Share the link,
not the destination.
Runnel links expire on schedule, revoke in seconds, and keep their destinations to themselves: we store ciphertext we cannot decrypt.
runnel.link/s/K3kiAUzn2fovMy8tBvCoxA#r.eHW87bGAYIvx9tZjvcF67cCGgzhPeO1e
The id: the only part of the link our servers keep.
The key: it rides in the #fragment, and we never store it.
How it works
- 1
Encrypted in your browser
Your browser encrypts the destination. We check it against threat lists at creation, discard the plaintext, and store only the ciphertext.
- 2
Share one opaque link
Recipients see an id and nothing else. Share it as a URL or a QR code. You choose how it opens: redirect, URL masking, or full proxy.
- 3
Stay in control
Set an expiry and a use limit when you mint. Revoke any time: a revoked link is a dead 404 within seconds, even one printed as a QR code.
Blind by design
What we store
- Ciphertext of each destination
- Timestamps, use counts, bytes served
- Your account email
What we never store
- Where your links point: we keep only the ciphertext
- The keys: they ride in the fragment, never in our database
- Your unlock key: decryption happens on your device, not on our servers
The exception is two brief moments. At creation, we check the destination against malware and phishing blocklists. At each open of a proxied link, we fetch it for the visitor. The address passes through memory, never into storage. Details in the Terms.
Three ways to deliver
Redirect
Works with every destination: SPAs, logins, downloads. The destination is revealed on open. Revoking stops new clicks.
URL masking
Hides the destination from the URL bar. Does not work if the destination disallows framing.
Proxy
The recipient never sees the destination. Revoking cuts all access.
Mint links from your AI
Runnel speaks MCP. Ask your assistant to mint, list, and revoke links from a chat tab, an IDE, or a script.
In claude.ai and ChatGPT
Add https://app.runnel.link/mcp as a connector and approve access once. No install, no API key.
In Claude Code, Cursor, and IDEs
Run the local server with npx -y @runnel-link/cli mcp. It pairs with your machine, so links decrypt locally.
In your terminal
runnel mint https://example.com --ttl 7d. The CLI ships with a Claude Code skill and JSON output for scripts.
Your AI reads destinations only if you allow it: remote apps ask at consent, local machines pair once. Every grant is revocable under Connected apps. Setup guides →
Start free
20 links a month, instant revocation, passkeys, and the API. No card required.