Put an AI assistant to work across your machines and APIs — on your terms.
relay-mcp is a self-hosted relay that connects your servers, workstations and
third-party APIs to an AI assistant (Claude, ChatGPT, Codex, …) over a secure,
outbound connection — with fine-grained, per-capability access that you control.
What's new— 2026-07-24
New Groups page (Administration → Groups): collect people into a group once, then grant them permission sets and share reports & dashboards in one place — instead of setting access person-by-person.
See all updates →
Getting started
Create your own account
Sign up in a minute and verify your email — then you run your own workspace:
connect your machines, issue AI-access tokens, and control exactly what each assistant can do.
If your team needs multiple accounts under central management — shared machines,
roles and one audit trail across everyone — get in touch and we'll set that up for you.
A tiny static binary dials out over
wss — no inbound ports, works behind NAT and firewalls.
Fine-grained access
Grant shell, diagnostics, file or
integration capabilities per machine, read/write, and per token you issue.
18+ integrations
CRM & ERP, directory, cloud, virtualization,
network, security and databases — plus any REST or GraphQL API. See the list ↓
Reports & dashboards
Turn saved reports into scheduled CSV
exports for Power BI or Excel, join data across systems, and publish live dashboards.
Secure by default
Sign in with Microsoft (Entra) or a
password, two-factor auth and passkeys, per-token scopes and a full audit log — all built in.
Portable clients
Temporary, shell-only access to any host
via an email-confirmed token that cleans up after itself.
Self-hosted
Runs on your own relay; your data and
credentials stay with you.
Integrations
Each integration discovers its own capabilities, which you then grant per token —
read-only or read/write, per machine. Anything without a dedicated integration below still works
through the generic REST or GraphQL connectors, or plain SSH.
CRM & ERP
Salesforce
Query and update Salesforce (SOQL) as each signed-in user or a shared account, with saved shareable reports and Power BI exports.
SAP HANA
Read-only SQL reporting over a secure agent tunnel, with saved parameterized reports and Power BI exports.
Cross Integration Reports
Join data from several systems — e.g. Salesforce pipeline vs. SAP backlog — into one shareable, schedulable report.
Identity, mail & productivity
Microsoft Entra / Graph
Microsoft 365 directory, mail, Defender hunting and SharePoint — as the app, or as each signed-in user.
Google Workspace
Read/write any permitted Google API, optionally impersonating a Workspace user.
Atlassian — Jira & Confluence
Read and write Jira issues and Confluence pages as each signed-in user.
Windows & directory
Active Directory & Group Policy
Manage users, groups, OUs and GPOs through a Windows agent — curated, injection-safe cmdlets.
Virtualization & infrastructure
Proxmox VE
List, start/stop and create/delete VMs and containers.
VMware vSphere
vCenter inventory and VM power/config operations.
Network, firewalls & security
MikroTik RouterOS
Read and change RouterOS configuration and state.
UniFi
Manage the UniFi Network controller — sites, devices and clients.
NGINX Proxy Manager
Manage proxy hosts and block/unblock IPs via access lists.
Palo Alto PAN-OS
Query and configure PAN-OS firewalls or Panorama.
Darktrace
Model breaches, devices and status — with optional acknowledge / intel-feed writes.
Connect anything else
n8n
Workflow automation — list/inspect workflows & executions, and activate, create, update or delete workflows.
Home Assistant
Read entity states and call services — lights, switches and more.
SSH
Run commands on any reachable host over SSH, via an agent.
REST / OpenAPI
Any REST API — GET and write with configurable auth.
GraphQL
Run queries and mutations against any GraphQL API.
Another MCP server
Relay to any remote MCP server and re-expose its tools behind this gateway's login, permissions and logging.
spaceship.com
Manage Spaceship domains, DNS records and contacts — you sign in to your own Spaceship account.
Install a client
Run the one-liner on a machine you want to manage. You'll be asked for an
enrollment token — after signing in, create one from your dashboard (if your account
is managed for you, ask your administrator).
Linux / macOS
curl -fsSL https://any2mcp.com/install.sh | bash
Windows (PowerShell)
irm https://any2mcp.com/install.ps1 | iex
It downloads a single self-contained binary (no runtime is installed), verifies its
checksum, and registers the machine. Re-run the same command to update; add
--uninstall (Linux) or set $env:RELAY_UNINSTALL=1 (Windows) to remove it.
See the support guide for details and for temporary portable clients.