Integrations

Fits the stack you already run.

Ultra sits between your agents and the tools they call. It plugs into the identity provider, device management, and security tooling you have already standardized on, so adopting it does not mean adopting a second stack.

Agents and their tools

Point an agent at Ultra and every MCP server it reaches is inventoried, policy checked, and logged.

Your identity provider

SAML or OIDC single sign on with SCIM directory sync. Groups become teams, and offboarding someone removes their access.

Your managed fleet

Ship Ultra through your MDM. No download, no setup, no reconfiguring agents. Silent installation across your fleet.

Your existing telemetry

Alerts post to Slack and stream to a bucket you own. Traces export over OTLP to the tools you already watch.

MCP servers

Connects to any MCP server

Ultra isn't a catalog of approved tools. If it speaks MCP, Ultra can connect to it, and every call is checked against your guardrails before it leaves the device.

Any transport

Local servers over stdio, remote servers over Streamable HTTP or SSE. Ultra detects which one a server uses.

Any auth

OAuth sign-in with tokens refreshed automatically, your own OAuth app when a vendor requires one, API keys and access tokens, custom headers, or environment variables.

Any starting point

Ask your agent to add a connector, paste a URL, pull one from the MCP registry, or import the servers your agents already use in one step.

Catalog

40 integrations

Browse by category, or search for the tool you have in mind. Each card links to the setup guide in our documentation.

AI agents

Ultra sits between your agents and every tool they call. Point an agent at Ultra once and its MCP traffic is inventoried, policy checked, and logged.

Amazon Q Developer

Policy enforcement for Amazon Q tool calls

Antigravity

MCP configuration managed by the Ultra installer

Claude Code

Secure MCP calls from Anthropic's terminal agent

Claude Desktop

Route Claude Desktop MCP traffic through Ultra

Cline

Proxy MCP traffic from the Cline VS Code extension

Codex

Secure MCP calls from OpenAI's coding agent

Cursor

Inventory and govern every tool Cursor reaches for

Gemini CLI

Secure MCP traffic from Google's terminal agent

GitHub Copilot

Covered through the VS Code MCP configuration

Goose

Guardrails for Block's open source agent

Grok Build

Inventory tools reached by xAI's coding agent

Hermes

Supported by the Ultra installer

LM Studio

Cover local models running through LM Studio

Ona

Cloud development environments, configured on first boot

OpenCode

Inspect and log OpenCode MCP activity

Roo Code

Route Roo Code through the Ultra proxy

VS Code

Native MCP support, including GitHub Copilot

Windsurf

Full visibility into Windsurf tool calls

Zed

Route Zed's agent panel through Ultra

Identity

Bring your own identity provider. SAML or OIDC single sign on, plus SCIM 2.0 directory sync so users and teams stay in step with your directory.

Any OIDC provider

Connect over OpenID Connect with a discovery URL

Any SAML 2.0 provider

Connect any compliant provider with the generic option

SCIM 2.0

Provision users and map directory groups to teams

Auth0

SAML single sign on

Google Workspace

SAML single sign on, plus Continue with Google

JumpCloud

SAML single sign on and SCIM directory sync

Microsoft AD FS

SAML single sign on

Microsoft Entra ID

SAML single sign on and SCIM directory sync

Okta

SAML single sign on and SCIM directory sync

OneLogin

SAML single sign on

PingOne

SAML single sign on

Rippling

SAML single sign on

Observability and SIEM

Ultra keeps its own audit trail and forwards to the stack you already run, so agent activity lands next to the rest of your telemetry.

Any OTLP backend

Point Ultra at any OpenTelemetry gRPC collector

Amazon S3

Stream alerts to a bucket you own as gzipped NDJSON

Datadog

Export traces and metrics over OTLP

Grafana Tempo

Send OpenTelemetry spans to your Grafana stack

Honeycomb

Export traces over OTLP for high cardinality analysis

Jaeger

Local or self hosted tracing over the OTLP endpoint

Panther

Detections over Ultra alerts, delivered through S3

Device management

Ship Ultra through your MDM as a signed package and a configuration profile. Nobody on your team downloads anything or runs a setup step: Ultra installs silently, configures every MCP agent it finds, migrates the connectors already on the machine, and resolves each device to the right person through your directory. Jamf Pro is documented end to end today.

Jamf Pro

Zero touch macOS rollout, attributed per employee

Alerting

Send alerts to the channels your team already watches, with a severity filter per channel so a busy channel only gets what matters.

Slack

Post alerts to the channels you choose, filtered by severity

Request

Not seeing yours?

We are continuously building integrations to meet our customers' needs. Let us know what you need or would like to see, and we'll do our best to add it as soon as possible.