsSL https://get.ultra.security/install.sh | INSTALL_DIR=~/.local/bin bash

See Installation for all options.

Run diagnostics

Verify that Ultra is installed and your system is ready:

ultra doctor

This checks your OS, detects installed MCP agents, and validates dependencies like Node.js.

Configure your MCP agent

Run the interactive install wizard to configure your MCP agent to use Ultra:

ultra install

Claude Desktop
Cursor
Codex
Non-interactive

ultra install --agent claude

This configures Claude Desktop to route all MCP traffic through Ultra.

ultra install --agent cursor

ultra install --agent codex

This configures Codex to route all MCP traffic through Ultra.

ultra install --yes

Installs into all detected agents without prompting.

Restart your MCP agent after configuring for changes to take effect.

Add an MCP connector

Search for a connector, then add it with the command or URL its publisher documents:

ultra search filesystem
ultra add filesystem -- npx -y @modelcontextprotocol/server-filesystem /tmp

ultra add does not search a registry or pick a name for you. A remote connector needs a transport and a URL:

ultra add --transport http example https://mcp.example.com/mcp

Restart your MCP agent after adding connectors.

Start the proxy

Start Ultra. Your MCP agent connects to Ultra, and Ultra proxies to your upstream connectors:

ultra start

Ultra is now recording every MCP operation. Restart your MCP agent to begin routing traffic through Ultra.

Connect to Ultra Hub

For centralized team management:

Go to hub.ultra.security and create an account
Create a workspace for your team
Authenticate and link your device:

ultra login
ultra link

Once linked, your traces and audit events sync to Ultra Hub for team-wide visibility.

Invite your team

From the Hub web UI:

Go to Settings > Invites
Click Invite Member
Enter the team member’s email address and select a role
Click Send Invite

The invited user receives an email with a link to join your organization. See Roles & Permissions for details on available roles.

(Optional) View local traces

Open the local web dashboard to see your MCP traffic:

ultra dashboard

Navigate to http://localhost:8080 to inspect traces, view audit logs, and monitor connected connectors locally.

What’s Next

How It Works

Understand the proxy architecture

Configuration

Customize your Ultra setup

Observability

Deep dive into traces and audit logs

Ultra Hub

Set up team management

Getting Started

Ultra Hub

Observability

Concepts

What’s Next

How It Works

Configuration

Observability

Ultra Hub

​What’s Next

How It Works

Configuration

Observability

Ultra Hub

What’s Next