Remote MCP Deployment Options
ModusBrain’s MCP server runs viamodusbrain serve (stdio transport). To make it
accessible from other devices and AI clients, run modusbrain serve --http
(built-in HTTP transport with bearer auth, Postgres-only … see
DEPLOY.md) behind a public tunnel. Here are your tunnel options.
ngrok (recommended)
ngrok provides instant public tunnels. The Hobby tier ($8/mo) gives you a fixed domain that never changes.Tailscale Funnel
Tailscale Funnel gives you a permanent public HTTPS URL with automatic TLS. Free tier available. Best for private networks where you control both endpoints.Fly.io / Railway (always-on)
For production deployments that need to run 24/7 without your machine:- Fly.io: $5-10/mo, global edge,
fly deploy - Railway: $5/mo, git push deploy
Comparison
Note:
modusbrain serve --http is the built-in HTTP transport (v0.22.7+). Bearer auth
against the access_tokens table, default-deny CORS, two-bucket rate limit, body cap,
per-request audit log. Postgres-only by design (PGLite is local-only). See
DEPLOY.md and SECURITY.md for env vars and tunables.