---
title: Signing In and Using the MCP Gateway
slug: kronpam-reference-guide-3-9-0/signing-in-and-using-the-mcp-gateway
docTags: 
createdAt: 2026-10-14T14:10:16.516Z
---

The first request of a user without a valid session starts the browser sign-in. Local and LDAP users sign in the same way.

To sign in to the MCP Gateway:

1. In the AI client, call the gateway\_login tool or send a request that uses an MCP server. The gateway returns a sign-in link.
2. Open the link in a browser.The link expires in five minutes. 
3. On the Kron PAM sign-in page, enter your username and password and click the **Login** button. Existing MFA rules apply.
4. Confirm that the **Authentication Successful** page shows your username in the **Signed in as** field and the session end time in the **Session valid until** field.
5. Close the browser tab and return to the AI client.

![Authentication Successful Page](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/_pYijFTgluGBRt1uwAvjS_auth-page.png)

**Using MCP Server Tools**

Ask the AI client to list the available tools, or call the list\_tools tool. The gateway returns only the MCP servers and tools that your Realms authorize. 

![Sign-in Link and Authorized Tools in Claude Code](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/3Srz1idEqoaixZIeGAYoz_mcp-auth.png)

To use a tool, describe the task to the AI client. The client calls the call\_tool tool, and the gateway forwards the request to the MCP server after the Realm check.

**Signing Out**

Call the gateway\_logout tool to end the session. The gateway invalidates the session token and the next request starts the sign-in again.