PortYour iPhone. Your MacBook. Your Hermes agent.
One VPN.
Put the devices you carry and the machines your agents run on under one account. See which ones are really protected, and move an agent's machine to another country with a click, an API call, or by asking Hermes, Claude or any MCP assistant.
Remote switching works on machines running the Portveil agent. Phones and laptops connect with the free WireGuard app and switch locations on the device.
How it works
Pick a plan
Check out with Stripe. We email you a one-time link to set up your account.
Add your devices
Phones and laptops use the free WireGuard app. Linux servers and AI agents run the small Portveil agent.
Control them from anywhere
One dashboard shows which devices are really protected. Move any of them between countries, reconnect, or disconnect.
Your agents choose where their traffic comes from
- Switch location by API. One call moves a device to another country; the exit confirms it before it counts.
- Scoped tokens. Give an agent read, control or admin access. Never your account key.
- Every move is logged. An audit trail records which token moved which device, and when.
- Servers stay reachable. The agent keeps SSH and other incoming connections working while everything the machine connects to goes through Portveil.
# move an agent's machine to Finland
API=https://api.portveil.com/v1/accounts/$ACCT
curl -X POST "$API/devices/$DEV/commands" \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"type":"switch_server",
"server_id":"srv-eu-1"}'Honest about what "protected" means
Green only when it's true
A device shows as protected only when our exit server confirms it's seeing that device's tunnel. A connected app isn't enough.
No browsing logs
We don't log the sites you visit, your DNS queries or your traffic. What we do keep is short and listed.
WireGuard, nothing custom
Standard WireGuard tunnels. Device keys are made on your device or in your browser and never reach us.
Locations
Every plan gets every location. More are coming.
Pricing
Every plan: all locations, the dashboard, and the API. Cancel any time. Free is slowed to 1 Mbps past 25 GB until the 1st, never cut off; upgrading keeps your account and devices.
Questions
Which devices work?
iPhone, Android, Mac and Windows through the free WireGuard app, and Linux through the Portveil agent, which also allows remote control. Native Portveil apps for iPhone and Mac are on the way.
How do I switch countries?
From the dashboard, from the API, or on a device itself. Devices running the Portveil agent switch in place; with the WireGuard app you turn one country's tunnel off and the other on.
Can I let an AI agent control my VPN?
Yes. Create a scoped API token in the dashboard and give it to your agent. It can switch locations or reconnect devices without ever seeing your account key, and every action is logged.
Why does a site sometimes ask me to prove I'm human?
Some sites and security services (Cloudflare's own sign-in, some banks and streaming services) treat any VPN or data-center address with extra caution, so they may show a check or block the page. Switch to the other location, or turn the tunnel off for that site. It isn't a sign your connection is broken.
What can't I use it for?
Spam, attacks, fraud, or scraping that breaks a site's terms, including by agents you run. Outbound email (port 25) is blocked. See the acceptable use policy.
Lost your setup link or account key?
Get a new setup link sent to the email you checked out with.