SkillFoxx

bunflared CLI

A CLI that shares a local app on a temporary Cloudflare link, with an MCP server giving agents visitor chat and request logs.

  • 56 ★ on the repository
  • Last commit
  • MIT
CLI

Broad access

Why this level

  • A public link opens your dev server to anyone holding it, and without a password only the random name protects it.
  • Through MCP the agent sees visitor pages and their errors and chats with them.
All reasons and checks

mirkobozzetto/bunflaredAuthor:mirkobozzetto

Install

Manual install

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mirkobozzetto/bunflared/releases/latest/download/bunflared-installer.sh | sh

The README installer for macOS and Linux. Windows has a PowerShell script, and with Rust use `cargo install bunflared`.

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • A public link opens your dev server to anyone holding it, and without a password only the random name protects it.
  • Through MCP the agent sees visitor pages and their errors and chats with them.

This is third-party code. Review the repository files before installing.

What it does

`bunflared 5173 3000` puts a local app on a temporary `https://<words>.trycloudflare.com` link through a Cloudflare quick tunnel. No account or deploy is needed: send the link to a client, close the terminal and access disappears. With no arguments `bunf` finds the project apps that are running and lets you pick whether to share publicly or only on this computer. Several ports live behind one link: the first is served at `/`, the others at `/_port/<port>`. The built-in dashboard lets you chat with visitors, see their pointer and notes on page elements, and inspect and replay requests. `bunflared mcp` starts an MCP server: the agent opens shares, reads messages and JavaScript errors, takes page screenshots and reloads the page after a fix.

Who it is for. Frontend developers who show a client a local build and want the agent to see feedback and page errors itself.

Good fit when

  • A client opens the link on a phone and leaves a note on the pay button, and the agent gets the selector and file.
  • Stripe, GitHub or Slack webhooks target a temporary address and the request is replayed after a fix.
  • A frontend and its API are shared together under one link.
  • A page is fixed with an agent: it reloads the tab and sends back a screenshot of the element.

Not a fit when

  • A permanent address and deploy are needed: the link lives while the terminal is open.
  • The app holds private data and a password cannot be set.
  • Server-Sent Events support is needed: Cloudflare quick tunnels do not carry them.

Example request

Open my app on port 5173 on a public link with a password, wait for the client notes and fix whatever they point at.

Limitations

Without a password anyone with the link reaches the app, and only the random name protects it. The `--password` flag asks visitors for a password. Cloudflare quick tunnels carry up to 200 requests in flight and refuse to start while `~/.cloudflared/config.yaml` exists; `--local` mode is unaffected. Cloudflare hands out a limited number of new links in a short time. The inspector keeps the first 32 KiB of each body for the last 200 requests. The author tested by hand on macOS, and Linux and Windows builds compile in CI. Claude Code channels need the `--dangerously-load-development-channels` flag.

How to disable. Stop a share with `bunflared down <id>`, remove MCP with `claude mcp remove bunflared` and take back the agent notes with `bunflared agents --remove`.

FAQ

How do I install bunflared?

Run the installer from the README: `curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mirkobozzetto/bunflared/releases/latest/download/bunflared-installer.sh | sh`. Rust is not needed beforehand, and the installer pulls `cloudflared` if missing. `cargo install bunflared` also works.

How do I connect MCP to Claude Code?

Run `claude mcp add bunflared -- bunflared mcp` for a project, or add the `-s user` flag to connect for all projects.

Does the agent see a visitor page without consent?

No. On a public link the visitor first sees a prompt with allow buttons, and page errors reach the agent only after consent. On your own computer no question is asked.

How do I protect a link with a password?

Run `bunf 5173 --password`: a password is generated, or set your own with `--password=secret`. Without a password a `curl` request gets a 401 response.

Can I use a skill instead of MCP?

Yes, `npx skills add mirkobozzetto/bunflared -g` installs `skills/bunflared/SKILL.md` into Claude Code, Codex, Cursor and other agents.

Discussion

No questions or reviews yet.

CLI tools

Cloudflare MCP servers

Cloudflare MCP Server

Official

A set of remote Cloudflare MCP servers: documentation, Workers, logs, Radar, browser, DNS and other account services

MCP serverBroad access4.5K

Your machine's terminal, windows and desktop in a browser, plus an MCP server for agents to read and type into other sessions

MCP serverBroad access304
Official

An MCP server for rustunnel tunnels: the agent opens a local port at a public HTTPS, TCP or UDP address

MCP serverBroad access662
Official

Official Cloudflare MCP server: the agent drives the whole Cloudflare API by searching the spec and running code

MCP serverBroad access1.1K

An MCP server giving ChatGPT and agents a terminal, files, Playwright and remote machines inside an isolated workspace.

MCP serverBroad access106

A local agent runtime and MCP gateway with 298 tools: files, Git, processes, Chrome browser, Windows and Office

MCP serverBroad access209

README in short

The tool is built in Rust and extends a tunnel with a visitor dashboard, a request inspector and an MCP server. `bunflared agents` writes a short note into the global rules of detected agents so any session knows the command.

README badge

Report a problem