What it is

“I built tools for Claude as an MCP server, and I want it at a web address so Claude can use them without anything running on my laptop.”

The Model Context Protocol (MCP) is how AI apps such as Claude find and use outside tools: search your documents, file a ticket, query a database. An MCP server is the program that offers those tools.

A local server runs on your own computer, started by the app. A remote one runs at a web address and speaks "Streamable HTTP", so Claude or Claude Code can connect from anywhere. Claude's guide says a remote server "runs on infrastructure you host and is reachable over the internet" (Claude).

Watch the wording on provider sites. Daytona, Sprites, Runtime and E2B all document MCP servers, but theirs let an AI agent control their sandboxes, or run MCP tools privately for your own agent. They are not a way to host your server for Claude.

What it needs from a machine

From its own documentation, each line linked to the page it comes from

Machine size

No vendor publishes one. A server whose tools call other services is a small web process: 1 vCPU / 1 GiB / 10 GiB covers it, logs and an optional session store. A server whose tools run code or a browser should be sized like that work.

modelcontextprotocol.io

Does it stay on?

It must answer whenever the client calls. A host that sleeps can work if it wakes on the incoming request: Lizard's guide sleeps after 10 quiet minutes, and the first call afterwards takes longer. Claude allows 240 seconds per tool call.

lizard.build

What must survive a restart

Usually nothing: Cloudflare's template builds a fresh server for each request. If you use OAuth (a standard sign-in so only allowed users can connect), the signing keys and registered clients must survive, or every client has to sign in again.

developers.cloudflare.com

Browser, Docker, GPU

No browser unless a tool drives one. Docker is optional. A database only if a tool needs one, and it can live elsewhere. No GPU: the model runs on the client's side.

claude.com

How busy it is

Idle between tool calls and busy for milliseconds during one. There is no benchmark for it; the calculator uses 2%, below Battleships' 6% for an always-on agent, because the server only passes calls on.

battleships.dev, built by the Boat team

Setting it up on each provider

Easiest first. “Without a terminal” means someone who does not type commands can get it running from the provider's website.

ProviderHowWithout a terminal?What it involves
Cloudflare SandboxOne clickYesA Deploy to Workers button creates a remote MCP server at a workers.dev address ending in /mcp. This is a Cloudflare Worker, not the Sandbox product.Cloudflare: build a remote MCP server ↗
BlaxelOfficial guide or templateNoOne command creates a TypeScript or Python MCP server, deployed as a Blaxel Function with a global web address. Command line, not dashboard.Blaxel: create an MCP server ↗
LizardOfficial guide or templateNoA complete guide: Streamable HTTP, a token check so only your clients get in, a health check, a public HTTPS address and sleep when idle. Deployed from the command line.Lizard: host a remote MCP server ↗
ModalOfficial guide or templateNoAn official example deploys a stateless MCP server, written in Python, as a Modal app.Modal: stateless MCP server ↗
SandboxerOfficial guide or templatePartlyA detailed guide runs each MCP server in its own sandbox at a private address with its own token. Suited to clients you control, not to Claude's web connector.Sandboxer: one MCP server per sandbox ↗
Agent 37By handNoNo MCP template. A custom image can run the server, and every port gets a public agent37.app address. No MCP guide.Agent 37: templates ↗
BoatBy handPartlyRun the server and make its port public; Boat gives the port a public address that stays the same after resume. No custom domains, and no MCP guide.Boat: pricing and public URLs ↗
boxdBy handPartlyA machine plus a self-serve custom domain, with HTTPS set up for you, makes a clean MCP host. No MCP guide.boxd: custom domains ↗
DaytonaBy handNoDaytona's own MCP server lets an AI agent control Daytona sandboxes. Hosting your own server is a manual install with no guide.Daytona: its MCP server ↗
E2BBy handNoE2B's MCP gateway runs MCP tools inside a sandbox for your agent, which is the opposite direction. Sessions also end after one or 24 hours.E2B: MCP gateway ↗
InstaBoxBy handPartlyA public port works and wakes a paused machine, but published ports have no login: "anyone can reach the whole service". Put the access check in the server. No MCP guide.InstaBox: ports ↗
MorphBy handPartlyPublic HTTP services and wake on request make a Devbox a workable host. No MCP guide.Morph: HTTP services ↗
RuntimeBy handPartlyRuntime's catalogue MCP servers run at private addresses for your own agent. Hosting yours for Claude is a normal sandbox with a custom domain; no guide.Runtime: overview ↗
SpritesBy handNoSprites publishes a remote MCP server for controlling Sprites. Hosting yours means a service on a port, which wakes on a request; no guide.Sprites: its remote MCP server ↗
Vercel SandboxBy handNoA sandbox port gets a public address, but sandboxes are made for one task and end; a Vercel Function would be the simpler host. No MCP guide.Vercel Sandbox: concepts ↗

