# Install cloudflared Cloudflare Tunnel client (formerly Argo Tunnel). Version 2026.6.0 via Homebrew; verified 2026-06-09. ## Install ```sh sudo av install brew:cloudflared ``` ## Agent safety answer cloudflared manages tunnels, DNS-facing connectivity, and Cloudflare access paths. - **Credential access:** Reads tunnel credentials, Cloudflare tokens, and local tunnel config. - **Remote mutation:** Can create tunnels, route traffic, and update service exposure. - **Publish/artifact risk:** Can expose local or internal services to the network. - **Recommended control:** Gate tunnel creation, route changes, token use, and service exposure. - **Agent-use guidance:** Allow tunnel status checks; require approval before exposing endpoints or changing routes. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install cloudflared ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install cloudflared ``` Evidence: MacPorts ports tree: net/cloudflared/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add cloudflared ``` Evidence: Alpine Linux edge package indexes: cloudflared from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#cloudflared ``` Evidence: nixpkgs package indexes: pkgs/by-name/cl/cloudflared/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S cloudflared ``` Evidence: Arch Linux sync databases: cloudflared from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install cloudflared ``` Evidence: openSUSE Tumbleweed package metadata: cloudflared from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install cloudflared ``` Evidence: Chocolatey community package catalog: cloudflared from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','chocolatey-misc-helpers.extension' - Scoop (92%): ```sh scoop install main/cloudflared ``` Evidence: Scoop official bucket manifest trees: bucket/cloudflared.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Cloudflare.cloudflared -e ``` Evidence: Windows Package Manager source index: Cloudflare.cloudflared from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:cloudflared - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 2026.6.0 - **Source summary:** Cloudflare Tunnel client (formerly Argo Tunnel) - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-09T13:40:23Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - cloudflared (cli) - cloudflared (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 2026.6.0 - Package-manager updated: 2026-06-09 - Local data status: ok - Upstream repository: https://github.com/cloudflare/cloudflared - Upstream latest detected: 2026.6.0 (current) ## Sicherheitshinweise formula declares a Homebrew service. infrastructure mutation or orchestration signal. - **Protected-tool coverage:** Plain Text Cloudflare Tunnel Credentials - **Geiger risk:** orange / medium - formula declares a Homebrew service - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cloudflared - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - cloudflared: normalized package name match | nixpkgs package indexes: pkgs/by-name/cl/cloudflared/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - cloudflared - 2026.5.0-r0: normalized package name match | Alpine Linux edge package indexes: cloudflared from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Cloudflare Tunnel client | https://github.com/cloudflare/cloudflared - apk - cloudflared-doc - 2026.5.0-r0: normalized package name match | Alpine Linux edge package indexes: cloudflared-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Cloudflare Tunnel client (documentation) | https://github.com/cloudflare/cloudflared - apk - cloudflared-openrc - 2026.5.0-r0: normalized package name match | Alpine Linux edge package indexes: cloudflared-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Cloudflare Tunnel client (OpenRC init scripts) | https://github.com/cloudflare/cloudflared - pacman - cloudflared - 2026.5.1-1: normalized package name match | Arch Linux sync databases: cloudflared from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Command-line client for Cloudflare Tunnel | https://github.com/cloudflare/cloudflared - zypper - cloudflared - 2026.2.0-1.4: normalized package name match | openSUSE Tumbleweed package metadata: cloudflared from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Cloudflare Tunnel client | https://github.com/cloudflare/cloudflared - MacPorts - cloudflared: normalized package name match | MacPorts ports tree: net/cloudflared/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - cloudflared: normalized package name match | Chocolatey community package catalog: cloudflared from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','chocolatey-misc-helpers.extension' - Scoop - main/cloudflared: normalized package name match | Scoop official bucket manifest trees: bucket/cloudflared.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - Cloudflare.cloudflared: normalized package name match | Windows Package Manager source index: Cloudflare.cloudflared from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Cloud CLI packages](https://www.automicvault.com/de/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://www.automicvault.com/de/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/de/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/de/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://www.automicvault.com/de/pkg/brew/go/) - Build dependency declared by Homebrew. - [proxytunnel](https://www.automicvault.com/de/pkg/brew/proxytunnel/) - Shares av.db curated category or tags: cli, networking, proxy, tunnel, tunneling. - [zoro](https://www.automicvault.com/de/pkg/brew/zoro/) - Shares av.db curated category or tags: cli, networking, proxy, tunnel, tunneling. - [sixtunnel](https://www.automicvault.com/de/pkg/brew/sixtunnel/) - Shares av.db curated category or tags: cli, networking, proxy, tunnel, tunneling. - [autossh](https://www.automicvault.com/de/pkg/brew/autossh/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [wstunnel](https://www.automicvault.com/de/pkg/brew/wstunnel/) - Shares av.db curated category or tags: cli, networking, proxy, tunneling. - [boring](https://www.automicvault.com/de/pkg/brew/boring/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [udp2raw-multiplatform](https://www.automicvault.com/de/pkg/brew/udp2raw-multiplatform/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [rospo](https://www.automicvault.com/de/pkg/brew/rospo/) - Shares av.db curated category or tags: cli, networking, proxy, tunneling. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer