openai / tunnel-client

项目摘要

tunnel-client is OpenAI's official customer-run agent for Secure MCP Tunnel, enabling private or localhost MCP servers to connect securely to ChatGPT, Codex, the Responses API, and AgentKit without exposing them to the public internet. Written in Go, it provides a daemon with health endpoints, metrics, and a UI for operator visibility.

为什么值得关注

As OpenAI's official solution for connecting private MCP servers to their AI products, it addresses a critical security and connectivity gap for enterprises and developers building MCP-based tool integrations. The project offers production-oriented features like health checks, Docker/K8s deployment, and comprehensive documentation despite being relatively new.

优势

• Official OpenAI backing with active development (11 releases in 6 months)
• Comprehensive documentation covering onboarding, architecture, deployment, and troubleshooting
• Production-ready infrastructure with /healthz, /readyz, /metrics endpoints and Docker/K8s support
• Secure by design — keeps MCP servers off public internet while enabling AI product access

局限性

• No automated tests despite having CI
• Small contributor base (3 contributors)
• Go-only implementation, requiring other language users to build from OpenAPI spec

使用场景

• Connecting local development MCP servers to ChatGPT or Codex for testing
• Enterprise deployment of private MCP tool servers to OpenAI AI products
• Secure agent tool access without inbound firewall rules or public endpoints