{
  "slug": "cf-access-tcp-proxies-connections-through-access-c40b81aead5d",
  "title": "cf access tcp proxies connections through Access",
  "tools": [
    "cf"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-09-27T20:00:20.957Z",
  "announced_at": "2026-09-27T20:00:20.957Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When proxying TCP, SSH, RDP, or SMB through Access, run `cf access tcp`. Service-token secrets are passed to `cloudflared` through its environment, not its arguments.",
    "gotchas": [
      "Version: 1.0.0-beta.2",
      "Supported connection types stated are TCP, SSH, RDP, and SMB.",
      "Service-token secrets are passed to cloudflared through its environment rather than its arguments."
    ]
  },
  "why_it_matters": "Proxy a TCP, SSH, RDP, or SMB connection through Access.",
  "sources": [
    "https://github.com/cloudflare/cf/blob/main/packages/cli/CHANGELOG.md#100-beta2"
  ],
  "rank": 0.9703,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v1+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "recover-20261008",
    "verdict_id": "recover-20261008:recover-20261008-eceeda192225b411-4:gate",
    "evidence_hash": "d04c0fb39e2077cf20dad96236fe6f221b1cea3b7fa62ec1af7ecaca08c56073"
  },
  "review": {
    "draft_hash": "bb66efa1a720b72af77c52db00d1dfa3be636e17523ff2b9bc6203afe1f2cd8c",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "recover-20261008:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.97 >= 0.9; 2 needed) and Jev gave 0.69 (>= 0.6 needed)."
  }
}