Tunnel Tokens

Tunnel tokens authenticate your proxy with the mcpr relay server. They determine which subdomain your tunnel uses and ensure only you can claim your URL.

How tokens work

When mcpr starts with a tunnel, it sends its token to the relay server. The relay verifies the token and assigns the corresponding tunnel URL.

• Free (no cloud): mcpr auto-generates a token on first run and saves it to mcpr.toml. Your URL is a random hash tied to this token.
• Cloud: you get a token from the cloud.mcpr.app dashboard linked to your custom subdomain.

Managing tokens

View your tokens

Go to cloud.mcpr.app → Dashboard → Tunnel Tokens.

Rotating a token

If a token is compromised:

1. Go to Dashboard → Tunnel Tokens
2. Revoke the old token
3. Create a new token
4. Update tunnel_token in your mcpr.toml

Your subdomain stays the same — only the authentication credential changes.

Using a token

mcpr.toml

mcp = "http://localhost:9000"
tunnel_token = "your-cloud-token"

Or via CLI:

mcpr --mcp http://localhost:9000 --tunnel-token "your-cloud-token"