Error reference
These are stable tunnel/edge error codes. Use the specific fix below, then verify the affected part of the connection. Control API HTTP errors can instead return a plain message in an error field; they do not all use this code taxonomy.
Follow the diagnostic checklistERR_AUTH_REQUIREDAuthentication required
The edge received a bind without valid credentials.
Fix: Run /login inside the console, or set TRQSH_API_KEY / api_key in ~/.trqsh/trqsh.yml. Restart an existing daemon after changing startup credentials.
ERR_AUTH_INVALIDInvalid credentials
The API key or token was rejected.
Fix: Create a fresh key in the dashboard under API keys and update your config.
ERR_VERSION_UNSUPPORTEDAgent version unsupported
This edge no longer supports your agent's protocol version.
Fix: Use /update inside the console or reinstall through your original package manager. Use /down before relaunching the updated agent.
ERR_QUOTA_TUNNELSConcurrent tunnel limit reached
Plan limitYou've hit the number of simultaneous tunnels your plan allows.
Fix: Stop an unused tunnel, or upgrade for a higher concurrent limit.
Compare plansERR_QUOTA_BANDWIDTHBandwidth quota exceeded
Plan limitThe account's transfer allowance for the enforced usage window is used up.
Fix: Check the account usage window, wait for allowance to become available, or choose a plan with more bandwidth.
Compare plansERR_QUOTA_REQUESTSRequest quota exceeded
Plan limitThis month's request allowance is used up.
Fix: Check this deployment's request allowance and usage window, then wait or choose a higher limit.
Compare plansERR_SUBDOMAIN_TAKENSubdomain already taken
Another account has claimed that subdomain.
Fix: Pick a different subdomain, or omit it to get a random one.
ERR_SUBDOMAIN_FORBIDDENSubdomain not permitted
The requested name is not reserved by the account binding the tunnel, or reserved names are not permitted.
Fix: Use /subdomains reserve NAME or the dashboard's Domains page, then bind using the same account. Check reservation limits separately.
ERR_DOMAIN_UNVERIFIEDCustom domain not verified
The custom domain hasn't completed DNS verification.
Fix: Add the TXT and CNAME records shown in the dashboard, then re-verify.
ERR_PLAN_FORBIDSNot available on your plan
Plan limitThe feature you requested (for example UDP or a custom domain) isn't allowed by your effective plan.
Fix: Check the effective plan and its expiry, then use an allowed feature or upgrade. Protocol availability also depends on the edge deployment.
Compare plansERR_PROTO_UNSUPPORTEDUnsupported protocol
The tunnel protocol you asked for isn't available on this edge.
Fix: Use the documented HTTP, TCP or UDP workflow supported by your edge. Core HTTPS/TLS identifiers do not guarantee HTTPS upstream forwarding or SNI passthrough.
ERR_RATE_LIMITEDRate limited
Plan limitYou're opening connections or making requests too quickly.
Fix: Back off and retry; upgrade for a higher rate limit if you hit it often.
Compare plansERR_INTERNALInternal error
Something went wrong on the edge.
Fix: Retry shortly. If it persists, check status or contact support.
ERR_UPSTREAM_UNREACHABLELocal service unreachable
The edge reached your agent, but the agent couldn't connect to your local service.
Fix: Confirm your local server is running on the address you tunneled (e.g. localhost:3000).