Tunnel Tokens

Tunnel tokens authenticate your proxy with the mcpr relay server. They determine which subdomain your tunnel uses and ensure only you can claim your URL.

How tokens work

When mcpr starts with [tunnel].enabled = true, it sends its token to the relay server. The relay verifies the token and assigns the corresponding tunnel URL.

• Free: register at mcpr.app to get a token. The default subdomain is derived from the token — opaque, but stable across restarts.
• Cloud: generate a token in the cloud.mcpr.app dashboard and pair it with a custom subdomain you claim there.

Managing tokens

View your tokens

Go to cloud.mcpr.app → Dashboard → Tunnel Tokens.

Rotating a token

If a token is compromised:

1. Go to Dashboard → Tunnel Tokens
2. Revoke the old token
3. Create a new token
4. Update the token in the [tunnel] section of your mcpr.toml

Your subdomain stays the same — only the authentication credential changes.

Using a token

mcpr.toml

mcp = "http://localhost:9000"

[tunnel]
enabled = true
token   = "your-cloud-token"