Hi,

I’m trying to create an OpenAI Secure MCP Tunnel for a local MCP server that I want to use from a ChatGPT custom connector.

My intended setup is:

ChatGPT custom connector
  -> Connection = Tunnel
  -> OpenAI Secure MCP Tunnel
  -> local tunnel-client
  -> local MCP server at http://127.0.0.1:8000/mcp

I understand that ChatGPT does not accept a direct local HTTP MCP URL like http://localhost:8000/mcp, so I’m trying to use the Tunnel option instead.

In Platform settings, I created two custom roles:

I assigned both roles to my user.

Then I went to Platform → Organization → Tunnels and tried to create a tunnel with:

Name: llmgw
Description: local MCP tunnel
Organization IDs: my current org ID
Workspace IDs: empty

The UI shows a generic toast:

Failed to create tunnel. Please try again.

The Network response contains:

{
  "error": {
    "message": "403: Tenant context missing and no allowlist is configured for the active organization. (reason=fallback_missing_entry) (request_id=req_09e00d1c231347b48dcc8a5ed305605f)",
    "type": "server_error",
    "param": null,
    "code": null
  }
}

This looks somewhat related to another private MCP connector issue mentioning a missing access_list, but in my case the backend says fallback_missing_entry.

Questions:

1. Is Secure MCP Tunnel currently available for personal Platform organizations / personal ChatGPT accounts?

2. Is a ChatGPT Workspace ID required to create a tunnel?

3. If yes, where can I find the correct workspace-... ID for a personal ChatGPT workspace?

4. Does fallback_missing_entry mean my organization needs to be allowlisted before Secure MCP Tunnel can be used?

5. What is the expected relationship between Platform organizations, Platform projects, ChatGPT workspaces, and Secure MCP Tunnel scope?

I’m not trying to report a billing issue. I’m trying to understand the correct Apps SDK / MCP tunnel setup for local resources access with ChatGPT connectors.

Thanks!

I can confirm the same issue.

Organization owner access confirmed.
Billing enabled.
Tunnel permissions assigned.
Tunnel creation UI is available.

Creating a tunnel fails with:

403: Tenant context missing and no allowlist is configured for the active organization.
(reason=fallback_missing_entry)

Personal organization.
Project exists.

Has anyone found a workaround?

Thanks for raising this issue!
I have pinged the team to take a look.

Same issue here. I have an active support case going, but I may shoot them a link to his as there’s been a lot of back and forth so far.
Case Number: 09309061

Hi, is there any update on this?

I will talk to the team to get a status update and circle back here.

I’m now able to create a tunnel, but every time I try and link it to our ChatGPT workspace I get the following error.
“We couldn’t automatically verify the association between these workspaces and organizations. Contact support”

I’ve noticed despite using the same email account for our ChatGPT business account, and platform.openai.com account that our Organization id’s don’t match.
I’m owner on both accounts and approve the login to both accounts via the ChatGPT push.

I’ve reached out to support to see about getting the accounts linked but I’m met with constant “There’s nothing we can do” with no advice on how to resolve the issue.

"Case Number: 09607131

Hi there,

Thank you for reaching out to OpenAI Support.

We understand your concern about the lack of visibility into why Secure MCP Tunnel verification failed, the absence of a documented checklist for the association requirements, and uncertainty around whether your ChatGPT Business workspace and Platform organization can be linked. We’re sorry for the inconvenience this has caused. Rest assured, we’re here to assist.

At this time, there is no customer-visible diagnostic tool, documented checklist of exact association criteria, or support-side mechanism to manually link a ChatGPT Business workspace with an OpenAI Platform (API) organization for Secure MCP Tunnel usage. If automatic verification between a specific workspace and organization pair is failing, there is currently no supported method to force or repair this association manually.

As things currently stand, this means that Secure MCP Tunnel is not usable between your ChatGPT Business workspace and your API organization if they cannot be automatically linked by the system."

Hi @SirHartley!

I heard that a fix has been rolled out that should allow you to connect the personal org and the personal workspace.

Has this resolved the issue for you as well?

If not, can you share your org ID and workspace ID?

Looks like my issue persists.

Despite having the same account for platform openai account and out ChatGPT Busniess work space (Account is owner on both).
I’m wondering if it has to do with not having the same org id for both accounts. I reached out to support, but they’ve made it seem like there is no way to link them.
I login to both accounts with the same owner level email account. I even have to approve the platform login with my ChatGPT app.

Thanks for raising this!
The team is looking into it.

Hi,

I think the tunnel creation issue has since been resolved.

I can now successfully:

• create a Secure MCP Tunnel
• run tunnel-client
• connect my local MCP server

However I’m now hitting a different issue.

ChatGPT Apps → Create App → Connection = Tunnel

always shows:

“No available tunnels”

even though the tunnel exists under Platform → Organization → Tunnels.

My account is:

• ChatGPT Plus
• Personal Platform Organization
• No ChatGPT Workspace

Has anyone with a personal Plus account managed to make an existing tunnel appear in the ChatGPT tunnel picker?

I have exactly the same issue, want to connect my chatgpt to a custom mcp so I can create test cases in our test management tool, but the list of tunnels is empty though the tunnel is created and running I have tried using ngrok for that, but its not that secure and proper auth is difficult to set up.

It wil not work unlike what they are stating as from what I can read you can only use it with a business account and a workspace. Albeit the connector works in a different way if you want to as described in the manual but not from ChatGPT app