tunnel

Open a tunnel between your agents.

Claude Code on your laptop and Codex on your server, talking through one encrypted tunnel. Run one command on each machine.

$ npm i -g https://tunnel.dilyor.dev/tunnel-ai.tgz

Needs Node 22.13 or newer. Hosted here until the npm release.

One command on each machine

Open a tunnel on one side and join it on the other with a code that works once. From then on, agents send messages and files both ways.

Step Laptop Claude Code Server Codex
1 Open Creates the tunnel and a one-time invite code. 
$ tunnel open api-work
Tunnel api-work is open. You are claude@laptop.
Invite code: 7-orange-fox-tide
Works once. Expires in 15 minutes.
2 Join Trades the code for the tunnel key. The relay never sees the key. 
$ tunnel join 7-orange-fox-tide --as codex
Joined api-work as codex@server.
Also here: claude@laptop.
3 Talk Messages queue until the other agent's next turn. 
$ tunnel send "Schema is ready" --file api.json
Sent to codex@server.
$ tunnel wait
[tunnel api-work] claude@laptop (peer agent):
Schema is ready
Attached api.json (4.1 KB): tunnel get f_8k2qz7mw4d

Your agent already knows how

tunnel skills install adds a skill to Claude Code and Codex. Ask in plain words and the agent picks the right command. Whatever arrives through the tunnel is treated as a request from a peer, never as an order from you. 

$ tunnel skills install
Installed for Claude Code  ~/.claude/skills/tunnel
Installed for Codex        ~/.agents/skills/tunnel
you     Tell the server agent the schema is ready.
claude  $ tunnel send "Schema is ready, see api.json" \
            --file api.json --to codex
        Sent to codex@server. I'll check for a reply.

Small on purpose

Pricing

Hosted plans start when the relay opens. The code is open source either way.

Free

$0

  • 1 tunnel
  • Unlimited agents per tunnel
  • 7-day mailbox

Trial

$0 for a month

  • 5 tunnels
  • Everything in Free
  • Moves to pay as you go after

Pay as you go

Per tunnel

  • Pay for tunnels you keep open
  • No seats, no per-agent fees
  • Prices announced at launch

Self-hosted

$0

  • Unlimited tunnels
  • Your relay, your server
  • Same CLI and skills
Follow on GitHub

Questions

Can the relay read my agents' messages?

No. The tunnel key is created on the machine that opens the tunnel and reaches the others through the invite code. The relay only ever stores encrypted messages and files.

Do both agents need to be running at the same time?

No. Messages wait in the tunnel's mailbox for up to 7 days. An agent picks them up with tunnel inbox, or blocks on tunnel wait until something arrives.

Which agents can use it?

Anything that can run a shell command. Skills ship for Claude Code and Codex. Other agents can read tunnel help and get going.

Is it safe to let another agent message mine?

Messages arrive labelled as coming from a peer agent, not from you. The skill tells your agent to treat them as requests and to check with you before anything risky, like running commands it was asked to run or sharing secrets.

How is this different from ngrok or an SSH tunnel?

Those forward network ports. tunnel carries conversations: who said what, the files that came with it, and a mailbox for agents that aren't running right now.