Linkup MCP server and Dome

1. 01

   Add the Linkup MCP server

   Every agent shares one Linkup API key, held by Dome and sent as a Bearer token.

   $ dome tools add --name linkup \
     --url https://mcp.linkup.so/mcp \
     --auth-method api-key \
     --credential-type shared \
     --authorization "Bearer $LINKUP_API_KEY" \
     --gateway prod-gateway

2. 02

   Sync the catalog

   Sync lists linkup-search, linkup-fetch, linkup-research and linkup-get-research. Calls fail until the catalog has them.

   $ dome tools catalog sync linkup

3. 03

   Block personal data in arguments

   Request filters see each argument before Linkup does. A match ends the call there.

   $ cat > query-leak.json <<'EOF'
   $ {"json":{"components":[{"fieldActions":[{
     "matcher":{"contentMatchers":[{"ssn":{}},{"creditCard":{"requireLuhn":true}},{"email":{}}]},
     "action":"FILTER_ACTION_BLOCK"}]}]}}
   $ EOF
   $ dome guards filters create query-leak --config-from query-leak.json
   $ dome tools guards filters set linkup --direction request --filters query-leak

4. 04

   Apply the rules

   The source list is scoped to policy-analyst. Simulate a fetch from each source, then deploy.

   $ dome rules apply linkup-sources.cedar --agent policy-analyst --name linkup-sources

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Linkup itself, see Linkup's documentation.

permit (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linkup" &&
  ["linkup-search", "linkup-fetch"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linkup" &&
  !["linkup-search", "linkup-fetch"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linkup" &&
  resource.tool_name == "linkup-search" &&
  resource has arguments &&
  resource.arguments has query &&
  resource.arguments.query like "*Halcyon*"
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "linkup" &&
  resource.tool_name == "linkup-fetch" &&
  !(resource has arguments &&
    resource.arguments has url &&
    (resource.arguments.url like "https://www.sec.gov/*" ||
     resource.arguments.url like "https://eur-lex.europa.eu/*"))
};