---
title: "Get Tunnel"
method: GET
path: "/workspaces/{workspace_id}/tunnels/{tunnel_id}"
tags: ["tunnels"]
---

# Get Tunnel

`GET /workspaces/{workspace_id}/tunnels/{tunnel_id}`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/workspaces/{workspace_id}/tunnels/{tunnel_id}`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Get a tunnel in the workspace and the resources that reference it.

## Path parameters

- `tunnel_id` string, uuid, required
- `workspace_id` string, uuid, required

## Response `200`

Successful Response

- TunnelDetailRead: A tunnel and the resources that reference it.
  - `id` string, uuid, required
  - `workspace_id` string, uuid, required
  - `name` string, required
  - `description` string, nullable, required
  - `provider` 'pangolin', required
  - `endpoint` string, required
  - `client_id` string, required
  - `allowed_targets` TunnelTarget[], required
    - `host` string, required: Exact hostname or IP address. Wildcards and CIDR ranges are not allowed.
    - `ports` integer[], required
  - `enabled` boolean, required
  - `has_gateway_key` boolean, required
  - `managed` boolean, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `referenced_by` TunnelReference[], required: MCP integrations, current agent preset versions and workflows that route through the tunnel. Each kind is capped at 200 entries.
    - `kind` 'mcp_integration' | 'agent_preset' | 'workflow', required
    - `id` string, uuid, required
    - `name` string, required
    - `detail` string, nullable: Where in the resource the tunnel is set, e.g. an action or tool

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)