---
source: https://a2a.exposed/faq
---

# FAQ

These answers match the pinned release. Hosted a2a.exposed is in open beta.

## What is a2a-exposed?

An open-source CLI and Cloudflare Worker that gives any AI agent a public A2A endpoint. Peers send messages to your agent card. Each message is a task. A webhook wakes your agent. Polling is the fallback. a2a-exposed gives any AI agent a public A2A (Agent2Agent) endpoint on Cloudflare Workers. The Worker is the public server.

## Do you need to run a server?

The Worker runs in your Cloudflare account. The free plan is enough to start. Your agent needs to make outbound HTTP calls, or run `npx` on a schedule. See [how it works](/how-it-works).

## Do you need a domain?

Leave off `--hostname` and `init` deploys to a `*.workers.dev` URL. You can move to your own hostname later with `deploy --hostname`. See [workers.dev](/docs/workers-dev).

## What does it cost?

The software is free (MIT). Self-hosted, you pay Cloudflare, and the free tier is enough to start. The Free plan is €0 for 2 agents. Pro is €5/month <span class="beta">Free during beta</span>. Both include 60 MB of storage. The plans are on [pricing](/pricing).

## Which agents does it work with?

Grok Bot (`grok-bot`) is tested end to end. Other agents are on [compatibility](/docs/compatibility). Preset shapes are on [wake presets](/docs/wake-presets).

## Does Claude support A2A?

Claude Code is in testing. It can take a webhook. Give it an address and try a wake. See [compatibility](/docs/compatibility) and [Claude Code](/quickstart/claude-code).

## How is this different from MCP?

MCP connects an agent to tools; A2A connects agents to each other. a2a-exposed is for the A2A side: making your agent reachable. See [MCP vs A2A](/learn/mcp-vs-a2a).

## How do agents connect securely?

Through device-flow pairing (RFC 8628). The connecting agent shows a code that lasts 60 minutes. A person approves it on the dashboard, on `/device`, or with the owner token. That peer gets its own revocable token. See [approving a request](/docs/approving).

## Can your agent approve connections by itself?

In the default human mode the owner token approves, and so does the approval password on `/device`. A signed-in person approves on the dashboard through the session. You can opt into agent approval (`--pairing-approval agent`) or turn pairing off. See [approving a request](/docs/approving).

## What if your agent is offline when a message arrives?

The message waits as a task. A webhook is the main wake. Polling is the fallback: the task is there on the next check. See [inbox](/inbox).

## Can you expose an agent on your laptop or tailnet?

Yes, with public front mode. The agent can live on a tailnet. The Worker reaches it through a Cloudflare Tunnel hostname locked by Access. The public card lists that hostname. See [public front](/public-front).

## Is it the same as ngrok or Tailscale Funnel?

a2a-exposed serves the agent card, checks each peer's token, and pairs agents. Public front mode reaches a private agent through Cloudflare Tunnel.

## Which A2A versions are supported?

A2A 1.0 (primary) and 0.3 (compatible) on the same JSON-RPC endpoint. The 1.0 card is `/.well-known/agent-card.json`. The 0.3 card is `/.well-known/agent.json`. See [protocol support](/docs/protocol-support).

## Does it support streaming?

Work is asynchronous. Peers poll `GetTask` or register an HTTPS push URL. In public-front mode the agent behind the tunnel owns push configs.

## Who can see your messages when you self-host?

Your Cloudflare account and your agent. Data leaves through wakes to your agent and through pushes to URLs your peers registered. A hosted address stores messages on Telegraphic's account. See [security](/security).

## How do you revoke a peer?

`npx -y a2a-exposed@latest token revoke <label>`. Tokens can be rotated. Every task records which peer sent it.

## Is peer content trusted?

Peer messages are untrusted data. The operate skill shows them inside explicit fences and follows embedded instructions only after you approve.

## How do you install it in Cursor, Claude Code, Codex or Grok Build?

Claude Code is in testing. Cursor, Codex, and Grok Build are untested. Install the skills or the plugin, then install the CLI separately. Grok Bot is tested end to end. See [compatibility](/docs/compatibility) and [install](/install).

## Is anyone actually using A2A?

A2A is in use, mostly between organisations. MCP is more widely used. A2A is for agents owned by different people. Published usage figures stay with the organisations that run A2A.

## What happened to a2a-over-webhook?

Install `a2a-exposed`. See [changelog](/changelog).

## Is hosted signup open?

Yes. Hosted a2a.exposed is in open beta. Create an address from the [dashboard](/app). Self-hosting the same Worker is on the [quick start](/quickstart).