:5173Site in development
Show Vite, Next.js, or ASP.NET work to a client without deploying.
Tunnels for HTTP and TCP
Give any local service a secure address with one command
A site on your laptop, a webhook, a database, or a computer at home. The client opens an outbound connection, so you need no public IP, no VPN, and no router port forwarding.
How it works
Pick what to open. The client connects to the server, registers the tunnel, and prints the address right away.
$ https://app.team.devtunnels.ruThe certificate is issued automatically. Open it on your phone or send it to a client.
Your workspace and free plan are ready immediately.
Choose what the key may do: publish sites, publish TCP, or connect.
Use a command or a config file from the dashboard. It reconnects on its own.
Use cases
Any service listening on an HTTP or TCP port. The dashboard has ready templates for common jobs.
:5173Show Vite, Next.js, or ASP.NET work to a client without deploying.
:8080Receive payment and bot callbacks right on your machine.
:5432Postgres, MySQL, Redis, and MongoDB without publishing a port.
:22A shell on a server behind NAT with no direct route.
:3389Reach your office computer over RDP from home.
:8123Home Assistant and device panels from your phone on the road.
:11434Ollama, ComfyUI, and Jupyter without exposing the machine.
:8096Jellyfin, Plex, and network storage for your people.
Traffic route
For TCP tunnels the clients try to connect to each other directly. When that is impossible, traffic goes through the DevProxy server on port 443, which is open on almost any network.
backup path through the server
Both clients connect outward. No router or firewall changes.
Corporate networks and mobile data let 443 through.
If the link drops, the client restores it without you.
Security
A VPN opens the whole network. DevProxy publishes one port and lets you control who connects to it.
RDP, SSH, and database ports are invisible on the internet.
Issue a key for each device. Keys are stored hashed and revoked with a single click.
Only devices you grant can join a private tunnel.
Sign-ins, keys, tunnels, and grants are recorded.
Dashboard
The dashboard suggests the next step and shows what is happening right now.
Roadmap
Besides tunnels, the client syncs folders and moves text and files between your own devices, shares files with anyone by link, and can be controlled from AI apps through a local API and MCP.
A public HTTPS address for a local site, API, or webhook.
Private TCP through the server or directly. A public TCP port on the Team plan.
A second computer reaches a private tunnel through its own local port.
Two folders on different computers, both ways. Only the device where a file first appeared can delete it, and concurrent edits are both kept.
Text and files up to 1 GB between your own devices: with a button, by drag and drop, or automatically when you turn it on.
Anyone you send the link to opens a file or folder in the browser, no install needed: view or download, an expiry date, a one-time link, and a password.
AI apps on the same computer see tunnels and free slots, and start or stop them within the key permissions.
Issued in the dashboard for one device with separate permissions. View and diagnostics only by default.
Tunnels, keys, grants, and the log in the dashboard; request history, clipboard, and sync status in the client panel.
Folder sync works on Windows and Linux today. Clipboard and files already work on macOS.
Drag and drop sends individual files today.
The API and MCP serve apps on the same computer today.
Each active sync or sharing channel takes one slot of the plan tunnel limit; the connected second computer takes none.
Pricing
Upgrade when you need more tunnels, more traffic, or a public TCP port.
Free
Private TCP only
Start freeRUB 149per month
Private TCP only
ChooseRUB 999per month
Public TCP port
ChooseQuestions
No. The client connects to the server with an outbound connection, so it works behind NAT, on mobile data, and in corporate networks.
A VPN joins a device to the whole network. DevProxy opens one selected service, and access is granted and revoked per device.
HTTP requests pass through the server so the service gets an HTTPS address. TCP is relayed as a byte stream without parsing, and a direct connection bypasses the server.
The address stops answering. Once the computer is back, the client reconnects and the address stays the same.
Yes. The client opens a local API, and MCP connects AI apps on the same computer to it. An automation key from the dashboard sets what is allowed.
No. During sync and file transfer the content moves between your own devices, and with a file link it goes from your computer straight to the recipient. The server only relays it. Conflict and received copies stay on your computers for 30 days.
Windows, Linux, and macOS. The client ships as a single executable; an installer is optional.
Sign up, create a key, run one command. No credit card required.