OpenAI shipped Secure MCP Tunnel so enterprises can expose private MCP servers through ChatGPT without opening firewall ports. Cognition closed $1B at a $25B valuation as Devin hit $492M ARR, and ElevenLabs released Music v2 with a fully licensed pipeline.

OpenAI private MCP , Cognition 26B valuation , ElevenLabs Mu

OpenAI shipped a feature that lets enterprises expose private MCP servers through ChatGPT without opening firewall ports. Cognition closed a $1B round at a $25B valuation on the strength of $492M ARR from Devin. ElevenLabs released its Music v2 model.

What You Need to Know: OpenAI's Secure MCP Tunnel lets you run tunnel-client inside your network and connect private MCP servers to ChatGPT, Codex, and the Responses API over outbound-only HTTPS. Cognition, the company behind Devin, closed a $1B round at a $25B valuation, with over 90% of its own codebase now written by the AI. ElevenLabs launched Music v2, an upgrade to its fully licensed music generation model.

Why It Matters

For enterprise architects: Secure MCP Tunnel is the answer to the "MCP is great but I can't open inbound firewall ports" objection.
For agentic-coding investors: Cognition at $25B with 90% of its own code written by Devin is the strongest proof point yet for "the agent eats itself first."
For music-tech builders: ElevenLabs's fully licensed approach is the only defensible music model strategy given the 2024-2025 copyright lawsuits against Suno and Udio.
For procurement teams: All three stories confirm that the model layer is becoming a commodity. The defensible value lives in the runtime and the distribution.

What Actually Happened

OpenAI ships Secure MCP Tunnel

On May 27, 2026, OpenAI released Secure MCP Tunnel in GA, addressing the single biggest enterprise blocker to MCP adoption: the requirement to expose a server to the public internet. Per OpenAI's developer documentation, the architecture is simple: a tunnel-client binary runs inside the customer's network, polls api.openai.com:443 over outbound HTTPS, pulls queued MCP work, forwards requests to the local MCP server over stdio or HTTP, and returns responses through the same tunnel. The MCP server never needs a public listener. The OpenAI-hosted endpoint gives ChatGPT, Codex, and the Responses API a normal MCP request path; the network initiation point stays inside the customer boundary. The official tunnel-client is open-sourced at openai/tunnel-client on GitHub. Sources: OpenAI — Secure MCP Tunnel docs, mcp.directory guide, ByteIota walkthrough, ExplainX enterprise guide.

Cognition closes $1B at $25B as Devin hits $492M ARR

Cognition, the applied AI lab behind the Devin coding agent, closed a $1B financing round at a $25B valuation, confirmed by reporting from the Awesome Agents Weekly newsletter and corroborated by Corgi's investment tracking on X. The bigger number, however, is the $492M ARR Devin has hit — and the fact that over 90% of Cognition's own codebase is now written by the AI. That second figure is the proof point that matters: the company eating its own cooking at this scale is the strongest "agent maturity" signal in the industry right now. The round puts Cognition in the same valuation tier as the late-2025 Cursor round and well ahead of most other agentic-coding startups. Sources: Awesome Agents Weekly — Cognition raises $1B, Corgi on X — Cognition valuation notes.

ElevenLabs releases Music v2

ElevenLabs launched Music v2, the next iteration of its fully licensed AI music generation model. The platform pairs a creation tool with a marketplace for remixing and earning. The pitch, per ElevenLabs's own announcement, is "discover, remix, create, and earn from music" — a model Suno and Udio cannot legally offer while their training-data lawsuits are unresolved. Variety reported separately that ElevenLabs's "The Eleven Album" partnership with artists like Liza Minnelli and Art Garfunkel continues to attract legacy names precisely because the underlying model is fully licensed, not scraped. Sources: ElevenLabs blog — ElevenMusic launch, Variety — ElevenLabs' Eleven Album, Instagram product demo of Music v2.

The Take

Read the OpenAI announcement carefully: "tunnel-client authenticates to the OpenAI tunnel control plane" and "the network initiation point stays inside your boundary." That's not a feature description, that's a procurement win. Every enterprise security team that has been blocking MCP adoption for the last six months just lost its strongest objection. The implication is that MCP is going to be a default surface inside ChatGPT, Codex, and the Responses API by Q4 2026, and the question for app vendors is no longer "should we build an MCP server?" but "how do we secure our tunnel-client deployment at scale." Cognition's $25B is the buyer's market validation; ElevenLabs's Music v2 is the licensing template. None of these are "moving fast" stories. They're the slow consolidation of the model layer into platform layer, and the buyers who recognize it now will be the ones who don't get squeezed in 2027.

Quick Summary

OpenAI's Secure MCP Tunnel removes the inbound-firewall blocker for enterprise MCP. Cognition hit a $25B valuation on $492M Devin ARR with 90% of its own code written by the AI. ElevenLabs shipped Music v2 with a fully licensed training pipeline.

Sources:

Source: TLDR | mr.technology — The Master Skill Index