agent safety

Agent safety answer

cloudflared manages tunnels, DNS-facing connectivity, and Cloudflare access paths.

Credential access

Reads tunnel credentials, Cloudflare tokens, and local tunnel config.

Remote mutation

Can create tunnels, route traffic, and update service exposure.

Publish/artifact risk

Can expose local or internal services to the network.

Recommended control

Gate tunnel creation, route changes, token use, and service exposure.

Agent-use guidance

Allow tunnel status checks; require approval before exposing endpoints or changing routes.

安装

使用 Automic Vault 安装

Automic Vault

下载 AV

sudo av install brew:cloudflared

macOS

Homebrewverified · 100%

brew install cloudflared

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install cloudflared

MacPorts ports tree · net/cloudflared/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%

sudo apk add cloudflared

Alpine Linux edge package indexes · cloudflared · source: dl-cdn.alpinelinux.org

Nixverified · 92%

nix profile install nixpkgs#cloudflared

nixpkgs package indexes · pkgs/by-name/cl/cloudflared/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%

sudo pacman -S cloudflared

Arch Linux sync databases · cloudflared · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%

sudo zypper install cloudflared

openSUSE Tumbleweed package metadata · cloudflared · source: download.opensuse.org

Windows

Chocolateyverified · 92%

choco install cloudflared

Chocolatey community package catalog · cloudflared · source: community.chocolatey.org

Scoopverified · 92%

scoop install main/cloudflared

Scoop official bucket manifest trees · bucket/cloudflared.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id Cloudflare.cloudflared -e

Windows Package Manager source index · Cloudflare.cloudflared · source: cdn.winget.microsoft.com

软件包管理器来源

https://formulae.brew.sh/formula/cloudflared

平台说明

没有特定于此软件包的平台说明。

概览

软件包摘要

Cloudflare Tunnel client (formerly Argo Tunnel)

主页

https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/

命令和别名

cloudflared

受保护工具覆盖

Plain Text Cloudflare Tunnel Credentials

cloudflared stores tunnel certificates and tunnel credential JSON files under its user configuration directory. Those files can authorize a tunnel without another interactive login. Automic Vault detects plaintext certificate private keys and tunnel credential JSON files, but does not migrate them because tunnel state is mutable service/deployment configuration.

Risk classifier

orange risk · medium confidence · infrastructure

Why

formula declares a Homebrew service
infrastructure mutation or orchestration signal

Signals

metadata:service
text:cloud

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Formula metadata declares a service or daemon block.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

本地 README 摘录

cloudflared Protected-tool coverage

Detect-only coverage for Cloudflare Tunnel credentials.

cloudflared tunnel state can include certificate private keys and tunnel credential JSON files. These are service credentials, so this protected-tool coverage reports bounded user-level exposures without changing tunnel configuration.

来源: local coverage notes

覆盖来源

来源摘录

Caveats

This radioisotope is detect-only.
We detect ~/.cloudflared and XDG cloudflared config directories.
System service configuration is not scanned.

可执行文件

已安装的可执行文件

命令	类型	暴露范围	备注
`cloudflared`	cli	global executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-06-10

管理器版本2026.6.0

管理器更新时间2026-06-09

本地数据ok

上游current

检测到的最新版本2026.6.0

https://github.com/cloudflare/cloudflared

okNo freshness warnings were generated.

安装元数据

软件包元数据

Package key	brew:cloudflared
Version	2026.6.0
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/cloudflared
Homepage	https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/
Repository	https://github.com/cloudflare/cloudflared
Upstream docs	https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel
License	Apache-2.0
Source archive	https://github.com/cloudflare/cloudflared/archive/refs/tags/2026.6.0.tar.gz
Last updated	2026-06-09T13:40:23Z
Pulse	updated
Build dependencies	go
Bottle	available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	cloudflared
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

cloudflared

nix profile install nixpkgs#cloudflared

normalized package name match
Matched by: Cloudflared

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cl/cloudflared/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

cloudflared 2026.5.0-r0

Cloudflare Tunnel client

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
1 dependencies
1 provides
normalized package name match
Matched by: Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

cloudflared-doc 2026.5.0-r0

Cloudflare Tunnel client (documentation)

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared-doc

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
normalized package name match
Matched by: Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

cloudflared-openrc 2026.5.0-r0

Cloudflare Tunnel client (OpenRC init scripts)

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared-openrc

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
normalized package name match
Matched by: Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

pacman95%

cloudflared 2026.5.1-1

Command-line client for Cloudflare Tunnel

https://github.com/cloudflare/cloudflared

sudo pacman -S cloudflared

License: Apache-2.0
Architecture: x86_64
1 dependencies
normalized package name match
Matched by: Cloudflared

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cloudflared from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

cloudflared 2026.2.0-1.4

Cloudflare Tunnel client

https://github.com/cloudflare/cloudflared

sudo zypper install cloudflared

License: Apache-2.0
Category: Productivity/Networking/System
Architecture: x86_64
Source Package: cloudflared
1 provides
normalized package name match
Matched by: Cloudflared

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cloudflared from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

MacPorts95%

cloudflared

sudo port install cloudflared

normalized package name match
Matched by: Cloudflared

MacPorts ports tree · api.github.com · MacPorts ports tree: net/cloudflared/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Chocolatey95%

cloudflared

choco install cloudflared

normalized package name match
Matched by: Cloudflared

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: cloudflared from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','chocolatey-misc-helpers.extension'

Scoop95%

main/cloudflared

scoop install main/cloudflared

normalized package name match
Matched by: Cloudflared

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/cloudflared.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Cloudflare.cloudflared

winget install --id Cloudflare.cloudflared -e

normalized package name match
Matched by: Cloudflared

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Cloudflare.cloudflared from https://cdn.winget.microsoft.com/cache/source.msix

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
external package-manager database matches
local coverage README
package relationship graph
package version freshness
package-page enrichment
secret-handling manifest

安装 cloudflared

Agent safety answer

Credential access

Remote mutation

Publish/artifact risk

Recommended control

Agent-use guidance

使用 Automic Vault 安装

macOS

Linux

Windows

软件包管理器来源

平台说明

软件包摘要

主页

命令和别名

Plain Text Cloudflare Tunnel Credentials

Risk classifier

Why

Signals

Install behavior

cloudflared Protected-tool coverage

覆盖来源

Caveats

已安装的可执行文件

版本和新鲜度

软件包元数据

Source database details

Other package-manager records

内部软件包链接

主题 hub

相关工具

相同工作流

Agent security guides

由仓库数据生成

使用的来源