How do I give an AI agent access to localhost?

Mint a scoped MCP token, run `burrow mcp` to get the endpoint, and connect your agent with the token as a Bearer credential. The agent then opens and inspects tunnels through MCP tools rather than shell access.

Is agent access safe?

Yes. MCP tokens are scoped, read-only by default, and every tool call is recorded in a structured audit log — so you grant a specific capability instead of broad machine access.

Which agents work with Burrow?

Any MCP-capable client, including Claude and Cursor. Burrow exposes standard MCP tools (list, open, close, inspect, replay), so the agent uses them like any other tool.

Do other tunnels have an MCP server?

No. As of writing, Burrow is the only mainstream tunnel with a first-class MCP server — ngrok, Cloudflare Tunnel, and the SSH-based tunnels have none.

Give AI agents localhost access over MCP

Give AI agents localhost access over MCP | BurrowLet AI agents open, inspect, and replay localhost tunnels through Burrow’s first-class MCP server — scoped tokens, read-only by default, every call audited. EU-hosted, DSGVO-first, the tunnel built for the agent era.Burrow gives any local service a public, TLS-secured HTTPS URL with one command - npx useburrow http 3000 - hosted entirely in the EU. Webhook signatures are verified at the edge, every request is visible in the local inspector, and a first-class MCP server lets AI agents open and inspect tunnels. Home · Features · MCP for AI agents · Pricing · ngrok & other alternatives · Framework guides · Blog · About & EU data residency