finchmcp.comClaudeCursorChatGPTyour machinelocalhost:8000, no open portfinch carries the request downyour agents
Plate IFreeOpen source (MIT)macOS and Linux

Localhost, with a front door.

finch gives the MCP server on your Mac or Linux machine a stable https address, with keys or OAuth at the door. Your machine calls out to finch, so nothing on it is left open.

Or install it by hand
Reading the plate
  • A tools/call from Claude, with its key
  • finch, with the key already taken off
  • The answer, streamed back as it is written

Left to right: your machine, the finchmcp.com relay, then Claude, Cursor and ChatGPT.

Plate II · The band

Every service gets a band that stays put

Birders ring a bird once and know it wherever it lands. finch does the same for your server: one address that stays the same across restarts, reboots and new networks.

sunny-wren-42.finchmcp.com/notes/mcp
sunny-wren-42
your account address (finch picks it)
.finchmcp.com
the relay
/notes
the name you chose
/mcp
where clients connect
reconnects on its own
Home Wi-Fi09:12 · connected in 0.8 s✓ sunny-wren-42.finchmcp.com/notes/mcp
Café, after the lid closed13:40 · reconnected in 1.4 s✓ sunny-wren-42.finchmcp.com/notes/mcp
Phone hotspot17:05 · reconnected in 2.1 s✓ sunny-wren-42.finchmcp.com/notes/mcp
Plate III · A field recording

It streams for as long as your tool keeps talking

Each mark is one event from a long tools/call: progress, partial results, the final answer. finch passes them through the moment they arrive, and there is no 30-second cutoff.

POST /notes/mcp · tools/call reindex_notes · text/event-stream 148 events · 4 min 12 s · done
30 s · many proxies hang up here030 s1 min2 min3 min4 min
Plate IV · The gate

Turn the dial to choose who gets in

Claude Code, Cursor, scripts

A key per client

Mint one for each client that should get in. Revoke one and that client is turned away on its next request. The others keep working.

finch keys mint cursor --service notes
sign inlocked until a key is shown
Plate V · For agents

Hand your agent one paragraph

It installs finch, publishes your server, proves it works and connects it to itself. The one step that needs you is a tap on your phone.

Paste this into Claude Code, Codex or Cursor

Read https://finchmcp.com/agents.md and use finch to publish my MCP server on http://127.0.0.1:8000 as notes. Show me the sign-in link when you get it. Run it as a background service, check it with finch test, then connect it to this agent.

Prefer to type it yourself?
curl -fsSL https://finchmcp.com/install | sh
finch login
finch add notes --service http://127.0.0.1:8000
finch service install
agent session · ~/notes-server
$ curl -fsSL https://finchmcp.com/install | sh
finch: installed to /usr/local/bin/finch
$ finch login --start --json
{"schema_version":1,"expires_in":600,"interval":3,"user_code":"QKTM-8FWD",…}
Open finchmcp.com/cli and approve QKTM-8FWD
$ finch login --poll --json
{"schema_version":1,"account":"you@example.com","status":"approved"}
$ finch add notes --service http://127.0.0.1:8000 --json
{"schema_version":1,…,"url":"https://sunny-wren-42.finchmcp.com/notes/mcp"}
$ finch service install --json
{"schema_version":1,…,"installed":true,…,"running":true,…}
$ finch test notes --json
{"schema_version":1,"ok":true,"service":"notes","tools":[{"description":"…","name":"search_notes"},…]}
$ finch connect notes --client claude-code --json
{"schema_version":1,"client":"claude-code",…,"name":"notes",…,"url":"https://sunny-wren-42.finchmcp.com/notes/mcp"}
notes is live and connected. Reload MCP servers to use it.
Plate VI · The sighting log

Everything finch writes down

This is the whole record of a call, and finch logs notes shows it to you. Bodies pass through and are never stored. Traffic is encrypted on both hops, and Cloudflare decrypts it at its edge to route it, so finch is not end-to-end encrypted. The full privacy boundary

$ finch logs notesnotes · last 7 calls
Example of the recent calls finch logs notes lists for the notes service
TimeStatusTookCallerRoute
2026-09-27 14:02:05200212msclaude-code on studio/notes/mcp
2026-09-27 14:01:2620048msoauth:user_2mXf8Q/notes/mcp
2026-09-27 14:00:472001340mscursor on studio/notes/mcp
2026-09-27 14:00:0820096msclaude-code on studio/notes/mcp
2026-09-27 13:59:292003870msnightly-script/notes/mcp
2026-09-27 13:58:5020061msclaude-code on studio/notes/mcp
2026-09-27 13:58:22200530msoauth:user_2mXf8Q/notes/mcp
Five fields per call, and that is all of it: no request or response bodies. Calls refused for a missing or wrong key are not logged.
Plate VII · Pricing

Free. Enterprise when you need it in writing.

Free$0

Everything finch does, for anyone who signs up: services, machines and keys, OAuth connectors, streaming, the CLI and the agent guide. Signing up takes you to your fleet page, where your machines and services show up once finch is installed.

Create a free account
EnterpriseA flock

For companies running finch across many machines that need an SLA, priority support or a security review. Email Aviary, the maker of finch, at hello@aviary.run and a person will reply.

Email us