your MCP servers (no auth) ──tunnel──▶ gw.mcpzero.io ──▶ aggregation gateway ──▶ Cursor / Claude / Codex
│ (auth · aggregate · audit)
dashboard: endpoints, API keys, call ledger
Why MCPZERO

Semantic aggregation
Combine many local MCP servers behind one endpoint. Each server keeps its own public path; the endpoint root becomes a meta server that routes tool calls to the correct backend.
mcpzero tunnel start --endpoint ep_abc123 --mcp-config ./mcp.json
# reads mcp.json → postgres, filesystem, puppeteer — one tunnel, many servers
See Semantic aggregation.
Progressive discovery
AI clients discover tools on demand instead of loading every schema upfront.
The meta server exposes meta_search and meta_call_tool so agents match
intent to concrete tools without wasting context tokens.
Gateway intelligence
Beyond transport and auth, MCPZERO inspects and orchestrates MCP traffic at the edge:
- Semantic WAF (Enterprise · Roadmap) — a content-aware firewall that understands
JSON-RPC and tool schemas. Inspects every
tools/callfor malicious arguments, unsafe paths, and data-exfiltration patterns. - Tool Hijacking Defense (Enterprise · Roadmap) — scans tool arguments and returned content for injection and jailbreak payloads, neutralizing compromised tools.
- Team sharing & audit — share endpoints across members, visualize traffic, and retain searchable audit logs; NDJSON export and webhook alerts on Personal+ (Team adds higher caps and team-scoped alerts).
Get started
Tunnel a local server with the CLI:
curl -fsSL https://mcpzero.io/install-cli.sh | sh`
# or: brew install mcpzero/tap/mcpzero-cli
# or: npm install -g mcpzero-cli
# or: pipx install mcpzero-cli
mcpzero version
mcpzero login
mcpzero init
The CLI source lives in cli/; see its README for
building from source and the full command reference.
Repositories
Documentation
- Product docs: https://mcpzero.io/docs (source of truth lives in
docs/) - Tunnel wire protocol:
PROTOCOL.md - Runnable examples:
examples/
License
Content in this repository (docs, examples, install script) is MIT — see LICENSE.