Anthropic 平台文档（英文全量）

MCP tunnels let you connect Claude to Model Context Protocol (MCP) servers that run inside your private network. Traffic flows over an outbound-only connection, so you don't need to open inbound firewall ports, expose services to the public internet, or allowlist Anthropic's IP ranges on your origin.

MCP tunnels are in research preview. Request access to try them. They are provided "as-is" without any uptime, support, or continuity commitment, and they depend on a third-party network provider (Cloudflare) that makes no availability commitment for the underlying transport. Anthropic may modify or discontinue MCP tunnels at any time.

For Zero Data Retention and HIPAA BAA eligibility, see API and data retention.

How it works

The tunnel stack is two components that run inside your network:

• cloudflared: Cloudflare's open-source tunnel connector. It initiates outbound-only connections to the tunnel edge and carries encrypted traffic from Anthropic to your proxy.
• Proxy: Anthropic's routing component. It terminates inner TLS, validates that upstream IPs fall within an allowed range, and routes each request to the correct upstream MCP server based on hostname.