cat1: Claude Code client connect PASS (HTTP, no adapter, key via env-ref); Cursor config staged

categories/cat1-functional/tests/probes.md

@@ -80,3 +80,16 @@ Each caller's `Arcade-User-ID` is injected into `context.user_id` and returned
 executes as the calling user (distinct identity per caller, no shared/service identity). Also
 validates **cat-9 Stage-2** (full tunnel-registration chain) end-to-end.
 
+## Named MCP clients, no custom adapter (2.2) — criterion 4
+**Claude Code:** added via `claude mcp add --transport http arcade-eval-cc <gateway-url> -H 'Authorization:
+Bearer ${ARCADE_API_KEY}' -H 'Arcade-User-ID: ...'` (local scope). `claude mcp list`:
+```
+arcade-eval-cc: https://api.arcade.st.dev/mcp/zeb-gateway-test (HTTP) - ✔ Connected
+```
+No custom adapter. Key is **not** persisted: `~/.claude.json` holds `Bearer ${ARCADE_API_KEY}` (raw key
+count = 0, reference count = 1), expanded at runtime from the env.
+
+**Cursor:** `.cursor/mcp.json` (git-ignored) configured with the same gateway URL + `Bearer
+${env:ARCADE_API_KEY}` header (Cursor resolves `${env:VAR}` in url/headers). Verified in the Cursor UI
+(launched from a shell with `.env` loaded). [user-confirmed — record result here]
+