Skip to main content

The authenticated, workspace-scoped tunnel a CLI dials out to.

GET 
/v1/relay/tunnel

The CLI opens a long-lived Server-Sent Events connection authenticated with the resolved environment's API key. The gateway streams recorded delivery events for that workspace only as delivery frames, each carrying its delivery_id as the SSE event id. The CLI acknowledges each frame with [relay_ack]. A tunnel opened with workspace A's key can never observe workspace B's events — the buffer is read under A's workspace key.

Events posted while no tunnel is connected are buffered and replayed on the next connection inside the pinned redelivery window; the relay never synthesizes an event and never mints a platform-signed outbound scheme.

Responses​

A Server-Sent Events stream of delivery events for the authenticated workspace. Each delivery frame's id is the event's delivery_id, acknowledged via POST /v1/relay/ack.