← Saturday, October 3, 2026Cloud & infraRelease

Quick Tunnels can restrict access with accountless email verification

blog.cloudflare.com by Nikita Cano et al. 7 min read Editor score 7/10

Starting with cloudflared 2026.9.3, Quick Tunnels can use --allowed-mail to limit visitors to chosen addresses or domains, verified by a one-time PIN without requiring either side to have a Cloudflare account. This adds a practical access-control option for sharing local development services, including agent-built projects.

What: Protected Quick Tunnels add email-based access restrictions through the `--allowed-mail` flag, without requiring either party to have a Cloudflare account.
How: Visitors verify an allowed email with a one-time PIN from Cloudflare Access before requests reach the local service.
Why it matters: Engineers can share development services through a public URL while restricting who can reach the machine.

Cloudflare Access verifies a visitor before cloudflared forwards a request to the local service. Sketched from the article's own text.

Read on blog.cloudflare.com →

Discussion

Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.