{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreidhsnky3jb7hu52ouiyjfw26mbtu5gjajjpo22iplyhj6qkcop6xa",
    "uri": "at://did:plc:lk3jfj3zq4k4wxnk474axylu/app.bsky.feed.post/3mmyk5rxvfuc2"
  },
  "path": "/t/unable-to-create-secure-mcp-tunnel-tenant-context-missing-fallback-missing-entry/1382009#post_1",
  "publishedAt": "2026-05-29T12:10:14.000Z",
  "site": "https://community.openai.com",
  "textContent": "Hi,\n\nI’m trying to create an OpenAI Secure MCP Tunnel for a local MCP server that I want to use from a ChatGPT custom connector.\n\nMy intended setup is:\n\n\n    ChatGPT custom connector\n      -> Connection = Tunnel\n      -> OpenAI Secure MCP Tunnel\n      -> local tunnel-client\n      -> local MCP server at http://127.0.0.1:8000/mcp\n\n\nI understand that ChatGPT does not accept a direct local HTTP MCP URL like `http://localhost:8000/mcp`, so I’m trying to use the Tunnel option instead.\n\nIn Platform settings, I created two custom roles:\n\n  * Tunnel Manager: `Tunnels Read + Manage`\n\n  * Tunnel User: `Tunnels Read + Use`\n\n\n\n\nI assigned both roles to my user.\n\nThen I went to Platform → Organization → Tunnels and tried to create a tunnel with:\n\n\n    Name: llmgw\n    Description: local MCP tunnel\n    Organization IDs: my current org ID\n    Workspace IDs: empty\n\n\nThe UI shows a generic toast:\n\n\n    Failed to create tunnel. Please try again.\n\n\nThe Network response contains:\n\n\n    {\n      \"error\": {\n        \"message\": \"403: Tenant context missing and no allowlist is configured for the active organization. (reason=fallback_missing_entry) (request_id=req_09e00d1c231347b48dcc8a5ed305605f)\",\n        \"type\": \"server_error\",\n        \"param\": null,\n        \"code\": null\n      }\n    }\n\n\nThis looks somewhat related to another private MCP connector issue mentioning a missing `access_list`, but in my case the backend says `fallback_missing_entry`.\n\nQuestions:\n\n  1. Is Secure MCP Tunnel currently available for personal Platform organizations / personal ChatGPT accounts?\n\n  2. Is a ChatGPT Workspace ID required to create a tunnel?\n\n  3. If yes, where can I find the correct `workspace-...` ID for a personal ChatGPT workspace?\n\n  4. Does `fallback_missing_entry` mean my organization needs to be allowlisted before Secure MCP Tunnel can be used?\n\n  5. What is the expected relationship between Platform organizations, Platform projects, ChatGPT workspaces, and Secure MCP Tunnel scope?\n\n\n\n\nI’m not trying to report a billing issue. I’m trying to understand the correct Apps SDK / MCP tunnel setup for local development with ChatGPT connectors.\n\nThanks!",
  "title": "Unable to create Secure MCP Tunnel: tenant context missing / fallback_missing_entry"
}