Answer-first summary

Where should I start in InstaTunnel docs?

Follow this order: Install CLI, authenticate, run first tunnel, then move to MCP/webhooks/referrals based on your use case. Use CLI Flags and Troubleshooting for day-to-day operations.

Last reviewed: March 5, 2026
Compatibility: Core docs align with CLI v1 default and MCP --transport v2 for streaming clients.

Quick command

instatunnel auth login -e you@example.com && instatunnel 3000 --subdomain docs-demo

Common failures and quick fixes

  • Auth not persisted-Run instatunnel auth set-key it_your_api_key to store your key locally.
  • Webhook 401 signature errors-Use provider-specific secret verification guides in /docs/webhooks before production tests.

Evidence and trust

Use these references when evaluating compatibility, reliability, and security posture.

Release cadence

CLI and docs release notes are updated continuously, with version-specific compatibility notes.

View release notes

Security controls

Review policy enforcement, auth layers, and operational safeguards in the security whitepaper.

Open security whitepaper

Reliability runbooks

Troubleshooting guides cover common failures, recovery steps, and CLI compatibility baselines.

Read troubleshooting guides

Custom Domains

Use a domain you control with an InstaTunnel tunnel. Custom domains are available on Pro and Business plans and must be verified through DNS before traffic can be routed.

Use a subdomain when possible

We recommend a hostname such as app.example.com or hooks.example.com. A normal root domain such as example.com cannot use a CNAME with many DNS providers; it requires ALIAS, ANAME, or CNAME flattening support.

Set up a custom domain

  1. 1. Create the tunnel from the dashboard

    Open the dashboard, create a tunnel, and enter the hostname you own in the Custom Domain field. The dashboard then shows a unique TXT value for that tunnel.

  2. 2. Add the TXT ownership record

    Copy the exact record name and value from the dashboard. For app.example.com, the record name will look like _instatunnel-verification.app.example.com and the value starts with itv_.

    Do not reuse a TXT value from another tunnel. The value is unique to the pending setup request.

  3. 3. Add the CNAME record

    Type: CNAME
    Name: your custom hostname
    Target: tunnel.instatunnel.my

    DNS provider forms differ: for app.example.com, the Name field may be app instead of the complete hostname. With Cloudflare, set this record to DNS-only while the domain is connected. Do not point it at the VPS IP address.

  4. 4. Verify the domain in the dashboard

    Return to the dashboard and select Verify Domain. The TXT record must be visible in public DNS first. If the check reports that the record was not found, wait a few minutes and retry.

    InstaTunnel does not route the hostname or start SSL setup before this verification succeeds.

  5. 5. Connect your local application

    instatunnel connect 3000 --domain app.example.com

    After verification, SSL setup begins automatically. Keep the CNAME in place and allow a few minutes for DNS and certificate setup before testing HTTPS.

Requirements and troubleshooting

The hostname must be yours

We require a matching DNS TXT record before associating a custom domain with a tunnel. Domains and subdomains under instatunnel.my or instatunnel.com cannot be used as custom domains.

TXT record not found

Confirm that the record name is not duplicated by your DNS provider, the value matches exactly, and the record has propagated publicly. Some providers append your domain automatically when you enter a relative host name.

The root domain cannot be a CNAME

Use a subdomain such as app.example.com, or use your DNS provider's ALIAS, ANAME, or CNAME flattening feature. Do not replace this with an A record to the InstaTunnel VPS IP.

Need a quick path?

See plans, then jump into a guided start whenever you are ready.

For MCP endpoints on Pro/Business, use: instatunnel 8787 --mcp.