URnetwork
•••
AGENTS agents.md — machine-readable ↗

Built for Humans and AI

Give your agents access to URnetwork. Whole internet encryption with the same identity and privacy guarantees — no exceptions.

URagent, a pixel-art agent pilot URagent
Connect your agent — MCPv2 server 
https://mcp.bringyour.com
Add it to your agent 
claude mcp add --transport http urnetwork https://mcp.bringyour.com

OAuth: run /mcp in a session, pick urnetwork, and finish the browser sign-in.

The server uses OAuth to authenticate to your account on ur.io — the first connect opens a sign-in and your agent receives a scoped token. No keys to paste. Start with a free account and x402 will tell you when you need to upgrade.

Get Started in Minutes with a 7 day Free Trial

Create or sign in to a network, choose a billing cadence, then generate an authentication code from your control panel and pass it into your agent runtime.

Start your 7 day Free Trial

  1. 1

    Create or sign in to a network

    Your network holds your subscription, your devices, and your proxy access.

  2. 2

    Choose monthly or yearly

    After your free trial ends, your subscription auto-renews at the cadence you pick. Cancel anytime.

  3. 3

    If OAuth doesn't work, generate your agent auth code

    Connecting the MCP server with OAuth is the preferred way — most agents need nothing else. As a fallback, open your control panel, create a new auth code, and copy it into your agent runtime as URNETWORK_AUTH_CODE. Your agent will use it to call /network/auth-client and receive proxy URLs ready to use.

$ Skills and Tools

URNetwork Agent Marketplace

If you are an automated agent, see the SKILL.md ↗ to wire up URnetwork in your runtime. The network needs a network account created by a person, and the person needs to share the authentication code from their control panel with you.

Recommended Protocol
Use Case Recommended Protocol Requirement
Scraping / Web Browsing HTTPS Best for TCP / Web. Always use HTTPS proxy unless there is a specific need to use HTTP. HTTP is usually only needed for specific test environments that do not support HTTPS. From the /network/auth-client response, inside the proxy_config_result object, use the https_proxy_url. No additional username or password are needed.
Low-level Sockets / UDP SOCKSUR Pro Supports TCP+UDP sockets with SOCKS5. From the /network/auth-client response, inside the proxy_config_result object, use the socks_proxy_url or proxy_host and proxy_port, with the username access_token (empty password). The server supports remote DNS resolution (SOCKS5H).
System-wide / OS Level WireGuardUR Pro Routes all IP packets. In the /network/auth-client request, proxy_config.enable_wg must be explicitly set to true. In the response, inside the proxy_config_result object, use the wg_config.config as the complete WireGuard config file.

When using an HTTPS proxy, be careful that the target technology supports HTTPS. Some technologies support only HTTP and not HTTPS. If the target technology does not support an HTTPS proxy, it is preferable to consider an alternative library that does support HTTPS than to use an HTTP proxy. As a last resort, the HTTP proxy can be used.

$ Pay as you go with x402

The MCP server and the API both support x402 — the open standard that revives HTTP 402 "Payment Required" for machines. When a job hits a plan limit, your agent can pay in stablecoins and retry automatically, with no human in the loop.

Try it — the flow in four steps
1 · The agent asks
POST /x402/purchase
Content-Type: application/json

{ "sku_id": "pro_1month" }

No X-PAYMENT header yet — the server will quote, not charge.

Have an account? Get a real 402 quote
curl -i -X POST https://api.bringyour.com/x402/purchase \
  -H "Authorization: Bearer $URNETWORK_JWT" \
  -d '{"sku_id": "pro_1month"}'

Safe to run — the server only quotes payment terms. Nothing is charged without a signed X-PAYMENT retry.

 Guardrails — spend can't run away

Every x402 payment is an explicit, signed authorization for an exact amount — an agent can never spend what it didn't sign, and the default skill stops paying once it reaches the budget you set. No surprise bills, no runaway loops.