---
title: "wendy cloud tunnel"
description: "Forward a local TCP or UDP port to a port on a cloud-enrolled device"
---

## Syntax

```sh
wendy cloud tunnel <local-port>:<remote-port>[/udp] [flags]
```

## Examples

```sh
wendy cloud tunnel --help
```

## Arguments

Argument notation from the CLI: `<local-port>:<remote-port>[/udp]`. Angle brackets mark required values; square brackets mark optional values. See Details for command-specific validation.

## Flags

Flags below include inherited options. Types and defaults come from the CLI source. An empty default means no value is configured.

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--broker-url` | string | (empty) | Tunnel broker host:port (default: cloud :443 endpoint, otherwise &lt;cloud-host&gt;:50052) |
| `--cloud-grpc` | string | (empty) | Cloud gRPC endpoint (optional when a default session is set via 'wendy auth use') |
| `--device` | string | (empty) | Device name (skips interactive picker) |
| `--json` | bool | `false` | Output in JSON format |

## Output

Output depends on the operation and selected target. [Command behavior and detailed examples](../../../../advanced/clients/wendy-cli/commands/cloud/tunnel/).

## JSON output

The global `--json` option requests machine-readable output. The CLI also selects JSON mode when no interactive terminal is attached. Support and payloads are command-specific; this flag does not guarantee a single JSON document for commands that stream logs or invoke build tools. Consult Details before parsing command output.

## Exit codes

The CLI entry point returns `0` on success and for its user-cancelled or default-cleared results. Other returned errors exit with `1` and print a diagnostic to stderr. Some operations may terminate through subprocess or signal handling; do not infer application health from the CLI exit code alone.

## Common errors

Check argument values and flag combinations against the synopsis above. For discovery, build, port, and readiness failures, see [deployment troubleshooting](../../../../errors/). Command-specific constraints are in Details.

## See also

- [wendy cloud](../../../../reference/cli/cloud/)
- [CLI conventions and configuration](../../../../reference/)

## Details

Listens on &lt;local-port&gt; and forwards each connection through the Wendy Cloud tunnel broker to &lt;remote-port&gt; on the target device.

[Command behavior and detailed examples](../../../../advanced/clients/wendy-cli/commands/cloud/tunnel/)