Support

A Mac with macOS 14 Sonoma or later (Apple silicon or Intel), a Cloudflare Zero Trust team with Access applications, and a Cloudflare login that can approve read access to the account that owns that team.

Enter your Zero Trust team name (just the name, not a URL). AppKey opens Cloudflare's sign-in page in your browser. Sign in, approve read-only access, then return to AppKey. It checks that the account owns your team, then automatically imports supported apps into your private library on this Mac. Follow the full setup guide.

AppKey asks for four read-only permissions: your user details, your account settings, your Access organization and your Access applications. It can't change anything in your Cloudflare account. Everything it reads stays on your Mac. See the Privacy Policy for details.

That's your own Mac. After you approve access, Cloudflare sends your browser back to AppKey at a local address that only this Mac can reach. If sign-in reports that it couldn't start, another app may be using the same port. Wait a moment and try again.

AppKey imports supported Access app records with a safe HTTPS launch address and respects the app’s launcher-visibility setting. Apps hidden from the App Launcher, wildcard domains, and app types that don't open in a browser are left out. After changing an app in Cloudflare, choose Refresh catalog in AppKey.

For your security, AppKey keeps only a short-lived Cloudflare token and doesn't store a long-lived refresh token. When it expires, choose Connect Cloudflare Access and approve access again. Your starred apps and collections stay put.

That's expected. AppKey opens apps in your default browser, and Cloudflare Access and the app itself decide whether you need to sign in. If you're already signed in to Access in that browser, it usually goes straight through.

Choose Disconnect in Settings → Connections for the selected workspace. This clears its catalog, removes its saved Keychain token and asks Cloudflare to revoke the authorization. AppKey reports if it cannot finish. To remove your local data, disconnect each connected workspace first, then quit and delete AppKey and remove ~/Library/Containers/app.appkey.macos. Deleting that folder removes saved preferences and images, not Keychain items. Contact support if a saved authorization could not be removed.

No. AppKey is an independent Mac app made by RYSNAS. It works alongside Cloudflare Access and doesn't replace or change your access policies.

AppKey is available on the Mac App Store. It's a one-time purchase: $12.99 in the U.S., with local pricing set by the App Store elsewhere. To hear about new versions, join the email list.