Simple ground rules for the public beta.
Updated 6 September 2026
The service
PDF Access Cloud provides an account dashboard, a tunnel-management API and an outbound connector for local HTTP applications. It is an independent service and is not affiliated with Cloudflare. The beta is provided without a paid plan or a service-level guarantee.
Your responsibilities
Only expose applications and content you own or are authorised to share. You are responsible for authentication in your local app, your content and your credentials. Do not use the service for phishing, malware distribution, unlawful content, denial-of-service activity, credential theft or unauthorised access.
Public access
Tunnel addresses are public endpoints. Knowing an address can be enough to access the application behind it unless your application requires authentication. HTTPS encrypts traffic in transit; it does not make the endpoint private or provide end-to-end encryption through the relay.
Availability and limits
The beta currently allows up to 5 tunnels and 10 API keys per account. HTTP requests are limited to 2 MiB, responses to 4 MiB and duration to 30 seconds. WebSocket applications, arbitrary TCP/UDP and live response streaming are not supported. Capacity, rate limits and functionality may change as the beta develops. Do not rely on the beta for critical workloads.
Suspension and ending use
Connections or accounts may be restricted to address abuse, security incidents or capacity problems. You can end access immediately by stopping your connector, deleting your tunnels and revoking API keys. You can also delete your account from the dashboard. Nothing in these terms removes rights that cannot lawfully be excluded.