Controls
Publish to Internet
The Publish section lets you expose your gateway to the internet without opening firewall ports or configuring a static IP. Click Publish and Harbor establishes an outbound QUIC tunnel to the relay server. Once published:Advanced options
Expand Advanced before publishing to set a custom subdomain (e.g.myname → myname.relay.harbormcp.ai). Leave blank for a random auto-assigned subdomain.
Connecting from another machine
Use the public URL and bearer token to connect any MCP client:Signal Log
The Lighthouse page includes a live log viewer that streams gateway activity in real-time:- Auto-scrolls to the latest entries
- Export logs to a file
- Clear the log
Security
When exposed to the network (0.0.0.0), configure a bearer token for authentication. Localhost connections are always trusted — no token required. Remote connections without a valid Authorization: Bearer <token> header are rejected with 401.
Published tunnels are always protected by a bearer token — unauthenticated requests are rejected at the relay before they reach your machine.
See the gateway guide for endpoint details and configuration.
