Guide
Use an MCP server from an AI client
Let an AI client reach an MCP server running on your computer, protected by an access token.
- Applies to
- MCP servers and AI clients that use Streamable HTTP or server-sent events; Starter and higher for access tokens
- Time
- About 10 minutes
- What it changes
- Lets an AI client outside your network call a server on your computer.
- Last reviewed
- , by Product documentation
Before you begin
What to know before you start
- Anyone who knows the address can reach your MCP server unless you protect it. Many AI clients cannot answer a browser password prompt, so use an access token.
- An MCP server can read files or run commands. Share it only with clients you trust.
Steps
Step 1. Start your MCP server on a local port, and connect a tunnel to that port.
Terminal npx @instawormhole/connector 8000Use the durable tunnel command from the dashboard if you want a stable address.
You should see: The connector prints the tunnel's address.
Step 2. Create an access token on the tunnel.
You should see: You have the token, shown once.
Step 3. Give your AI client the server's URL and the token.
The URL is the tunnel's address plus the path your server uses, for example https://example.instawormhole.site/mcp. Have the client send the token as the X-InstaWormhole-Token header, or as a bearer token in the Authorization header.
The tunnel checks the token and does not pass it on, so your server can keep its own authentication.
You should see: The client connects and lists the server's tools.
To check: Send a request to the address without the token. It is refused.
You are done when
- Your AI client lists the server's tools through the tunnel.
Undo or clean up
- Stop the connector, and remove the access token from the tunnel.
Good to know
Related
This page is part of Automate and integrate. Still stuck? Contact support.