{"slug": "cloudflare-zero-trust", "name": "Cloudflare Zero Trust", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.759, "rising": 0.35, "first": "2026-02-20", "latest": "2026-09-04", "why": "I protect the admin interface with Cloudflare Zero Trust, using email-based authentication", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 1, 0, 0, 0, 0, 1, 0, 1, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I protect the admin interface with Cloudflare Zero Trust, using email-based authentication", "icon": true, "domain": null, "github_repo": null, "official_url": "https://www.cloudflare.com/zero-trust/", "pricing": "", "aliases": ["Cloudflare Zero Trust"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 793012705, "item_id": 49563294, "url": "https://news.ycombinator.com/item?id=49563294", "by": "throwup238", "date": "2026-09-04", "stance": "recommend", "quote": "Cloudflare Tunnels + Zero Trust + Github SSO means securing them is rather easy", "excerpt": "I use MCP for two types of things: ones where I need to give access to the memory of the process like an MCP server to inspect a Qt gui, and ones where I need to give authenticated access to my data to ChatGPT/Claude web/mobile apps. For these uses CLIs would be too cumbersome in use or auth. For the latter, Cloudflare Tunnels + Zero Trust + Github SSO means securing them is rather easy and with the recent cf cli the", "context": "", "use_case": "securing MCP servers", "switched_from": "", "story": "Ask HN: Who is using MCP in production?"}, {"id": 785532548, "item_id": 49095784, "url": "https://news.ycombinator.com/item?id=49095784", "by": "mintflow", "date": "2026-07-29", "stance": "recommend", "quote": "I protect the admin interface with Cloudflare Zero Trust, using email-based authentication", "excerpt": "Great idea. Recently, I\u2019ve decided to get back into blogging. It\u2019s surprisingly easy these days. I already have a domain on Cloudflare, and I had Codex build a simple blogging system for me. I write everything in Markdown, the site is hosted on Cloudflare, comments are stored in Cloudflare D1, and all articles live in the repository as Markdown files. GitHub Actions takes care of publishing automatically and also per", "context": "", "use_case": "protect admin interface", "switched_from": "", "story": "Substack writers, you need a website"}, {"id": 753440480, "item_id": 47090030, "url": "https://news.ycombinator.com/item?id=47090030", "by": "arush15june", "date": "2026-02-20", "stance": "recommend", "quote": "I'll switch in Cloudflare Zero Trust for Okta", "excerpt": "I'll switch in Cloudflare Zero Trust for Okta simply for the fact that Cloudflare Access and Tunnels + An identity provider (we use M365) give you so much value (and it's free upto 50 users). It is even better if you are already running DNS on Cloudflare, you can securely deploy access-controlled apps on the internet without too much of a hassle and management. And with the recent addition for Infrastructure for SSH ", "context": "", "use_case": "access-controlled apps and SSH", "switched_from": "Okta", "story": "Almost Every infrastructure decision I endorse or regret after 4 years"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["securing mcp servers", "protect admin interface", "access-controlled apps and ssh"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49548600", "title": "Ask HN: Who is using MCP in production?", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49086788", "title": "Substack writers, you need a website", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47043345", "title": "Almost Every infrastructure decision I endorse or regret after 4 years", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {"recommend": 1}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {}, "2026-09": {"recommend": 1}, "2026-10": {}}, "quotes": [{"id": 793012705, "item_id": 49563294, "url": "https://news.ycombinator.com/item?id=49563294", "by": "throwup238", "date": "2026-09-04", "stance": "recommend", "quote": "Cloudflare Tunnels + Zero Trust + Github SSO means securing them is rather easy", "excerpt": "I use MCP for two types of things: ones where I need to give access to the memory of the process like an MCP server to inspect a Qt gui, and ones where I need to give authenticated access to my data to ChatGPT/Claude web/mobile apps. For these uses CLIs would be too cumbersome in use or auth. For the latter, Cloudflare Tunnels + Zero Trust + Github SSO means securing them is rather easy and with the recent cf cli the", "context": "", "use_case": "securing MCP servers", "switched_from": "", "story": "Ask HN: Who is using MCP in production?"}, {"id": 785532548, "item_id": 49095784, "url": "https://news.ycombinator.com/item?id=49095784", "by": "mintflow", "date": "2026-07-29", "stance": "recommend", "quote": "I protect the admin interface with Cloudflare Zero Trust, using email-based authentication", "excerpt": "Great idea. Recently, I\u2019ve decided to get back into blogging. It\u2019s surprisingly easy these days. I already have a domain on Cloudflare, and I had Codex build a simple blogging system for me. I write everything in Markdown, the site is hosted on Cloudflare, comments are stored in Cloudflare D1, and all articles live in the repository as Markdown files. GitHub Actions takes care of publishing automatically and also per", "context": "", "use_case": "protect admin interface", "switched_from": "", "story": "Substack writers, you need a website"}, {"id": 753440480, "item_id": 47090030, "url": "https://news.ycombinator.com/item?id=47090030", "by": "arush15june", "date": "2026-02-20", "stance": "recommend", "quote": "I'll switch in Cloudflare Zero Trust for Okta", "excerpt": "I'll switch in Cloudflare Zero Trust for Okta simply for the fact that Cloudflare Access and Tunnels + An identity provider (we use M365) give you so much value (and it's free upto 50 users). It is even better if you are already running DNS on Cloudflare, you can securely deploy access-controlled apps on the internet without too much of a hassle and management. And with the recent addition for Infrastructure for SSH ", "context": "", "use_case": "access-controlled apps and SSH", "switched_from": "Okta", "story": "Almost Every infrastructure decision I endorse or regret after 4 years"}]}