ExpressVPN has launched a beta Model Context Protocol (MCP) server that lets compatible AI tools read VPN status and change connection settings through the company’s desktop apps.
ExpressVPN described the release as the first time a VPN provider has adopted MCP for use with AI assistants and agents. MCP is an open standard introduced by Anthropic in 2024 to connect AI systems with external tools and data sources.
VPN controls have largely sat outside MCP-based development workflows. Developers typically switch server regions, check connection status, and troubleshoot network problems through separate apps and menus.
The company’s MCP server runs locally as a bridge between an AI tool and the ExpressVPN desktop app. Users can issue natural-language instructions that the AI tool converts into actions such as checking connection state or changing the selected region.
How it works
The beta supports MCP-compatible tools including Anthropic’s Claude Code and OpenAI’s Codex, and works with ExpressVPN desktop apps on macOS, Windows, and Linux.
The MCP server uses a fixed command allowlist, enabling it to read VPN status, switch regions, change protocols, and run diagnostics.
The MCP connection could be used in automated development routines where network state affects test outcomes-for example, confirming a secure connection before running scripts, testing region-specific API behaviour, or diagnosing connectivity problems while staying in an AI-assisted coding environment.
ExpressVPN positioned the release as part of a broader shift in how developers use assistants and agents alongside existing tools. Many AI coding tasks focus on code changes and build processes, while network configuration often sits outside the workflow.
“Developers are increasingly relying on AI agents to automate complex tasks, yet their network environment has remained manual. Our MCP server brings VPN control into those workflows, enabling secure testing, troubleshooting, and region switching without interrupting their workflow. As we continue to evolve the product alongside the market, we see MCP becoming a foundational standard for how AI systems interact with external tools,” said Shay Peretz, COO, ExpressVPN.
Security controls
The integration is disabled by default and requires users to opt in through the desktop app. The MCP server runs on the user’s device, rather than as a hosted service.
Under ExpressVPN’s design, the server does not provide access to account credentials or session information. The company said it operates under its no-logs policy, meaning it does not collect or store activity logs, connection logs, or destination data.
The arrival of a VPN MCP server also raises questions for developers and security teams about boundaries between AI tools and sensitive system functions. Local execution and a restricted command set may reduce risk, but organisations will still need to consider how AI tools are configured, what permissions they receive, and how prompts or automation rules are managed.
Access and plans
The beta is available to ExpressVPN subscribers on Basic, Advanced, or Pro tiers with one-year or two-year subscriptions, as well as customers using ExpressVPN for Teams.
Peretz said ExpressVPN expects MCP to become “a foundational standard” for how AI systems connect with external tools.