diff --git a/workloads/mcp-gateway/kustomization.yaml b/workloads/mcp-gateway/kustomization.yaml
index 5b82c29..f467b92 100644
--- a/workloads/mcp-gateway/kustomization.yaml
+++ b/workloads/mcp-gateway/kustomization.yaml
@@ -7,5 +7,6 @@ resources:
   - kubernetes-mcpserver.yaml
   - remote-proxies.yaml
   - vmcp.yaml
+  - tunnel-binding.yaml
 generators:
   - ksops-mcp-gateway-secrets.yaml
diff --git a/workloads/mcp-gateway/tunnel-binding.yaml b/workloads/mcp-gateway/tunnel-binding.yaml
new file mode 100644
index 0000000..b9a6791
--- /dev/null
+++ b/workloads/mcp-gateway/tunnel-binding.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: networking.cfargotunnel.com/v1alpha1
+kind: TunnelBinding
+metadata:
+  name: mcp-gateway
+  namespace: mcp
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
+subjects:
+  - name: vmcp-gateway
+    spec:
+      fqdn: mcp.makeitwork.cloud
+      target: http://vmcp-gateway.mcp.svc:4483
+tunnelRef:
+  kind: ClusterTunnel
+  name: cluster-apps