# Hyrule Cloud Reverse Tunnel Create

> Hyrule Cloud Reverse Tunnel Create is a paid API for AI agents from cloud.hyrule.host, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-17).

Creates a leased reverse SSH tunnel endpoint on Hyrule Cloud infrastructure, returning public connection details so external traffic can be forwarded to a private host.

## Facts

- Endpoint: POST https://cloud.hyrule.host/v1/tunnel/create?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hyrule-cloud-reverse-tunnel-create-dd41ff9c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_drLkyyiSmjJEkocAplxq0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hyrule-cloud-reverse-tunnel-create-dd41ff9c -d '<json body>'
```

Example prompt: Set up a reverse SSH tunnel on Hyrule Cloud that lasts 24 hours and only allows connections from 203.0.113.0/24, so I can expose my local service publicly.

## When to prefer this

Choose this endpoint when an AI agent or automated workflow needs to expose a private or NAT-ed service to the internet via a reverse SSH tunnel with a defined lease duration, especially when CIDR-based access control, pay-per-use billing via USDC/x402, and IPv6-native infrastructure are required. Prefer over ngrok or similar if operating in an agentic context that supports x402 micropayments or if BGP-level routing intelligence from AS215932 is important.

## Known failure modes

- Invalid hours value (below 1 or above 8760) returns 422 validation error
- Malformed CIDR strings in allowlist_cidrs return 422 validation error
- Payment not settled via x402 results in 402 Payment Required
- Exceeding allowlist_cidrs maximum of 64 entries returns 422 error
- Infrastructure capacity issues may return 503 Service Unavailable
- Expired or invalid USDC payment token returns 401/402

## How this service works

Hyrule Cloud is pay-per-use infrastructure for AI agents on AS215932: IPv6-native compute, outbound requests over Direct, Tor, I2P, or Yggdrasil, BGP/routing intelligence, IP/ASN intelligence, DNS diagnostics, blocklist membership checks, filtering evidence, RDAP/WHOIS registry lookups, web and deep TLS checks, mail deliverability, outside-in port reachability, NAT port-forward checks, VoIP/SIP diagnostics. Calls settle in USDC via x402. Domain registration is deferred from this launch catalog. This OpenAPI document contains the launch-ready, independently payable agent surface plus the free supporting routes (quotes, status polling, pricing, template catalog) required to complete those workflows.

## Output

Returns a JSON object with: tunnel_id (unique identifier), token (auth token for SSH), status ('active'), ssh_port (port to connect to on tun.hyrule.host), public_port (externally reachable port), endpoint_host (tun.hyrule.host), ssh_command (ready-to-run SSH reverse tunnel command), expires_at (ISO 8601 expiry timestamp), connected (whether SSH client is currently connected), and visitor_conns (current inbound visitor connection count).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "hours": {
   "type": "integer",
   "title": "Hours",
   "maximum": 8760,
   "minimum": 1,
   "description": "Lease duration in hours"
  },
  "allowlist_cidrs": {
   "anyOf": [
    {
     "type": "array",
     "items": {
      "type": "string"
     },
     "maxItems": 64
    },
    {
     "type": "null"
    }
   ],
   "title": "Allowlist Cidrs",
   "default": null,
   "description": "Optional source-CIDR allowlist for visitors; omit to allow all"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "token": "abcdefghijklmnopqrstuvwxyz234567",
  "status": "active",
  "ssh_port": 2222,
  "connected": false,
  "tunnel_id": "rtun_a1b2c3d4e5f6a7b8",
  "expires_at": "2026-07-22T18:00:00Z",
  "public_port": 10234,
  "ssh_command": "ssh -N -R 0:localhost:22 abcdefghijklmnopqrstuvwxyz234567@tun.hyrule.host -p 2222",
  "endpoint_host": "tun.hyrule.host",
  "visitor_conns": 0
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hyrule-cloud-reverse-tunnel-create-dd41ff9c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cloud.hyrule.host](https://www.zero.xyz/host/cloud.hyrule.host/llms.txt)