Qualiteg Launches WireCanal™, Securely Connecting Internal Systems to Leading AI Services — Available from a Free Plan with No Credit Card Required
For internal systems that implemented MCP but remained out of reach of external AI: an enterprise-authentication-ready secure tunnel that safely connects Claude and ChatGPT with no inbound port openings and no new VPN.
Qualiteg Inc. (Headquarters: Chiyoda-ku, Tokyo; CEO: Tomonori Misawa) announced the general availability of WireCanal on August 4, 2026. WireCanal is a service that securely connects cloud AI services such as Claude and ChatGPT to databases and MCP servers inside corporate networks. Users are authenticated through the company's own identity provider, and only organizational accounts belonging to administrator-approved domains can access internal systems through AI. Beyond AI integration, WireCanal can also be used as a general-purpose secure tunnel for HTTPS and TCP (RDP, SSH, databases, and more).
A canal is an artificial waterway that admits only vessels with an approved destination. In the same way, WireCanal builds a dedicated passage — a secure tunnel — between cloud AI and internal systems through which only permitted traffic can travel. In WireCanal, each of these individual communication paths is called a "canal." A canal is opened by the WireCanal Agent, a relay program installed inside the corporate network that connects outward, so there is no need to open inbound ports or build a new VPN environment.
WireCanal is available starting with a free plan (USD 0) that requires no credit card registration. To mark the start of general availability, Qualiteg is also running a launch campaign: customers who sign up for an annual Light Plan contract (one canal) by August 31, 2026 can use the service for 6,000 yen (tax included; equivalent to 500 yen per month) for the first year. After the campaign ends (from September 1, 2026), the price for new annual contracts is 15,360 yen per year (tax included).
You want AI to work with live internal data — but internal systems cannot be exposed
"I want to ask Claude about our internal sales data." "I want to check inventory and production status in plain language, without learning SQL or system operations." As business adoption of cloud AI advances, the databases and core systems that hold the answers — and the MCP servers that make them usable from AI — remain on local PCs and inside corporate networks. Cloud-hosted AI cannot reach them as-is.
MCP (Model Context Protocol) is a common specification that lets AI discover and execute external tools, and it also defines mechanisms for authentication and authorization. Supporting MCP alone, however, does not automatically provide a secure path from cloud AI into the corporate network, nor account management tied to the company's IdP.
The enterprise operational foundation — a communication path from cloud AI into the corporate network, user management based on company identities, and access revocation linked to company account suspension when an employee leaves — must be built separately.
At the same time, publishing an MCP server to the internet without proper authentication and access control means exposing a wide-open entrance to internal systems. Trying to solve this with inbound port openings or VPN construction instead places a heavy build-and-operate burden on the IT department. "We want to use it, but there is no safe way to expose it." This is where many companies come to a halt.
WireCanal's answer: connect outward from inside, and guard the entrance with company identities
Place the WireCanal Agent — a connection app that runs on Windows and Linux — inside the corporate network, and the Agent establishes an outbound encrypted tunnel. Requests from Claude or ChatGPT reach only the internal MCP servers designated in advance.
And the entrance is guarded by company identities. When a user accesses a canal, the login screen of the company's identity provider — such as Google Workspace — appears, and only organizational accounts from administrator-approved domains can connect. There is no need to issue separate WireCanal accounts to each user. When the company suspends an account, for example upon an employee's departure, that user's access is automatically revoked within one hour. Delegating the management of "who can use it" entirely to the company's existing identity infrastructure — that is WireCanal's answer.
What sets WireCanal apart: the company chooses which tools the AI can see
WireCanal also works as a general-purpose secure tunnel, offering HTTPS publishing of web systems along with eight kinds of access protection — including IP address restrictions, BASIC authentication, and token authentication — on every plan. TCP relaying for RDP, SSH, databases, and more is available on the Pro Plan and above.
On top of that comes its distinctive feature: per-tool publication control for MCP. Even if an internal MCP server exposes many tools, an allowlist ledger determines which ones the AI can see. The default is deny-all. The authoritative copy of the ledger is a configuration file kept inside the corporate network; the cloud-side console can only "propose" changes, and applying them requires an approval action performed internally. If a tunnel is a plain pipe, WireCanal is a gatekeeper that understands the contents and chooses what to let through.
Defense in depth for organizational AI use
The boundaries WireCanal protects are threefold: "who can connect" and "what the AI can see," as described above, plus "where inside the network traffic can reach." The connection app connects only to its configured forwarding destinations, which prevents the tunnel from being used as a passage relaying traffic to arbitrary internal destinations. WireCanal's relay infrastructure is operated on servers in Japan, and inbound access is logged per canal, so you can review afterwards when and from where connections occurred. WireCanal adopts a fail-closed design: any traffic whose authorization cannot be confirmed by its access control is rejected.
These boundaries are supported by the following five layers of defense.
- Fixed forwarding destinations — The Agent connects only to its configured forwarding destinations. It re-validates the destination on every connection and does not follow redirects
- Restricted entrances — The public entrance can be narrowed to the IP addresses of legitimate callers. Agent connections are verified against issued keys
- Access protection — Eight kinds are available on every plan: IP restrictions, country restrictions, BASIC authentication, token authentication, time-window publishing, path restrictions, automatic blocking, and stealth mode
- Publication allowlists — The MCP tools and URL paths exposed externally are managed in an allowlist ledger kept on the internal side. The default is deny-all
- Standards-compliant MCP authentication — Built-in authentication and authorization conforming to the MCP Authorization specification and related RFCs (RFC 9728, RFC 8414, RFC 8707, and others); credentials verified at the entrance are never passed on to the forwarding destination
In addition, WireCanal provides isolation via a dedicated subdomain and unique ID per canal, per-canal suspend and resume, immediate shutdown from the internal side, and access logs scaled by plan (the most recent 1,000 to 10,000 entries, with CSV download). Your internal databases and MCP servers themselves stay inside the corporate network. You can start with a single user, and when rolling out to a department, management carries over under the same structure of IdP settings, canals, and allowed tools.
