etun up 3000

The tunnel you own.

ngrok, without the leash.

EtherTunnel gives any local service a real public HTTPS address in one command. Plug a local MCP server into web AI chatbots, show a client your work-in-progress live, SSH home, or reach a database — all over a secure you.ethertunnel.com URL. Self-host it free, or let us run the relay so there's no server to babysit.

See pricing How it works
bash — etun
$ etun up 3000
 
  tunnel live, forwarding to localhost:3000
    https://mat.ethertunnel.com
    TLS terminated · real wildcard cert

One command. A dozen "wait, that's it?" moments.

Anything running on your machine can have a public, secure URL in seconds. Here's what people actually reach for it.

The one everyone's hitting right now

Plug a local MCP server into web AI chatbots

The web versions of today's AI assistants will only connect to an MCP server over HTTPS — which normally means deploying it somewhere first. With EtherTunnel you run the server right on your laptop, etun up, and paste the https://you.ethertunnel.com URL straight into the chat. Your tools are live in the assistant in under a minute, no cloud host required.

Tunnel your MCP server
local MCP server
https://you.ethertunnel.com
web AI chatbot

Show a client your work, live

On a call, spin up your dev environment, tunnel it, and drop them the link. They watch your edits land in real time — no deploy, no staging server, no "let me push it first."

SSH home from anywhere

Tunnel raw TCP to port 22 and reach your machine from any network. No port forwarding, no VPN, no public IP — just a secure connection back to your box.

Reach a local database or API

Give a teammate or a quick integration secure access to a local Postgres, Redis, or internal API over a raw TCP tunnel — without standing up infrastructure for it.

Catch webhooks on localhost

Point Stripe, GitHub, or any webhook provider at your laptop and debug real deliveries as they arrive — instead of redeploying just to see the payload.

A visitor's request, all the way to your laptop.

Your machine opens a single outbound, encrypted connection to the relay. No inbound ports, no firewall holes, no public IP. The relay does the scary internet-facing part; your daemon just forwards to localhost.

Visitor

Hits you.ethertunnel.com from anywhere.

The relay

Terminates real TLS, routes by subdomain over a multiplexed tunnel.

Your daemon

One etun binary holding an outbound connection open.

localhost

Your dev server, API, or any raw TCP service. Untouched.

Outbound only

The daemon dials out over WSS. Nothing listens on your network, so there's nothing to expose or get scanned.

Real TLS, handled

A genuine Let's Encrypt wildcard cert covers every *.ethertunnel.com subdomain. No self-signed warnings, ever.

HTTP and raw TCP

Tunnel a web app, an API, an SSH box, a database — anything that speaks TCP, multiplexed down one connection.

Run it yourself. Or just don't.

The etun binary is the same either way. Self-hosting is free forever — you bring a server with a public IP, a domain, and the time to keep it alive. Hosted means you skip all of that and start tunneling in about a minute.

Self-host

Bring your own relay

$0 — plus a server, a domain, and your evenings

  • The full binary, free forever. No tunnel limits.
  • Total control — it's your box and your data path.
  • You rent and patch a VPS with a public IP.
  • You own a domain and wire up DNS.
  • You issue and renew a wildcard TLS cert.
  • You're the one paged when the relay falls over at 2am.
Get the binary View the source on GitHub
Easier Hosted by us

We run the relay

from $4.50/mo — zero ops

  • No VPS to rent, patch, or babysit.
  • Wildcard cert renewed automatically — you never touch it.
  • Always-on, monitored relay with real uptime.
  • Claim your own name.ethertunnel.com subdomain.
  • No domain or DNS to own — it's all done.
  • Live in about a minute: install, log in, tunnel.
See plans

Cheaper than the tunnel you don't own.

Hosted relay plans, billed in USD. Tax added at checkout. Cancel anytime. Annual saves you about 10% — and it's the better deal.

Indie

For the side project that's quietly becoming a real thing.

$5 /mo

billed monthly

  • 3 concurrent tunnels
  • Your own *.ethertunnel.com subdomain
  • HTTP + raw TCP tunnels
  • Auto-renewed wildcard TLS
  • Always-on hosted relay
Choose Indie
Team

For a whole crew of environments, demos, and staging URLs.

$39 /mo

billed monthly

  • 30 concurrent tunnels
  • Everything in Pro
  • Plenty of headroom for shared environments
  • Priority support
Choose Team

Want unlimited tunnels and no monthly bill? Self-host it free — same binary, your server.

Give your localhost a real address.

Install the binary, pick a plan, and you'll have a public HTTPS URL pointing at your machine in about a minute. No server, no certs, no DNS.

$ curl -fsSL https://ethertunnel.com/install.sh | sh