Portveil
MCP server for Portveil: let AI assistants see your devices and move them between VPN locations.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
portveil-mcpclaude mcp add portveil -e 'PORTVEIL_ACCOUNT_ID=<PORTVEIL_ACCOUNT_ID>' -e 'PORTVEIL_TOKEN=<your portveil_token>' -e 'PORTVEIL_API=<PORTVEIL_API>' -- npx -y portveil-mcp@0.4.4{
"mcpServers": {
"portveil": {
"command": "npx",
"args": [
"-y",
"portveil-mcp@0.4.4"
],
"env": {
"PORTVEIL_ACCOUNT_ID": "<PORTVEIL_ACCOUNT_ID>",
"PORTVEIL_TOKEN": "<your portveil_token>",
"PORTVEIL_API": "<PORTVEIL_API>"
}
}
}
}Environment variables
PORTVEIL_ACCOUNT_IDrequired Your Portveil account ID (acct_…), shown in the dashboardPORTVEIL_TOKENrequired secret A Portveil API token from the dashboard; control scope to move devices, read to only lookPORTVEIL_APIAPI base URL (default https://api.portveil.com)
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Portveil MCP server
Let an AI assistant see the devices on your Portveil account and move them between VPN locations.
"Move my scraper box to Finland." "Rotate every agent to a new location." "Which of my devices aren't protected right now?" "Rotate the scraper between the US and Finland every 15 minutes."
Moves are verified: a tool only reports success after the device has switched and the exit server in the new location confirms it sees that device.
Tools
| Tool | What it does | Needs |
|---|---|---|
list_devices | Every device: protected or not, where it exits, live speed (↓/↑ Mbps), remote control on/off | read |
list_locations | The locations you can move to | read |
get_device | One device's current state, including live speed and any rotation | read |
get_account | Plan and devices used | read |
list_activity | Recent moves, reconnects and changes, and which token made them | read |
move_device | Move a device to a country or city ("Finland", "US", "Helsinki") | control |
rotate_device | Move a device once to the next location | control |
start_rotation | Move a device automatically every N minutes (5–10080), optionally among chosen locations. Portveil runs the schedule, so the assistant can close | control |
stop_rotation | Turn scheduled rotation off | control |
reconnect_device | Re-establish a device's tunnel | control |
disconnect_device | Turn a device's VPN off (flagged destructive: a hint that tells well-behaved assistants to check with you first) | control |
add_device | Add a device. Phones and laptops (WireGuard app): creates it and saves its tunnel files locally, key never shown in chat. Linux servers and agent machines: gives the exact commands to run on that machine, which makes its own key and registers itself | admin (phones/laptops) |
update_device | Rename a device and/or turn its remote control on or off | admin |
remove_device | Remove a device for good (flagged destructive) | admin |
Tool names changed in 0.3.0 to one verb_noun pattern: device_status → get_device, account_info → get_account, recent_activity → list_activity, set_rotation → start_rotation.
Devices can be named loosely ("scraper" finds "Scraper box"); an ambiguous name returns the choices instead of guessing.
Setup
No account yet? Start free with just an email, no card.
- In the Portveil dashboard, create an API token. Choose control scope to let the assistant move devices, or read to let it only look. Don't give it your account key.
- Note your account ID (
acct_…). - Add the server to your assistant:
Claude Code
claude mcp add portveil -e PORTVEIL_ACCOUNT_ID=acct_… -e PORTVEIL_TOKEN=clt_… -- npx -y portveil-mcpClaude Desktop (claude_desktop_config.json), Cursor (.cursor/mcp.json) and most other clients:
{
"mcpServers": {
"portveil": {
"command": "npx",
"args": ["-y", "portveil-mcp"],
"env": { "PORTVEIL_ACCOUNT_ID": "acct_…", "PORTVEIL_TOKEN": "clt_…" }
}
}
}Hermes Agent: Hermes only installs npm packages older than 14 days, so install into its own folder and run it with node:
cd ~ && npm install --prefix ~/.hermes/mcp-servers/portveil portveil-mcp@0.4.3
echo 'PORTVEIL_TOKEN=clt_…' >> ~/.hermes/.env
hermes mcp add portveil --command node \
--env PORTVEIL_ACCOUNT_ID=acct_… 'PORTVEIL_TOKEN=${PORTVEIL_TOKEN}' \
--args ~/.hermes/mcp-servers/portveil/node_modules/portveil-mcp/dist/index.jsFor Hermes to use it well (when to act, what to confirm first, how to add devices), also install the Portveil skill from ClawHub:
hermes skills install roybogs/portveil(Source: skills/portveil/SKILL.md.)
Devices must be running the Portveil app or the Portveil agent with remote control on. Devices using the plain WireGuard app are shown but can't be moved.
Security
- Use a scoped API token. Every action it takes is recorded in your account's activity log with the token that made it, and you can revoke it in the dashboard at any time.
- The server talks only to
https://api.portveil.com(override withPORTVEIL_API). It stores nothing.
Development
npm install
npm test # builds, then runs the tests against a fake Portveil APIFrequently asked questions
What is Portveil?
MCP server for Portveil: let AI assistants see your devices and move them between VPN locations.
How do I install Portveil?
It runs on your machine. In Claude Code: claude mcp add portveil -e 'PORTVEIL_ACCOUNT_ID=<PORTVEIL_ACCOUNT_ID>' -e 'PORTVEIL_TOKEN=<your portveil_token>' -e 'PORTVEIL_API=<PORTVEIL_API>' -- npx -y portveil-mcp@0.4.4. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Portveil need an API key?
Yes. It expects PORTVEIL_ACCOUNT_ID, PORTVEIL_TOKEN, which you set in its configuration.
Is Portveil open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains Portveil?
It is published by roybogs. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.