TunnelTime
Secure ingress, on demand

Local work.Worldwide reach.

Turn any local HTTP or TCP service into a controlled endpoint in seconds—without opening ports, changing firewall rules, or exposing the rest of your machine.

Start tunneling Build a private config
Relay network operational · HTTP, TCP & private forwarding
Built for real work

One compact agent. Every path from local to live.

3connection modes: HTTP, TCP, and private relay
1saved token across all your active machines
0router or firewall changes required
Control the opening

Fast to share. Hard to misuse.

Simple enough for a preview link, deliberate enough for sensitive services.

01

Go from localhost to live

Create HTTP and TCP tunnels from the CLI, reuse saved agent tokens, and inspect live status without touching server-side config files.

02

Choose who gets through

Keep endpoints public, restrict them to an allowlist, or dynamically lock access to the first trusted client.

03

Stay in control

Use the admin portal to issue credentials, close public endpoints, and revoke compromised agents with audit visibility and session protections.

Open Admin Portal

One command.
Every platform.

Native agents, guided setup, and published checksums for every supported platform.

macOS

macOS agent

Run one command in Terminal to fetch the installer script, download the native Mac binary, and walk through token, tunnel, subdomain, and access prompts.

Installer Script Download macOS Apple Silicon Download macOS Intel 
sh <(curl -fsSL https://tunneltime.dev/install.sh)
  • The installer selects the right Mac binary from uname -s and uname -m.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: sh <(curl -fsSL https://tunneltime.dev/install.sh) <agent-token> 3000 http
Linux

Linux agent

Run one command to fetch the installer script, download the native Linux binary, and walk through token, tunnel, subdomain, and access prompts.

Installer Script Download Linux AMD64 Download Linux ARM64 
sh <(curl -fsSL https://tunneltime.dev/install.sh)
  • The installer asks for your token, whether to start a tunnel now, HTTP or TCP, local port, optional subdomain, and access mode.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: sh <(curl -fsSL https://tunneltime.dev/install.sh) <agent-token> 3000 http
Windows

Windows agent

Run this in PowerShell to fetch the installer script, download the Windows CLI, and go through the same guided setup flow.

Installer Script Download Windows Binary 
powershell -ExecutionPolicy Bypass -Command "& { iwr https://tunneltime.dev/install.ps1 -OutFile install.ps1; .\install.ps1 }"
  • The installer prompts for token, tunnel type, local port, optional subdomain, and security mode.
  • Verify binaries with the published SHA-256 checksums.
  • Compatibility mode still works: .\install.ps1 -Token '<agent-token>' -Port 3000 -Mode http