All Skills
Design & CreativeClaude Plugins (Official)

mcp tunnels — Agent Skill

by anthropics · Updated

Connect Claude to a private MCP server through an Anthropic MCP tunnel. The /create-docker-mcp-tunnel command drives the Docker Compose quickstart end to end: certificates, proxy config, cloudflared, and a verifiable sample server.

At a glance

mcp-tunnels is an Agent Skill by anthropics in the Design & Creative category. In Claude Code it installs with `/plugin install mcp-tunnels@claude-plugins-official` after adding the anthropics/claude-plugins-official marketplace; other assistants use its SKILL.md instructions as rules. Its source repository has 45,210 GitHub stars (as of Oct 28, 2026).

Source 45kGitHub stars

How to install mcp tunnels in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install mcp tunnels in Claude CodeAnthropic's agentic CLI

  1. Add the marketplace

    claude
    /plugin marketplace add anthropics/claude-plugins-official
  2. Install the skill

    claude
    /plugin install mcp-tunnels@claude-plugins-official
  3. Use it

    These are slash commands for a Claude Code session, not your shell. Claude auto-invokes the skill when your request matches its description — or type its slash command if it exposes one.

Documentation

Full README

mcp-tunnels

Connect Claude to an MCP server running inside your private network through an Anthropic **MCP tunnel** — no inbound ports, no public exposure, no IP allowlisting on your origin. Traffic flows over an outbound-only connection.

Research preview. MCP tunnels is provided "as-is" with no uptime or support commitment and depends on a third-party transport provider (Cloudflare). Review the security model before sending anything sensitive.

Commands

/create-docker-mcp-tunnel [deployment-dir]

Drives the MCP tunnels **quickstart** end to end on your machine, using Docker Compose with manually supplied credentials (the shortest path for local testing). It walks you through the parts only you can do in the Claude Console and runs everything else for you:

  1. Preflight — checks Docker, Docker Compose, OpenSSL, and outbound

connectivity.

  1. Create the tunnel (Console) — you create it and copy the domain; the

token stays out of the chat and goes into a locked-down, gitignored .env.

  1. Certificates — generates a CA and a server certificate with OpenSSL,

with the exact extensions the tunnel requires.

  1. Register the CA (Console) — you upload ca.crt; the tunnel goes Active.
  2. Upstream — scaffolds a verifiable FastMCP sample server, or wires up an

MCP server you already have.

More Design & Creative skills

Catalog data refreshed . Something wrong? Report it.