Connecting to AI on the company's internal network finally no longer requires running naked; mTLS + whitelist configuration makes me feel comfortable.

OpenAI launches a secure MCP tunnel, where enterprises only need to run tunnel-client locally, connecting internal tools and databases to ChatGPT, Codex, and Responses API via outbound-only HTTPS, without exposing IPs or opening inbound ports. It features an interface whitelist, fine-grained authorization bound to workspace roles, and is compatible with custom CAs and mTLS. It supports deployment as Kubernetes Sidecar, standalone Pod, system service, and more, and provides a local web management interface.