Quick Tunnel for development
RunOnMine generates a rotating 256-bit secret URL path and launches a verified cloudflared binary. The discovered trycloudflare.com hostname stays in private runtime state rather than durable configuration.
Cloudflare + MCP
Reach a local RunOnMine machine through Cloudflare — without public MCP bind.
RunOnMine supports two Cloudflare connection modes: a temporary Quick Tunnel for development and a Named Tunnel where RunOnMine owns the OAuth 2.1 authorization flow.
Named Tunnel with OAuth 2.1
For the durable Cloudflare mode, Cloudflare carries HTTPS while the RunOnMine agent owns protected-resource metadata, dynamic client registration, authorization code flow, PKCE, local consent, token rotation and revocation.
Owner identity
The named OAuth connector authorizes the configured owner by immutable positive GitHub numeric user ID. The GitHub login is display metadata, not the authority itself.
Local safety still applies
Cloudflare connectivity does not relax RunOnMine policy. Remote requests remain subject to resource rules, local approvals and the remote safety ceiling.