Lists live tunnels and sessions, creates endpoints and edge routes, rotates API and SSH credentials, and streams ngrok events to an external destination.
102actions available
Every action runs live through MCP. Nothing to build, nothing to maintain.
Ayro sets up a cloud endpoint on your ngrok account for tunneling and testing. Developers expose local services to the internet without manual ngrok CLI setup.
Ayro modifies an existing cloud endpoint's configuration without tearing it down. Configuration changes go live instantly, eliminating downtime.
Ayro retrieves the current status and configuration of an endpoint by ID. Developers confirm their tunnel is active and routing correctly.
Each card is one request a support team gets, and the Ngrok actions Ayro runs to close it.
Ayro lists the active tunnels, the sessions behind them, and every endpoint on the account, so a question about what is publicly reachable is answered with the current state.
Ayro creates the endpoint, puts an HTTPS edge in front of it, and adds the route that maps a path to the right backend, so a callback URL exists before the call that needs it.
Ayro creates the replacement API key, updates the description on the one being retired, and deletes it once nothing is using it, keeping tunnel and SSH credentials on a schedule.
Ayro creates an event source and the subscription that ships it, and lists the destinations already configured, so tunnel and API activity lands in the log your team already reads.
How it works
Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Ayro reads the Ngrok actions it has and picks the ones a request needs.
Authorize the Ngrok account your team already uses — one consent screen, no API keys, no mapping tables. Ayro can only do what you granted that account, and you can disconnect it at any time.
Describe the job the way you would hand it to a teammate. Ayro maps it to the Ngrok actions that close it and chains as many as the request needs.
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started freeNgrok · Ayro
What can you do in Ngrok without me setting anything up?
These, right away:
Great, let's start with the first one.
FAQ
Setup, permissions, and the limits of what Ayro can do inside Ngrok.
It can read the rules that would block it. List IP Policies and List IP Policy Rules return the allow and deny lists, List IP Restrictions shows where they are applied, and Get Edge Route IP Restriction Module covers a specific route, so the answer points at the rule rather than the symptom.
All 102 actions your agent can call on Ngrok, straight from the live MCP connection.
Creates a new API key for authenticating with the ngrok API.
Creates a new tunnel authtoken credential for authenticating ngrok agents.
Create a cloud endpoint on the ngrok account.
Add a new event source to an event subscription.
Creates a new event subscription in ngrok.
Creates a new HTTPS edge in your ngrok account.
Creates a new route on an HTTPS edge in ngrok.
Creates a new SSH credential from an uploaded public SSH key.
Creates a new vault in your ngrok account.
Create a new secret in an ngrok vault for secure storage of sensitive data like API keys, passwords, or tokens.
Delete an API key by its ID.
Delete a tunnel authtoken credential by ID.
Delete the Circuit Breaker module from an HTTPS Edge Route.
Delete the compression module from an HTTPS edge route.
Delete the request headers module from an HTTPS edge route.
Delete the response headers module from an HTTPS edge route.
Delete the SAML module configuration from an HTTPS edge route.
Delete the user agent filter module from an HTTPS edge route.
Delete the webhook verification module from an HTTPS edge route.
Delete the WebSocket TCP converter module from an HTTPS edge route.
Delete an endpoint by ID.
Delete an event source from an event subscription.
Delete an event subscription by ID.
Delete an HTTPS edge by ID.
Delete an HTTPS edge route by ID.
Detach the certificate attached to a reserved domain.
Detach the certificate management policy from a reserved domain.
Delete a vault secret by ID.
Delete an SSH credential by ID.
Delete a vault by ID.
Same connection, same setup. Pick the next one your team already uses.
Pauses a step for a set interval through Bench's single Sleep action, pacing a run of calls instead of firing them at once.
Starts builds on a chosen workflow and branch, reads build history, updates variable groups, and clears application caches without opening the dashboard.
Stands up a form with its notification and webhook settings, pages through its submissions, and retires it when it is finished.
Checks ingestion status, builds filtered views and preset alerts, writes exclusion rules to hold down index cost, and rotates API keys and member roles.
Lists published transformations and libraries, creates and publishes new code, and walks back through revision history on request.
Checks the 2Captcha balance, submits a CAPTCHA as a solving task, and reports solutions the target site rejected.

Authorize the account and your agent has all 102 actions from the first conversation.
