TunnelTime

Expose local services without exposing the rest of your machine.

TunnelTime gives you HTTP and TCP tunnels with lightweight agent auth, an admin portal, and fast revocation controls for public endpoints.

Open Admin Portal Read Docs Build Config Privacy Policy Terms of Service

Self-serve tunnels

Create HTTP and TCP tunnels from the CLI, reuse saved agent tokens, and inspect live status without touching server-side config files.

Operator controls

Use the admin portal to issue credentials, close public endpoints, and revoke compromised agents with audit visibility and session protections.

macOS agent

Run one command in Terminal to fetch the installer script, download the native Mac binary, and walk through token, tunnel, subdomain, and access prompts.

Installer Script Download macOS Apple Silicon Download macOS Intel 
sh <(curl -fsSL https://tunneltime.dev/install.sh)
  • The installer selects the right Mac binary from uname -s and uname -m.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: sh <(curl -fsSL https://tunneltime.dev/install.sh) <agent-token> 3000 http

Linux agent

Run one command to fetch the installer script, download the native Linux binary, and walk through token, tunnel, subdomain, and access prompts.

Installer Script Download Linux AMD64 Download Linux ARM64 
sh <(curl -fsSL https://tunneltime.dev/install.sh)
  • The installer asks for your token, whether to start a tunnel now, HTTP or TCP, local port, optional subdomain, and access mode.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: sh <(curl -fsSL https://tunneltime.dev/install.sh) <agent-token> 3000 http

Classic Agent

Use the classic agent if you need the previous public HTTP/TCP-only client while upgrading machines gradually.

Classic Linux AMD64 Classic Linux ARM64

Windows agent

Run this in PowerShell to fetch the installer script, download the Windows CLI, and go through the same guided setup flow.

Installer Script Download Windows Binary 
powershell -ExecutionPolicy Bypass -Command "& { iwr https://tunneltime.dev/install.ps1 -OutFile install.ps1; .\install.ps1 }"
  • The installer prompts for token, tunnel type, local port, optional subdomain, and security mode.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: .\install.ps1 -Token '<agent-token>' -Port 3000 -Mode http

Classic Agent

Use the classic agent if you need the previous public HTTP/TCP-only client while upgrading machines gradually.

Classic Windows