Follow Discord
Sweep 27 Oct 2026 · 19:04Z Build v2.1.312 531 read Stable v2.1.308 Latest v2.1.312 Next v2.1.312 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeDocsClaude Developer Platform 27 Oct 2026
One change · api

reference changedagents-and-tools/mcp-tunnels/reference

Nearest release: v2.1.312, published under an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.

Recorded here
Lines+3added
Lines−3removed
From line 74 where the diff opens
First seen 14 Aug 2026 this site's first read of the page
Recorded edits5to this page, all time

The whole hunk

from line 74, old and new numbered
/
lines
from line 74
7474Presented by the proxy during [inner TLS](https://platform.claude.com/docs/en/agents-and-tools/mcp-tunnels/concepts#components).
7575 
7676* Signed directly by a registered CA (no intermediates).
77* `AuthorityKeyIdentifier` extension present and matching the CA's `SubjectKeyIdentifier`.
77* `AuthorityKeyIdentifier` extension present and matching the CA’s `SubjectKeyIdentifier`.
7878* Subject Alternative Name includes a DNS name matching `<route>.<tunnel-domain>`. A wildcard `*.<tunnel-domain>` covers all routes.
7979* If the `ExtendedKeyUsage` extension is present, it includes `serverAuth`.
8080* Within its validity period.
from line 84
8484 
8585## Setup component
8686 
87The setup component ships inside the `mcp-proxy` image as the `setup` binary. Run it with `docker compose run --rm setup <subcommand>` (Compose) or rely on the chart's hooks and CronJobs (Helm).
87The setup component ships inside the `mcp-proxy` image as the `setup` binary. Run it with `docker compose run --rm setup <subcommand>` (Compose) or rely on the chart’s hooks and CronJobs (Helm).
8888 
8989### `setup init`
9090 
from line 110
110110| `--cert-duration` | New certificate validity period. | `2160h` (90 days) |
111111| `--renew-before` | Skip renewal if the existing certificate has more than this duration remaining. | `0` (always renew) |
112112 
113Setting `--renew-before=720h` makes the command a no-op when more than 30 days of validity remain, so it's safe to run on a fixed schedule.
113Setting `--renew-before=720h` makes the command a no-op when more than 30 days of validity remain, so it’s safe to run on a fixed schedule.
114114 
Feedback