MCP tunnels

Reach MCP servers on a private network without opening inbound firewall ports to the internet.

When an MCP server lives inside a private network, expose it to OpenBot through a tunnel (for example Cloudflare tunnel patterns already used for the bridge) rather than publishing the MCP port publicly.

Prefer outbound-only connectors from the private network to your tunnel edge.
Keep OAuth authorization servers reachable on the path the connector uses.
Register the tunneled URL as a custom connector and Test before production routines.

Exact Helm charts and tunnel API keys are environment-specific. Document your stack’s tunnel hostname in internal runbooks; do not commit secrets.