u/Ok-Constant6488

Reading through the 19th May Claude managed agents update. The mcp tunnel update peaked my interest.

Apparently, the setup will be that a small gateway runs inside your network. It opens one outbound mTLS connection to anthropic. The agent reaches private mcp servers through that tunnel. No inbound firewall rules. No public endpoint. The mcp server inside your perimeter holds the credentials. The agent never sees them.

A normal managed agents deployment carries the tokens in the runtime. A long-lived oauth bearer for salesforce. A pat for github. A service account key for the warehouse. All sitting in the agent's context, where prompt injection, tool poisoning, or a supply chain hit can lift them.

With tunnels the credentials move to the perimeter. The agent makes a tool call, the call goes through the tunnel encrypted with a cert the customer issued, and a local mcp server with proper scoping turns it into an authenticated request. A prompt-injected agent has no token to steal. The blast radius now stops at whatever each individual mcp server allows.

Worth comparing to what OpenAI did in April. Their agents sdk update lets you move both the harness and the compute to your side. You can run the whole stack yourself. Anthropic chose not to. The agent loop stays on their infra. Only tool execution and mcp connectivity move out.

You don't own the loop. You own the boundary. Whether that trade lands for you depends on how much you trust anthropic to run the loop and how much vendor lock-in you can stomach.

A few caveats before anyone wires this up in prod:

• Research preview, not ga. Suites and key rotation cadence are not in the public docs yet.
• The orchestration plane runs on anthropic. If they have a bad day your agents have a bad day, and there is no failover path because the loop is not something you can stand up yourself.
• Credentials still exist. they moved from the agent context to an mcp server you operate. That server still needs proper scoping, audit logging, and least-privilege downstream tokens. no architecture trick fixes that part.

For anyone running mcp servers in production: Does the split land in the right place for you, or would you rather own the whole loop the way openai's sdk lets you?

I put together a longer breakdown, that sheds more light on the new announcement.

If you've ever run pip install openai, npm @anthropic-ai/sdk, or pulled the Google Generative AI client, you've used Stainless. They're the NY startup whose code-generation engine produces the official SDKs shipping with OpenAI, Google, Meta, Cloudflare, and Anthropic. Anthropic bought them yesterday for a reported $300M+.

Most coverage is framing it as a developer tools play. I think MCP is the actual reason this happened.

What actually changed hands:

1. The engineering team. Roughly 40-50 people including founder Alex Rattray, who previously built Stripe's patented SDK generation system. Now under Anthropic's Platform Engineering org.
2. The technology. The generator, templates, language-specific runtimes, OpenAPI extensions.
3. The customer relationships. Stainless was generating SDKs for ~200 paying customers including every Anthropic competitor. The hosted product is winding down. New signups stopped Monday. Existing SDKs customers already generated stay theirs to keep.

Now sit with this from OpenAI's seat for a second. Their official Python and Node clients (tens of millions of weekly downloads combined) are Stainless output. They reportedly abandoned their internal SDK effort years ago because keeping six language SDKs in sync with a fast-moving API got too expensive. The engineers who maintain that pipeline now work for a direct competitor.

Zoom out on Anthropic's M&A over six months and it stops looking like disconnected purchases:

• December 2025: Bun, the JS runtime, pulled into Claude Code
• February 2026: Vercept, computer-use AI
• April 2026: Coefficient Bio, ~$400M healthcare AI
• May 2026: Stainless, SDK and MCP plumbing

They're not buying training infrastructure or GPU clusters. They're buying the layers around the model. The bet seems to be that models are converging in quality faster than anyone expected, so the moat is everywhere else. AWS made the same call about cloud computing fifteen years ago.

Sources:

• Anthropic announcement
• Why Anthropic actually did this, and migration math