Your AI coding agent needs a public URL for the preview it just built. Most setup guides tell you to paste your API token into the agent's environment. That token can open unlimited tunnels, never expires, and could be exposed if the agent leaks it.
Source: [Dev.to](https://dev.to/gokulnh/giving-ai-coding-agents-a-public-url-the-master-key-delegation-pattern-2jj3)