io.github.Shreyas-Profile/tor-mcp Model Context Protocol (MCP) Server

This MCP server routes HTTP requests through the Tor network. It supports rotating exit IPs and .onion access. The server is described as not logging request bodies, emphasizing privacy-focused handling of HTTP traffic.

🛠️ Key Features

Routes HTTP requests through the Tor network
Rotating exit IPs
.onion support
No body logging (as described)

🚀 Use Cases

Accessing HTTP endpoints via Tor for anonymity
Using .onion addresses instead of clearnet domains

⚡ Developer Benefits

Clear privacy posture regarding request bodies (no body logging)
Compatible with workflows that need Tor-mediated HTTP routing

⚠️ Limitations

Functionality is limited to Tor-based HTTP routing, with no additional capabilities described beyond exit IP rotation, .onion support, and body non-logging

tor-mcp

Route HTTP requests through the Tor network from any MCP-compatible agent.

Live at tor.regiq.in · Free forever · Google sign-in

What it does

Gives Claude Desktop / Cursor / any MCP client four tools:

Tool	What it does
`tor_fetch(url, method?, headers?, body?)`	HTTP request through Tor; returns status/headers/body
`tor_get_exit_ip()`	Current exit node IP + country (verified via check.torproject.org)
`tor_new_circuit()`	Force a fresh Tor circuit (SIGNAL NEWNYM)
`tor_check(url)`	HEAD probe — is target reachable through Tor?

Honest scope

Tor exit nodes are blocked by Cloudflare on most big-brand sites (Indeed, Google, Amazon, etc.). Use tor-mcp for:

Non-Cloudflare sites
Geo-hidden fetches (see a site from a random country)
.onion services
IP-based rate-limit circumvention on APIs that don't blocklist Tor
Testing your own site from N different exits

If you need to hit Cloudflare-protected sites, use browser-mcp instead — real Chrome from a fixed Hetzner IP works for most WAFs, and you can layer a residential proxy on top for the rest.

Setup

Sign in with Google at tor.regiq.in
Generate an MCP API key on your dashboard
Add to Claude Desktop / Cursor:

json

{
  "mcpServers": {
    "tor": {
      "url": "https://tor.regiq.in/api/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_KEY>"
      }
    }
  }
}

Limits (per API key, free tier)

100 requests/day
30s timeout per request
10 MB response body cap
Methods: GET, POST, HEAD only

Higher quotas for aggregators — email shreyas.pavuluri@gmail.com.

Privacy

DNS resolves inside Tor (socks5h:// scheme) — no plaintext lookup from our host
We log: target host, method, response status, duration, size
We never log: full URLs, query strings, request bodies, response bodies, cookies, headers
Standard TorBrowser User-Agent sent by default

Self-host

bash

git clone https://github.com/globalion/tor-mcp
cd tor-mcp
cp .env.example .env  # fill in
docker compose up -d --build

Then browse to http://localhost:3021.

License

MIT · Built by Shreyas · Shipped by Globalion

Tor MCP