# Portveil

> Portveil is a WireGuard VPN with one account for your phone, your laptop and the machines your AI agents run on. A dashboard, an API and an MCP server show which devices are really protected (the exit server confirms each tunnel) and move an agent's machine to another country in seconds, on request or on a schedule.

Locations: United States (Hillsboro, Oregon) and Finland (Helsinki). Every plan includes all locations, the dashboard, the API and the MCP server.

## Plans (USD, current as of 2026-09-27; https://portveil.com/#pricing is authoritative)

- Free: $0. Up to 2 devices, 25 Mbps, 25 GB a month; past that, slowed to 1 Mbps until the 1st (never cut off). No card, no end date. Email sign-up: https://portveil.com/free/
- Personal: $7/month. Up to 5 devices, 100 Mbps, no data limit.
- Pro: $12/month. Up to 10 devices, 200 Mbps, no data limit.
- Builder: $29/month. Up to 25 devices, 300 Mbps, no data limit.

Paying for a plan with the same email as a free account keeps that account and its devices.

## How devices connect

- Phones and laptops: the free WireGuard app, one tunnel per country; switched on the device.
- Linux servers and AI agent machines: the Portveil agent, which can be moved remotely from the dashboard, the API or an AI assistant. All of the machine's own traffic goes through the chosen exit, while SSH and other incoming connections keep their normal route, so remote servers stay reachable.

## For AI agents and assistants

- [MCP server](https://portveil.com/mcp/): npm package `portveil-mcp` (source: https://github.com/roybogs/portveil-mcp). Tools: list_devices, get_device, list_locations, get_account, list_activity, move_device, rotate_device, start_rotation, stop_rotation, reconnect_device, disconnect_device, add_device, update_device, remove_device.
- Auth: a scoped API token from the dashboard (read, control or admin) plus the account ID. Never use the account key for an assistant.
- Hermes Agent: a `portveil` skill covers setup, including installing the package into its own folder (Hermes only installs npm packages older than 14 days).
- [API reference](https://portveil.com/docs/api/): base URL https://api.portveil.com, bearer token auth.
- Exits: https://api.portveil.com/v1/exits (public, no token) lists each exit's IP, country, city, timezone and language. A browser on a moved machine should use the exit's timezone, since sites compare it with the IP's country.
- Leak check: `GET https://portveil.com/cdn-cgi/trace` shows the `ip=` a site sees; compare it with the exits list. People can use https://portveil.com/check/ (IP, WebRTC and timezone).

## Guides

- [Portveil for AI agents](https://portveil.com/vpn-for-ai-agents/)
- [Change a machine's IP location with an API call](https://portveil.com/change-ip-with-api/)
- [Set up an iPhone, a Mac and an agent machine](https://portveil.com/setup-iphone-mac-agent/)
- [Leak check](https://portveil.com/check/)
- [Portveil vs Tailscale and Mullvad](https://portveil.com/portveil-vs-tailscale-mullvad/)

## Policies

- [Terms](https://portveil.com/legal/terms/)
- [Privacy](https://portveil.com/legal/privacy/): Portveil never sells, uses or discloses user data to third parties for any purpose.
- [Acceptable use](https://portveil.com/legal/acceptable-use/): no spam, scanning or attacks, and no scraping that violates a site's terms or overloads it (including through AI agents you control).

## Account

- [Start free](https://portveil.com/free/) · [Set up a device](https://portveil.com/start/) · [Dashboard](https://portveil.com/dashboard/)
- Contact: support@portveil.com