How it works: connecting Claude to an internal sales database in three steps
After preparing an internal MCP server and the WireCanal Agent, the connection can be configured in three steps: create an MCP canal, link it to the company's identity provider, and register the connection URL with Claude.
1. Create an MCP canal
In the WireCanal console, specify the AI service to use and the internal MCP server as the forwarding destination to create an MCP canal; a connection URL for registering with Claude is then issued. The WireCanal Agent inside the corporate network connects outward, and the communication path is open from this point on.
2. Protect the MCP canal with the company's identity provider
Assign an organizational IdP such as Google Workspace to the MCP canal and configure the domains permitted to connect. From then on, the entrance to this canal is the company's login screen.
3. Register the connection URL with Claude
Register the issued connection URL as a custom connector in Claude and sign in with your company account — setup is complete. WireCanal responds automatically to the OAuth configuration required for the connection, so there is no need to build a separate authorization server for connecting to AI services (the initial organizational IdP setup does require registering a client on your IdP's side). From there, simply talk to Claude to ask questions and run analyses — sales by category, annual sales trends, product-level sales movement — based on the latest internal data. No SQL required.
Launch campaign: the Light Plan, with one canal and a permanent subdomain, for 6,000 yen for the first year (tax included; equivalent to 500 yen per month)
To mark the start of general availability, Qualiteg is running a launch campaign for the Light Plan (one canal). Customers who sign up for an annual contract by Monday, August 31, 2026 can use the service for 6,000 yen (tax included; equivalent to 500 yen per month) for the first year. After the campaign ends (from September 1, 2026), the price for new annual contracts is 15,360 yen per year (tax included).
| Item | Details |
|---|---|
| Eligible plan | Light Plan (one canal) |
| Campaign price | First year: 6,000 yen per year (tax included; equivalent to 500 yen per month; billed annually) |
| Application deadline | Monday, August 31, 2026 |
| Price after the campaign | 15,360 yen per year (tax included; equivalent to 1,280 yen per month; billed annually) |
| Key features | Permanent subdomain of your choice, HTTPS/MCP canals, AI connectors, organizational IdP integration, access protection, access logs |
| How to apply | During the campaign period, the promotion code "WIRECANAL-PREMIERE" is applied automatically when signing up for an annual contract (no entry required) |
* The promotion applies only to the initial annual contract. Renewals from the second year onward are billed at the regular price in effect at the time of renewal. The campaign's content and duration are subject to change or termination without notice.
About WireCanal
WireCanal is a secure tunnel and MCP policy gateway that safely connects cloud AI and external services to internal systems, with its relay infrastructure operated on servers in Japan. It provides user verification through the company's identity provider and per-tool MCP permission control, making internal systems available from Claude, ChatGPT, and other AI services without opening inbound ports or building a new VPN. In addition to MCP, it supports HTTPS and TCP (RDP, SSH, databases, and more), and the WireCanal Agent connection app runs on Windows and Linux. Service starts with a free plan that requires no credit card registration.
Product, pricing, and security details:https://wirecanal.com/
About Qualiteg Inc.
Qualiteg Inc. is an AI company founded in July 2023. Under its corporate philosophy of "deepening the creativity of people around the world," Qualiteg works to amplify human creativity through cutting-edge AI technology and to realize a world that produces new forms of expression and value once beyond imagination. Rather than leaving AI as the privilege of a few specialists, the company pursues a society free of divides caused by technology gaps — one where anyone can use AI intuitively to deepen their own creativity — through the research, development, and consulting of generative AI products.
| Company name | Qualiteg Inc. |
| Address | 1-10-6 Kajicho, Chiyoda-ku, Tokyo, Japan |
| Founded | July 2023 |
| Representative | Tomonori Misawa, CEO |
| Business | AI and software research and development, consulting, and talent development |
| Website | https://qualiteg.com/ |
| Blog | https://blog.qualiteg.com/ |
| Products and services | ■ An integrated AI platform that accelerates business: Bestllam® ■ Generates realistic AI avatar videos from text, audio, and more: MotionVox® ■ Audits LLM inputs and outputs to guard against data-leak risks: LLM-Audit™ ■ Detects and masks personal and confidential information fast and accurately: PII-Fi™ API ■ Builds chatbots and inference environments with open-source LLMs: ChatStream® ■ AI, DX, strategy, new business, and open innovation: Consulting |
Media inquiries
Qualiteg Inc.
WireCanal PR
Contact: wirecanal-pr@qualiteg.com
* Organizational IdP integration is available on the Light Plan and above.
* When using cloud AI, the requests required to invoke MCP tools and their execution results are also transmitted to the AI service in use. Data handling is subject to each AI service's terms and settings.
* Supported AI services, available features, setup procedures, and required administrator privileges vary by each AI service's plan and workspace settings. Information is current as of August 4, 2026.
* The number of access log entries viewable in the dashboard varies by plan.
* Company names, product names, and service names mentioned are trademarks or registered trademarks of their respective owners. Third-party service names are given as connection examples and do not indicate any partnership, sponsorship, or endorsement.
