Anthropic Launches Self-Hosted Claude Agents

Why this is here: Anthropic’s new MCP tunnels establish secure connections to private servers using a single outbound connection, eliminating the need for public endpoints.

Anthropic announced self-hosted sandboxes and MCP tunnels at its May 19, 2026 event in London. The new features give users more control over where Claude agents execute tools and access private networks. Self-hosted sandboxes allow tool execution to occur on infrastructure the user manages—like Cloudflare, Modal, or Vercel—though the agent’s core loop remains on Anthropic’s servers.

MCP tunnels create secure connections to private servers without requiring public exposure. A gateway runs within a user’s environment and connects to Anthropic’s routing infrastructure. Currently, MCP tunnels are in research preview and require a request for access.

These features primarily benefit companies with strict security or compliance needs. Self-hosted sandboxes are not yet available on the Claude Platform on AWS, nor do they yet support Memory functionality. Anthropic continues to develop the platform and expand its enterprise capabilities.