From zero to one URL.

1. Create an environment

An environment is one project: its tools, its secrets and its call log. Create an account, give the environment a name (the URL slug follows), and you get a URL of the form:

https://mcp.exorails.net/e/<slug>

That address is public. What authenticates an agent is either a browser sign-in with your Exorails account, or a token sent in the Authorization header — shown once at creation, stored hashed, shown again only when you rotate it. Putting the token inside the URL is possible too, but off by default: why, and how to allow it.

2. Add tools

Open the environment's Tools tab. Pick a server from the catalogue (GitHub, Linear, Notion, Sentry, Context7…) or add any remote MCP server that speaks Streamable HTTP or SSE. A server that needs a key asks for it there; the value goes straight into the environment's vault. OAuth servers open a consent screen and keep the grant in the vault too.

Exorails probes the server right away and lists the tools it exposes. Every one of them is served through the environment URL, prefixed with the server's short name when the environment has more than one server.

3. Paste the URL into your agent

claude mcp add --transport http acme-api https://mcp.exorails.net/e/acme-api
# then, inside Claude Code: /mcp → acme-api → Authenticate

# older Claude Code, where --transport is not a known option:
claude mcp add-json acme-api '{"type":"http","url":"https://mcp.exorails.net/e/acme-api"}'

Cursor, Codex, Windsurf, VS Code and every other Streamable HTTP client take the same URL. Per-client snippets →

What happens on a call

• The agent calls a tool through the URL. The gateway resolves the environment from the token.
• The gateway decrypts the credential the server needs, adds it to the upstream request, and forwards the call.
• The result comes back to the agent. The credential is discarded. The call is logged: tool, agent, status, latency — never the arguments unless you turn that on.

Good to know

• Rotate gives the environment a new token; the old one stops working within a second on every replica.
• Free includes two environments, ten tools each and 10,000 calls a month. Past that, calls answer 429 until the month resets; nothing is billed.
• Team gives each member their own URL for shared environments. Remove a member and their URLs stop with them.