How do I install the Tunneling skill?

Run npx skillmds@latest add matrixx0070/tunneling in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Tunneling safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Tunneling?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Tunneling free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Tunneling?

Matrixx0070 (@matrixx0070) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Tunneling by matrixx0070 — Agent Skill

Name: Tunneling
Rating: 4.2 (5 reviews)
Author: Matrixx0070

Tunneling

Expose local ports to the internet as public HTTPS URLs using tinyfi.sh SSH tunnels. Use when you need to expose a locally running app, test webhooks, or give TinyFish access to a site that is only hosted locally — tunnel it first, then point TinyFish to the tunneled URL. No signup, no API key, no installation beyond SSH.

Matrixx0070 Updated Sep 10, 2026 0 repo stars

File contents

TinyFish Tunneling (tinyfi.sh)

Create instant public HTTPS URLs for locally running apps via SSH tunneling. Free, no account, no installation beyond SSH.

Pre-flight Check (REQUIRED)

which ssh && echo "SSH available" || echo "SSH not found — install OpenSSH first"

If SSH is not available, stop and tell the user to install OpenSSH.

Quick Start

Warning: This exposes your local service to the public internet. Do not tunnel admin panels, debug endpoints, or services that expose secrets or credentials.

ssh -o StrictHostKeyChecking=accept-new -R 80:localhost:<PORT> tinyfi.sh

Replace <PORT> with the port your app is running on. The command prints a public https://<random>.tinyfi.sh URL.

Note: StrictHostKeyChecking=accept-new automatically trusts the tinyfi.sh host key on first connection and rejects changes on subsequent connections. If you require stricter verification, manually confirm the server fingerprint before first use.

Custom Subdomain

Request a specific subdomain instead of a random one:

ssh -o StrictHostKeyChecking=accept-new -R myname:80:localhost:<PORT> tinyfi.sh

This gives you https://myname.tinyfi.sh.

Keep-Alive (Stable Connections)

For long-running tunnels, add a keep-alive interval to prevent disconnection:

ssh -o StrictHostKeyChecking=accept-new -o ServerAliveInterval=60 -R 80:localhost:<PORT> tinyfi.sh

Usage Guidelines

When starting a tunnel for the user:

Ask which port to expose if not already specified
Run the SSH command in the background so the agent can continue working
Report the public URL back to the user once the tunnel is established
The tunnel stays open as long as the SSH connection is alive

Common Ports

Framework / Tool	Default Port
Next.js / React / Express	3000
Vite	5173
Django	8000
Flask	5000
Go (net/http)	8080
Ruby on Rails	3000
PHP (built-in)	8000

Rate Limits

5 SSH connections per minute per IP
100 HTTP requests per minute per IP
50 concurrent connections max
48-hour idle timeout

$ARGUMENTS

---name: tunnelingdescription: Expose local ports to the internet as public HTTPS URLs using tinyfi.sh SSH tunnels. Use when you need to expose a locally running app, test webhooks, or give TinyFish access to a site that is only hosted locally — tunnel it first, then point TinyFish to the tunneled URL. No signup, no API key, no installation beyond SSH.---# TinyFish Tunneling (tinyfi.sh)Create instant public HTTPS URLs for locally running apps via SSH tunneling. Free, no account, no installation beyond SSH.## Pre-flight Check (REQUIRED)```bashwhich ssh && echo "SSH available" || echo "SSH not found — install OpenSSH first"```If SSH is not available, stop and tell the user to install OpenSSH.---## Quick Start**Warning:** This exposes your local service to the public internet. Do not tunnel admin panels, debug endpoints, or services that expose secrets or credentials.```bashssh -o StrictHostKeyChecking=accept-new -R 80:localhost:<PORT> tinyfi.sh```Replace `<PORT>` with the port your app is running on. The command prints a public `https://<random>.tinyfi.sh` URL.> **Note:** `StrictHostKeyChecking=accept-new` automatically trusts the tinyfi.sh host key on first connection and rejects changes on subsequent connections. If you require stricter verification, manually confirm the server fingerprint before first use.---## Custom SubdomainRequest a specific subdomain instead of a random one:```bashssh -o StrictHostKeyChecking=accept-new -R myname:80:localhost:<PORT> tinyfi.sh```This gives you `https://myname.tinyfi.sh`.---## Keep-Alive (Stable Connections)For long-running tunnels, add a keep-alive interval to prevent disconnection:```bashssh -o StrictHostKeyChecking=accept-new -o ServerAliveInterval=60 -R 80:localhost:<PORT> tinyfi.sh```---## Usage GuidelinesWhen starting a tunnel for the user:1. **Ask which port** to expose if not already specified2. **Run the SSH command** in the background so the agent can continue working3. **Report the public URL** back to the user once the tunnel is established4. The tunnel stays open as long as the SSH connection is alive## Common Ports| Framework / Tool | Default Port ||----------------------|-------------|| Next.js / React / Express | 3000 || Vite | 5173 || Django | 8000 || Flask | 5000 || Go (net/http) | 8080 || Ruby on Rails | 3000 || PHP (built-in) | 8000 |## Rate Limits- 5 SSH connections per minute per IP- 100 HTTP requests per minute per IP- 50 concurrent connections max- 48-hour idle timeout$ARGUMENTS

Frequently asked questions