Anthropic Ships MCP Tunnels: Agents Access Private Network MCP Servers via Encrypted Outbound-Only Gateway — No Inbound Firewall Rules Required

Anthropic·high signal

Announced May 19 at Code with Claude London, MCP tunnels let Claude Managed Agents reach MCP servers inside private networks without exposing them publicly. A lightweight on-premise gateway opens a single outbound connection with end-to-end encryption — no inbound firewall modifications needed. This solves the hardest enterprise adoption blocker: giving agents access to internal databases, APIs, and ticketing systems while keeping zero public endpoints.