RepoTunnelBLOCK
RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-p
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Give AI access to the project you're working on
RepoTunnel is a local-first desktop gateway for MCP-compatible AI clients.
[](https://github.com/Yashwanth034/RepoTunnel/releases/tag/v0.4.1) [](LICENSE)
Download RepoTunnel · Get started · Continuation extension · Security · Documentation
Work on your local projects from ChatGPT Web
RepoTunnel connects your regular ChatGPT Web conversation to approved projects on your computer. Use GPT‐6 Sol or GPT‐5.6 Sol to read and edit files, run commands, investigate problems, and manage your project.
Work with the actual project
Ask ChatGPT to inspect your code, understand how it works, make changes, and run the relevant checks. RepoTunnel carries out authorized actions in your local environment and returns the results to the conversation.
You can review what changed, discuss the results, and continue working without manually copying every file or applying every suggested edit.
Unlimited Direct HTTPS connection usage
Direct HTTPS connects ChatGPT to your own running RepoTunnel endpoint. RepoTunnel adds no monthly tunnel request quota or connection-credit allowance, so your connection usage does not depend on a tunnel provider’s monthly request allowance.
Keep RepoTunnel and your HTTPS endpoint running to continue using the connection for project tasks, fixes, reviews, and improvements.
Use
c17fe48857cdOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add repotunnel-website --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"repotunnel-website": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"OPENAI_API_KEY": "${OPENAI_API_KEY}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
LibreOffice | read | Writer · Calc · Impress |
Trust audit
BLOCKgrade F · trust 47/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (15 observation(s))
- Network
- declared (10 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
if trimmed.starts_with("-----BEGIN PRIVATE KEY-----")|| trimmed.starts_with("-----BEGIN RSA PRIVATE KEY-----")|| trimmed.starts_with("-----BEGIN OPENSSH PRIVATE KEY-----")|| trimmed.starts_with("-----BEGIN EC PRIVATE KEY-----")"id_rsa"
| "id_ecdsa"
| "id_ed25519"
| ".netrc"
| ".git-credentials"
"http://169.254.169.254/latest/meta-data",
sudo ./scripts/configure-direct-ipv6.sh install <wireguard-config> <public-ipv6>
icon.icns
repotunnel-phone-helper.apk
scrcpy-server-v4.1
macos_ax.rs
if ! systemctl enable --now "wg-quick@${SERVICE_NAME}.service"; thensystemctl enable --now [email protected]
systemctl enable --now repotunnel-direct-network.service
WG_DIR="/etc/wireguard"
let result = resolve_workspace_path(&workspace, "/etc/passwd", AccessOperation::Read, true);
candidates.push(PathBuf::from("/usr/local/bin/tunnel-client"));["/usr/bin/python3", "/usr/local/bin/python3"]
"/usr/local/bin/gh",
const BRIDGE_BASE = 'http://127.0.0.1:43185/v1';
const baseUrl = `http://127.0.0.1:${port}`;Gates applied: critical_finding, no_behavioural_pass.
c17fe48857cdfull audit observations/trust-audit/mcp-server/yashwanth034__repotunnel.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | c17fe48857cd | BLOCK | F | 47 | first audit |
Questions
What is the RepoTunnel MCP server?
RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-p
What tools does RepoTunnel expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is RepoTunnel safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (47/100) and found 11 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does RepoTunnel need?
It reads OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does RepoTunnel run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as repotunnel-website at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (c17fe48857cd), read on 2026-10-11. The repository is watched and re-audited when it changes.