Start here
Getting started
Create a Zipper account, add a hostname, point DNS, and put The Crown in front of origin — the simple Cloudflare alternative path.
1. Create an account
Open https://tinyzipper.com/auth/signup. No credit card. The Free plan provisions every named service on your first zone.
Complete country, mobile, and authenticator 2FA. That is required before the control plane opens.
2. Add a hostname
Dashboard → Zones → Add zone. Enter www.example.com. A database trigger raises every named service automatically.
Free includes 2 zones. Starter includes 8 — still one bill, not $20 per domain.
3. Copy DNS into The Herald
The Herald stores zone records and answers DNS-JSON at GET /dns-query. Zipper does not speak UDP 53.
Turn “Proxy through The Crown” on for web hostnames you will send via /gate/{hostname} or an A record to tinyzipper.com.
4. Point the hostname at tinyzipper.com (optional)
At your registrar, set A/AAAA for the web hostname to 191.215.40.237. Do not change nameservers expecting Zipper to be authoritative on port 53.
Until that A record is live, exercise WAF and cache at https://tinyzipper.com/gate/{hostname}/.
5. Turn on the gate
Portcullis: create a widget, embed api.js, Siteverify on the server. Keep: leave OWASP on. Palace Guard: leave the live cordon on. Moat: leave always-on on.
Optional: Edge Functions for rewrites, Site Hosting for git deploys, The Cellar for sealed Postgres, The Armory for a mobile/web backend (twenty Docker racks), Origin Connect if the origin has no public IP.
6. Call the API
Dashboard → Settings → mint a token. Send Authorization: Bearer tz_live_… Writes also accept Idempotency-Key.
GET /api/v1/whoami returns role, scopes, and the plan entitlements snapshot.
Who am I
curl -sS https://tinyzipper.com/api/v1/whoami \ -H "Authorization: Bearer tz_live_YOUR_TOKEN"
Next: Quickstart in ten minutes · All docs · Create a free account