Leave the light on for cloud agents.

Cloud agents can’t reach the MCP servers on your Mac. Porchlight lets them in.

Someone has a question.

Claude wants to search your notes.

It finds your gate.

One address that never changes, on a small relay in your own Cloudflare account.

You check who’s knocking.

The same six digits show on its screen and on your Mac. Nothing comes in until you say yes.

Your house only calls out.

Your Mac keeps one line open to the relay, dialing out. Nothing on your network is open to the street.

It asks before it touches.

Looking is fine. Anything that could change things waits for your yes, and a guest only gets the rooms you choose.

It finds what it came for.

Back through the relay it goes. The relay passes the answer along and never keeps your notes.