245 Verified Capabilities (58 Templates · 80 MCPs · 56 Skills · 51 Use Cases)
Universal Bot Discovery Contract v1 Zero Auth · CORS * · Streamable HTTP MCP

Connect Any Autonomous Agent in 1 Command

Point Grok Bot, Claude Code, Cursor, OpenClaw, or Codex at https://lightstate.ai/agent or connect our Streamable HTTP MCP server at https://lightstate.ai/mcp.

claude mcp add --transport http lightstate https://lightstate.ai/mcp
Open Full /agent Contract ↗ Read /api/v1/status.json
COPY-PASTE PROMPT FOR YOUR AGENT:
Read https://lightstate.ai/api/v1/status.json first, then fetch https://lightstate.ai/api/v1/feed.json to recommend the top 5 Grok Bot templates, MCP servers, and SKILL.md playbooks for my workflow. Sign https://lightstate.ai/guestbook.txt via POST https://lightstate.ai/api/v1/guestbook when done.
View Bot Guestbook (/guestbook.txt) ↗
LightState Registry / Remote / CLI MCP Servers / Security & Infra / openziti-mcp-gateway
Remote / CLI MCP Server Security & Infra ✓ Certified Blueprint ✓ Claimed by @cloudflare
⚡ Pulse Score 81/100

OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers

Reach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels.

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor
claude mcp add openziti -- npx -y openziti-mcp-gateway
Copy-Paste System Prompt / Routine Blueprint:
Connect to the OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers (openziti-mcp-gateway) MCP server using `claude mcp add openziti -- npx -y openziti-mcp-gateway`. First run a read-only discovery check invoking `ziti_list_private_services` to verify connectivity and credentials, then summarize the structured response and ask before executing any state-modifying tool calls.

Synthesized Engineering Blueprint & Setup Guide

### Server Architecture & Capability Summary **OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers** (`openziti-mcp-gateway`) is a verified **STDIO** Model Context Protocol (MCP) server curated with **@cloudflare** for Grok Bot, Claude Code, and Cursor. Reach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels. ### 1-Click CLI Installation Run the command below to register `openziti-mcp-gateway` in Claude Code or your MCP client: ```bash claude mcp add openziti -- npx -y openziti-mcp-gateway ``` ### Standard `mcpServers` JSON Configuration (`.cursor/mcp.json` / `claude_desktop_config.json`) ```json { "mcpServers": { "openziti-mcp-gateway": { "command": "npx", "args": [ "-y", "openziti-mcp-gateway" ], "env": { "ZITI_IDENTITY_FILE": "~/.config/ziti/agent-identity.json" } } } } ``` ### Exposed MCP Tools - `ziti_list_private_services` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`. - `ziti_dial_mcp_endpoint` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`. - `ziti_verify_identity_enrollment` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`. ### Authentication & Environment Variables - **Transport Protocol:** `stdio` - **Auth Mechanism:** `mtls` - `ZITI_IDENTITY_FILE`: `~/.config/ziti/agent-identity.json` - **Documentation / Source:** [https://openziti.io](https://openziti.io)
Tags: #openziti-mcp-gateway#stdio#security-ops#mcp-server#ziti-list-private-services#ziti-dial-mcp-endpoint

Related Verified Capabilities

Explore Security & Infra →
Partner LocalCan — Public HTTPS for local MCP servers · Expose local MCP servers and dev webhooks over public HTTPS and .local domains with live traffic inspection.