--- title: An API for MoQ: provision your own isolated relays description: Cloudflare has launched a provisioning API for Media over QUIC (MoQ) that lets developers create isolated relay scopes with separate publisher and subscriber... canonical: https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: An API for MoQ: provision your own isolated relays | daily.dev og:description: Cloudflare has launched a provisioning API for Media over QUIC (MoQ) that lets developers create isolated relay scopes with separate publisher and subscriber... og:url: https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of og:image: https://api.daily.dev/og/posts/HUQSjE7oF.png og:image:alt: An API for MoQ: provision your own isolated relays og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # An API for MoQ: provision your own isolated relays **[Cloudflare](https://daily.dev/sources/cloudflare)** · 8 min read · 10 upvotes · 1 comments ## Summary Cloudflare has launched a provisioning API for Media over QUIC (MoQ) that lets developers create isolated relay scopes with separate publisher and subscriber credentials. Unlike the previous open preview which had no authentication, the new API issues JWT tokens scoped to publish, subscribe, or both operations, with optional expiration and revocation. Relays are not dedicated servers or containers — they are isolated scopes on Cloudflare's existing global anycast network, available instantly without region selection or capacity planning. Cloudflare also now supports MoQ Transport draft-14 and draft-16, the latter adding PUBLISH (pre-emptive track delivery before viewer requests) and SUBSCRIBE_NAMESPACE (subscribe to all tracks under a namespace). The API and dashboard are both supported, and the service is free during beta. Cloudflare is also contributing a CDN Provisioning Internet-Draft to the IETF to standardize the control plane model across relay providers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I create an isolated MoQ relay on Cloudflare with separate publisher and subscriber access? Send a single POST request to the Cloudflare MoQ relays API with just a name field, and Cloudflare returns a relay ID plus two default tokens: one that can publish and subscribe, and one that can only subscribe. Additional scoped tokens with expirations can be created via a separate tokens endpoint, letting broadcasters and viewers use different credentials on the same relay. _daily.dev surfaces API changes like this for teams shipping real-time video features._ ### What does draft-16 of the IETF MoQ Transport protocol add compared to earlier drafts? Draft-16 adds two features: PUBLISH, which lets a publisher start sending a track to a relay before any viewer subscribes, and SUBSCRIBE_NAMESPACE, which lets a subscriber request every track under a namespace at once, including tracks added later such as a new video rendition or audio track added mid-stream. Cloudflare's relays support both draft-14 and draft-16 with authentication. _Track evolving IETF drafts like MoQ transport on daily.dev before they hit production._ ### Why is an unauthenticated MoQ relay unsuitable for a production live streaming application? An unauthenticated relay cannot distinguish who is allowed to publish versus who can only subscribe, so a viewer's credentials could be used to hijack a publisher's tracks. For applications needing confidentiality or a clear publisher/subscriber split, such as a live auction site delivering bids in milliseconds, this makes an open relay network unsafe despite MoQ's low latency benefits. _daily.dev helps developers weigh production readiness tradeoffs before adopting new streaming protocols._ ## Community discussion Top comments from developers on daily.dev. **@pdfopsdev** · 0 upvotes > scoped tokens are the interesting part here imo. publish+subscribe vs subscribe-only by default means a viewer app can't accidentally publish garbage into the relay, that credential model matters more long term than the no-VM-to-size pitch. ## Similar posts on daily.dev - [On a Boat](https://daily.dev/posts/on-a-boat-xx5nwxhvz) · Hacker News · 0 upvotes · 0 comments - [Is everyone switching to MoQ from WebRTC?](https://daily.dev/posts/is-everyone-switching-to-moq-from-webrtc--ngzy9iowz) · WebRTC Hacks · 36 upvotes · 2 comments - [Protected Quick Tunnels: simple accountless authentication for your next dev project](https://daily.dev/posts/protected-quick-tunnels-simple-accountless-authentication-for-your-next-dev-project-1zufe0ysm) · Cloudflare · 0 upvotes · 0 comments - [Real-Time AI Translation over MoQ](https://daily.dev/posts/real-time-ai-translation-over-moq-qsydteobk) · Software Mansion · 0 upvotes · 0 comments - [Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure](https://daily.dev/posts/announcing-cloudflare-ohttp-gateway-expanding-access-to-cloudflare-s-privacy-preserving-infrastruc-llchhfrpe) · Cloudflare · 0 upvotes · 0 comments --- Tags: [#cloudflare](https://daily.dev/tags/cloudflare) [View this post on daily.dev](https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"An API for MoQ: provision your own isolated relays","url":"https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of"},"datePublished":"2026-07-31T13:01:34.384Z","dateModified":"2026-09-14T09:11:24.044Z","description":"Cloudflare has launched a provisioning API for Media over QUIC (MoQ) that lets developers create isolated relay scopes with separate publisher and subscriber...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5792ea0dbccd3f7f480fd37fd4d6a854?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5792ea0dbccd3f7f480fd37fd4d6a854?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cloudflare","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cloudflare","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/38522e1d11354cd6b7af66f9d4316735","url":"https://daily.dev/sources/cloudflare"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":10},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"cloudflare","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cloudflare","item":"https://daily.dev/sources/cloudflare"},{"@type":"ListItem","position":3,"name":"An API for MoQ: provision your own isolated relays"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of","comment":[{"@type":"Comment","text":"scoped tokens are the interesting part here imo. publish+subscribe vs subscribe-only by default means a viewer app can’t accidentally publish garbage into the relay, that credential model matters more long term than the no-VM-to-size pitch.","datePublished":"2026-08-01T18:09:39.547Z","url":"https://daily.dev/posts/HUQSjE7oF#c-mLmFUUMf2","author":{"@type":"Person","name":"PDFops","url":"https://daily.dev/pdfopsdev","image":"https://media.daily.dev/image/upload/s---8isRBKc--/f_auto/v1782922291/avatars/avatar_orjMeK8QKaaVZwGq7ScPz?_a=BAMAMicg0"}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/an-api-for-moq-provision-your-own-isolated-relays-huqsje7of#faq","mainEntity":[{"@type":"Question","name":"How do I create an isolated MoQ relay on Cloudflare with separate publisher and subscriber access?","acceptedAnswer":{"@type":"Answer","text":"Send a single POST request to the Cloudflare MoQ relays API with just a name field, and Cloudflare returns a relay ID plus two default tokens: one that can publish and subscribe, and one that can only subscribe. Additional scoped tokens with expirations can be created via a separate tokens endpoint, letting broadcasters and viewers use different credentials on the same relay. daily.dev surfaces API changes like this for teams shipping real-time video features."}},{"@type":"Question","name":"What does draft-16 of the IETF MoQ Transport protocol add compared to earlier drafts?","acceptedAnswer":{"@type":"Answer","text":"Draft-16 adds two features: PUBLISH, which lets a publisher start sending a track to a relay before any viewer subscribes, and SUBSCRIBE_NAMESPACE, which lets a subscriber request every track under a namespace at once, including tracks added later such as a new video rendition or audio track added mid-stream. Cloudflare's relays support both draft-14 and draft-16 with authentication. Track evolving IETF drafts like MoQ transport on daily.dev before they hit production."}},{"@type":"Question","name":"Why is an unauthenticated MoQ relay unsuitable for a production live streaming application?","acceptedAnswer":{"@type":"Answer","text":"An unauthenticated relay cannot distinguish who is allowed to publish versus who can only subscribe, so a viewer's credentials could be used to hijack a publisher's tracks. For applications needing confidentiality or a clear publisher/subscriber split, such as a live auction site delivering bids in milliseconds, this makes an open relay network unsafe despite MoQ's low latency benefits. daily.dev helps developers weigh production readiness tradeoffs before adopting new streaming protocols."}}]} ```