tunnel-mcp enables direct communication between Claude agents
The new tunnel-mcp MCP server allows two developers to connect their Claude agents directly, removing the need for a human to manually copy messages between chats. The host initiates tunnel_open, and the guest connects via tunnel_join using a one-time link.
The channel uses a temporary cloudflared Quick Tunnel. Both sides perform only outbound connections, allowing it to function behind NAT and standard firewalls. Message bodies are end-to-end encrypted using NaCl secretbox (XSalsa20-Poly1305), meaning the relay sees only ciphertext.
The connection link is single-use, expires after 10 minutes, and locks the session to two participants once the guest joins. Installation is via npm install -g tunnel-mcp, followed by claude mcp add tunnel. The project is MIT-licensed and includes 159 tests.
Up next
Claude Code network sandbox bypassed via null-byte injection
Claude Code had a network sandbox bypass using a null-byte: attacker-host.com\x00.google.com. The JS filter saw the suffix, but libc truncated the string to resolve the blocked host. The bug persisted across 130 releases for 5.5 months. Anthropic patched it in v2.1.90 without a CVE or release note entry.
Related stories
- Blender addon makes Claude twice as efficient with nodes
- Claude Opus 5.5 finished Baldur’s Gate 3 alone in 38.9 hours
- Four Claude memory tools compared by LoreConvo’s builder
- agent-mesh lets coding agents talk to each other over MCP
- Synapse indexes your codebase locally and feeds it to Claude over MCP
- Omegacode: agent-agnostic workflow implementation
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.