diff --git a/docs/api-env-variables.md b/docs/api-env-variables.md
index 1da6e7af..d44e1cab 100644
--- a/docs/api-env-variables.md
+++ b/docs/api-env-variables.md
@@ -34,6 +34,8 @@ this document is not final and will expand over time. feel free to improve it!
 | RATELIMIT_MAX            | `20`    | `30`          |
 | SESSION_RATELIMIT_WINDOW | `60`    | `60`          |
 | SESSION_RATELIMIT        | `10`    | `10`          |
+| TUNNEL_RATELIMIT_WINDOW  | `60`    | `60`          |
+| TUNNEL_RATELIMIT         | `40`    | `10`          |
 
 [*view details*](#limits)
 
@@ -170,6 +172,16 @@ amount of session requests to be allowed within the time window of `SESSION_RATE
 
 the value is a number.
 
+### TUNNEL_RATELIMIT_WINDOW
+rate limit time window for tunnel (proxy/stream) requests, in **seconds**.
+
+the value is a number.
+
+### TUNNEL_RATELIMIT
+amount of tunnel requests to be allowed within the time window of `TUNNEL_RATELIMIT_WINDOW`.
+
+the value is a number.
+
 ## security
 [*jump to the table*](#security-vars)