• POLICY
  • ACCESS
  • GAP
  • HUMAN

How to audit ngrok security policies with your AI

Connect your AI to ngrok to scan your current access rules. Once connected, your agent handles the heavy lifting of inspecting your network perimeter.

Ask AI about this page

Short answer

How can I audit my ngrok security policies using AI?

Your AI pulls active IP restrictions and security policies directly from your ngrok account. This lets you spot misconfigured access rules or overly permissive settings immediately. You get a clear view of your current security posture through the following breakdown.

Audit outcomes

What your audit reveals

The AI scans your configuration to produce these specific results.

POLICY

Active policy list

The AI pulls every security policy currently active in your ngrok account. You see exactly what rules are in place.

ACCESS

IP restriction report

The agent identifies which IP addresses are permitted or blocked. This highlights any unexpected access points.

GAP

Security gap analysis

Your AI compares your current rules against your intended security standards. It flags where your setup is too open.

HUMAN

Manual remediation

The AI identifies the issues, but you must manually update the policies in the ngrok dashboard to fix them.

The workflow

What your AI does when the audit starts.

The AI moves through your ngrok configuration to build a map of your security rules.

  1. Fetch policies

    The agent pulls a complete list of all security policies defined in your ngrok environment.

    list_ip_policies

  2. Check IP rules

    The AI examines the specific IP restrictions applied to your tunnels to see who can connect.

    list_ip_restrictions

  3. Identify exposure

    The agent looks for policies that lack strict IP filtering or have broad ranges.

    list_ip_policieslist_ip_restrictions

  4. Summarize findings

    The AI organizes the raw data into a readable report of your current security state.

    list_ip_policies

Try it

Copy these to start.

Paste these into your chat to begin the audit.

Starting points

These are opening lines. You can swap out specific policy names or tunnel IDs to get more granular results.

ngrok Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_W7kWDZ5TzVjqcXyqlwc5ZMjOxjJKvoo33HXcSC0o/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — ngrok capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "ngrok-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_W7kWDZ5TzVjqcXyqlwc5ZMjOxjJKvoo33HXcSC0o/mcp"
    }
  }
}
Copy into chat04

  • List all my current ngrok IP policies and tell me if any are missing restrictions.

  • Check the IP restrictions for my production tunnel and flag any wide-open ranges.

  • Summarize all active security policies in my ngrok account.

  • Are there any IP policies currently active that don't have specific restrictions applied?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect ngrok once, then ask.

One connection gives your AI access to your ngrok data. Your credentials stay encrypted and secure on our side.

Connect ngrok to your AI

FAQ

How the audit behaves

  • 01

    Can the AI change my ngrok policies?

    No. The AI can only read and list your existing policies and restrictions. You must make any changes yourself in the ngrok dashboard.

  • 02

    Can the AI delete my tunnels?

    No. This MCP only has tools to list policies and restrictions. It cannot delete or modify any part of your ngrok infrastructure.

  • 03

    Does the AI see my tunnel traffic?

    No. The AI only sees the configuration and security policy data provided by the tools.

  • 04

    How does the AI know which IPs are restricted?

    It uses the list_ip_restrictions tool to pull the specific IP data from your account.

  • 05

    Can I audit specific tunnels?

    Yes. You can ask your AI to look at the policies and restrictions associated with specific parts of your ngrok setup.

  • More questions about ngrok? The Connector page answers them. See everything the ngrok Connector can do

Connect ngrok to Claude, Cursor, ChatGPT & more