Anthropic's new mcp tunnel architecture: the agent never holds the credential (opens in new tab)

Self-hosted sandboxes and MCP tunnels let Claude Managed Agents call internal APIs and databases without carrying enterprise credentials in the agent context. What changed on May 19, the architecture Anthropic chose, and why it's a different bet from OpenAI's.