The tunnel takes 30 seconds. The permissions take a weekend.
Most write-ups about exposing an MCP server stop at the step where you get a public URL. That's the easy half.
The half that actually costs you time is deciding who's allowed to call it — and being ab
