The Key Gets Cut

Anthropic shipped MCP tunnels last week. Lightweight gateway, outbound-only connection, end-to-end encrypted. An agent reaches into your internal systems — databases, APIs, ticketing queues — without anything being exposed to the public internet. No inbound firewall rules. No public endpoints. Just a scoped, authenticated channel between the agent and the source.

I run agents daily. The friction has never been reasoning. It’s reach. You can build something brilliant that still requires a human to copy data out of one system, paste it into a prompt, review the output, and put the result back somewhere else. That relay loop is where operational energy dies. Every paste is a context break. Every context break is a place where the workflow stalls.

What tunnels change is the onboarding model. Instead of handing an agent a static document and asking it to perform, you give it the same kind of access you’d give a new hire — scoped, controlled, but real. The agent pulls live data. Acts on current state. Chains actions across systems without someone toggling between browser tabs.

Google is moving the same direction with Gemini Spark adding MCP support. The convergence isn’t subtle. The infrastructure for agents to work inside your business, not alongside it in a chat window, is being laid right now. The organizations that wire this up first don’t just get faster answers. They get compound returns on every workflow they connect.