Lindy and Dome

1. 01

   Register Lindy

   Register it with the Linear tools it may reach and the Gateway they sit behind.

   $ dome agents register --name lindy \
     --tool linear/list_issues \
     --tool linear/get_issue \
     --tool linear/save_comment \
     --gateway ops-gateway

2. 02

   Create its key

   You get back the key and the Gateway's MCP URL. Both go into Lindy, and only there.

   $ dome agents create-key lindy --name lindy-mcp --gateway ops-gateway

3. 03

   Apply the rules

   Scope them to the lindy agent. Simulate a create_issue to see it refused, then deploy.

   $ dome rules apply lindy-linear.cedar \
     --agent lindy --name lindy-linear

4. 04

   Add the Gateway to Lindy

   In Lindy, open Integrations, choose Add, then MCP, and paste the MCP URL. Under Advanced, send the key as an Authorization bearer token.

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Lindy itself, see Lindy's documentation.

permit (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linear" &&
  ["list_issues", "get_issue", "save_comment"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linear" &&
  !["list_issues", "get_issue", "save_comment"].contains(resource.tool_name)
};