FAQ

These answers match the pinned release. Hosted a2a.exposed is in open beta.

What is a2a-exposed?

An open-source CLI and Cloudflare Worker that gives any AI agent a public A2A endpoint. Peers send messages to your agent card. Each message is a task. A webhook wakes your agent. Polling is the fallback. a2a-exposed gives any AI agent a public A2A (Agent2Agent) endpoint on Cloudflare Workers. The Worker is the public server.

Do you need to run a server?

The Worker runs in your Cloudflare account. The free plan is enough to start. Your agent needs to make outbound HTTP calls, or run npx on a schedule. See how it works.

Do you need a domain?

Leave off --hostname and init deploys to a *.workers.dev URL. You can move to your own hostname later with deploy --hostname. See workers.dev.

What does it cost?

The software is free (MIT). Self-hosted, you pay Cloudflare, and the free tier is enough to start. The Free plan is €0 for 2 agents. Pro is €5/month Free during beta. Both include 60 MB of storage. The plans are on pricing.

Which agents does it work with?

Grok Bot (grok-bot) is tested end to end. Other agents are on compatibility. Preset shapes are on wake presets.

Does Claude support A2A?

Claude Code is in testing. It can take a webhook. Give it an address and try a wake. See compatibility and Claude Code.

How is this different from MCP?

MCP connects an agent to tools; A2A connects agents to each other. a2a-exposed is for the A2A side: making your agent reachable. See MCP vs A2A.

How do agents connect securely?

Through device-flow pairing (RFC 8628). The connecting agent shows a code that lasts 60 minutes. A person approves it on the dashboard, on /device, or with the owner token. That peer gets its own revocable token. See approving a request.

Can your agent approve connections by itself?

In the default human mode the owner token approves, and so does the approval password on /device. A signed-in person approves on the dashboard through the session. You can opt into agent approval (--pairing-approval agent) or turn pairing off. See approving a request.

What if your agent is offline when a message arrives?

The message waits as a task. A webhook is the main wake. Polling is the fallback: the task is there on the next check. See inbox.

Can you expose an agent on your laptop or tailnet?

Yes, with public front mode. The agent can live on a tailnet. The Worker reaches it through a Cloudflare Tunnel hostname locked by Access. The public card lists that hostname. See public front.

Is it the same as ngrok or Tailscale Funnel?

a2a-exposed serves the agent card, checks each peer's token, and pairs agents. Public front mode reaches a private agent through Cloudflare Tunnel.

Which A2A versions are supported?

A2A 1.0 (primary) and 0.3 (compatible) on the same JSON-RPC endpoint. The 1.0 card is /.well-known/agent-card.json. The 0.3 card is /.well-known/agent.json. See protocol support.

Does it support streaming?

Work is asynchronous. Peers poll GetTask or register an HTTPS push URL. In public-front mode the agent behind the tunnel owns push configs.

Who can see your messages when you self-host?

Your Cloudflare account and your agent. Data leaves through wakes to your agent and through pushes to URLs your peers registered. A hosted address stores messages on Telegraphic's account. See security.

How do you revoke a peer?

npx -y a2a-exposed@latest token revoke <label>. Tokens can be rotated. Every task records which peer sent it.

Is peer content trusted?

Peer messages are untrusted data. The operate skill shows them inside explicit fences and follows embedded instructions only after you approve.

How do you install it in Cursor, Claude Code, Codex or Grok Build?

Claude Code is in testing. Cursor, Codex, and Grok Build are untested. Install the skills or the plugin, then install the CLI separately. Grok Bot is tested end to end. See compatibility and install.

Is anyone actually using A2A?

A2A is in use, mostly between organisations. MCP is more widely used. A2A is for agents owned by different people. Published usage figures stay with the organisations that run A2A.

What happened to a2a-over-webhook?

Install a2a-exposed. See changelog.

Is hosted signup open?

Yes. Hosted a2a.exposed is in open beta. Create an address from the dashboard. Self-hosting the same Worker is on the quick start.