---
type: "raw_signal"
id: "protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f"
slug: "protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f"
title: "Protected Quick Tunnels: simple accountless authentication for your next dev project"
description: "Cloudflare has added email-based access control to Quick Tunnels."
retrieval_nugget: "Cloudflare has added email-based access control to Quick Tunnels."
observed_at: "2026-10-02"
record_date: "2026-10-02"
date_kind: "observed_at"
why_it_matters: "Cloudflare has added email-based access control to Quick Tunnels. Its announcement says developers can use the `--allowed-mail` option in a `cloudflared` command to restrict access to listed email addresses or domains, with no Cloudflare account required on either side. The change adds an identity gate to a tool for exposing a local app, while the announcement excerpt does not specify implementati"
novelty: "notable"
verification_level: "source-linked"
signal_type: "release"
source_platform: "blog.cloudflare.com"
topics: []
entities: []
related_patterns: []
source_url: "https://blog.cloudflare.com/protected-quick-tunnels"
source_urls: ["https://blog.cloudflare.com/protected-quick-tunnels"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f/","markdown":"https://newruntime.com/signals/protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f.md","json":"https://newruntime.com/signals/protected-quick-tunnels-simple-accountless-authentication-for-your-13a94f.json"}
---

# Protected Quick Tunnels: simple accountless authentication for your next dev project

## Retrieval answer

Cloudflare has added email-based access control to Quick Tunnels.

Cloudflare has added email-based access control to Quick Tunnels. Its announcement says developers can use the `--allowed-mail` option in a `cloudflared` command to restrict access to listed email addresses or domains, with no Cloudflare account required on either side. The change adds an identity gate to a tool for exposing a local app, while the announcement excerpt does not specify implementation details or broader security guarantees.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)