io.github.info-arnav/unlocalhost is an MCP server that deploy localhost to a private, authenticated link from your AI coding agent. Its tool list has not been published yet over stdio and http, requires no API key, and scores 57/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"unlocalhost": {
"args": [
"-y",
"@unlocalhost/unlocalhost"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Turn localhost into a link only the people you name can open.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@unlocalhost/unlocalhost' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @unlocalhost/unlocalhost against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in devops
MCP server for using the GitLab API
MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
💫 Tachyon MCP Runtime for Java and Kotlin - Model Context Protocol (MCP) server with Streamable HTTP, native Netty transports, tools, tasks, resources, prompts, completions, resumable sessions, and stateless deployment support.
Deploy and manage blockchain nodes across 70+ protocols, search docs, request testnet funds.
MCP Security Weekly
Get CVE alerts and security updates for io.github.info-arnav/unlocalhost and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Turn localhost into a link only the people you name can open.
Sign in is built in, so you write no auth code and touch no servers.
Your coding agent can write the whole application. It cannot host it, because hosting needs a server, a domain, a certificate, and a login system. So people reach for whatever is fastest, and that is where things go wrong: a public URL with no sign in, an API key committed by accident, or auth bolted on at the end by someone who has never written auth.
unlocalhost closes that gap. You say one sentence to the agent you already have open, and you get back a real URL with a guest list in front of it.
you deploy this and let sarah@gmail.com in
agent pushed your code to a private repo
agent building
agent live at sarahs-todo.unlocalhost.tech
agent sarah@gmail.com can sign in and open it
| Tunnel (ngrok) | Platform (Vercel) | unlocalhost | |
|---|---|---|---|
| Survives closing laptop | No | Yes | Yes |
| Private by default | No | No | Yes |
| Auth you have to write | All of it | All of it | None |
| Runs on your own server | No | No | Yes |
claude mcp add unlocalhost -- npx -y @unlocalhost/unlocalhost
Or in any MCP client config:
{
"mcpServers": {
"unlocalhost": {
"command": "npx",
"args": ["-y", "@unlocalhost/unlocalhost"]
}
}
}
Then ask your agent to sign in to unlocalhost, and deploy.
The hosted service runs this exact code. Nothing is held back, there is no phone home, and no license check.
git clone https://github.com/info-arnav/unlocalhost.git
cd unlocalhost/deploy
cp .env.example .env # fill it in
docker compose --env-file .env run --rm migrate
docker compose --env-file .env up -d
You need a domain with wildcard DNS, a DNS provider API token for wildcard TLS,
a GitHub App, and a Google OAuth client. The full walkthrough is in
docs/server-setup.md.
internet :443 → Caddy → auth-gate /verify → activator → Dokku → your app
| Package | Job |
|---|---|
web | Landing page, sign in screens, docs |
server/gateway | Public API ingress, CORS, rate limiting, request ids |
server/services/auth-gate | OAuth, sessions, and the allowlist check on every request |
server/services/control-plane | Apps, sharing, GitHub App, deploy pipeline |
server/services/activator | Wakes sleeping apps, puts idle ones back to sleep |
server/services/mcp-server | The unlocalhost npm package your agent talks to |
| `s |