Read from each provider's documentation on 29 October 2026. A provider not listed as one click can still be the right home; it means someone has to follow its instructions.

Where to start

Three starting points for different people, each with its catch

If you do not want a terminal

Cloudflare Sandbox

The only one-click route: a Deploy to Workers button creates a working remote MCP server, free up to 100,000 requests a day.

Catch: It is a Worker, not a sandbox, so the calculator's Cloudflare Sandbox price does not apply. The free plan allows 10 ms of CPU per request, enough for tools that call other services but not for heavy ones.

developers.cloudflare.com ↗

If you want a guide that covers access

Lizard

The most complete guide, including a token check and sleep when idle, so a quiet server costs little. Inside the $19 monthly plan that comes back as usage.

Catch: Its sample token expires after an hour and the signing key is not saved; use your own token issuer for a lasting server.

lizard.build ↗

If you want an always-on machine and your own domain

Runtime

CPU is billed only while it works, so a small server answering all month is about $6, with a custom domain.

Catch: No MCP guide; you set up the server, HTTPS address and access check yourself. One US region.

withruntime.com ↗

Beyond these providers. Cloudflare Workers on their own are the cheapest home: free up to 100,000 requests a day, or a $5 monthly minimum. Vercel Functions are free on Hobby, with a $20 monthly Pro fee. Render runs an always-on web service from $7 a month for 512 MB.

Compare these three head to head: features and cost side by side.

What it would cost

One small 1 vCPU / 1 GiB / 10 GiB server that must answer at a public address all month. About 2% CPU, because it only passes tool calls on. Where a provider sleeps an idle machine and wakes it on a request, it is awake about a third of the time (roughly the working day when people call it) and billed as stopped the rest. No model: the AI runs in the client. Change any number; open a row for the arithmetic.

Start from

The machine
How it runs
How busy it is

Only providers that bill for CPU actually used look at this. An agent waiting for messages is near 0%; a build or a test run is near 100%.

For providers that put an idle machine to sleep and wake it on a request: the share of its hours it has to be awake. An agent that only answers webhooks can sleep; one that holds a chat connection open cannot.

The AI model (optional)

For most agents the model costs more than the machine. Each message re-sends the agent's instructions and history, so tens of thousands of tokens is normal. Prices are the median of the providers that keep no data, from TokenWatch, read 2026-10-29.

    List prices only, excluding model tokens, egressData the machine sends out to the internet, such as downloads to a user or uploads to another service. Some providers charge per GB; most agents send very little., taxes and anything a provider does not publish. How the numbers are made.

    The features that decide it

    Each page compares every provider, with a source for every row

    1. 01

      Reaching it: links, ports and who can open them — A machine nobody can reach is not an agent. There are four doors in — an HTTPS link, a raw TCP port, SSH, and the provider's API — and the important difference is who can open each one.

    2. 02

      Custom domains — Putting an agent behind your own hostname is a feature some providers sell, some leave to a proxy you run, and several do not offer at all.

    3. 03

      Idle timers, waking and session limits — An always-available agent depends on three separate settings: a lifetime deadline, an idle timer, and a wake path. Providers bundle them differently, and the difference is most of your bill.

    4. 04

      Keys and secrets — Three different things are called “secrets”: a value in an environment variable, a file on disk, and a placeholder that a proxy swaps for the real key. Only the third keeps the key away from the agent.

    5. 05

      Billing models — The meter decides your bill more than the hourly rate does. Four shapes are in play: flat per size, per vCPU and per GB, a plan fee that returns as credit, and measured CPU.

    Sources