The Problem

Installed cloudflare-warp-bin from AUR but couldn’t figure out how to connect it to a Zero Trust organization (Teams account). It was stuck as a free consumer account.

The Setup

1. Install and enable the service:

# If using Arch/AUR
paru -S cloudflare-warp-bin

sudo systemctl enable --now warp-svc

2. Delete the existing free registration:

warp-cli registration delete

3. Register with your Zero Trust team:

warp-cli --accept-tos registration new <TEAM_NAME>

Replace <TEAM_NAME> with your Cloudflare Zero Trust org name — the subdomain before .cloudflareaccess.com. For example, if your org is naknak, run:

warp-cli --accept-tos registration new blah

4. Authenticate in the browser:

This will print a URL and (hopefully) open it in your browser:

A browser window should open at the following URL:
https://blhabkah.cloudflareaccess.com/warp

Log in with your identity provider (Google, Okta, etc.) to complete enrollment.

5. Connect:

warp-cli connect

6. Verify:

warp-cli status
warp-cli registration show

Should show Registration: Connected and your team account type.

Troubleshooting

• Browser doesn’t open? Manually visit the URL printed in the terminal.
• warp-cli commands fail? Make sure warp-svc is running: systemctl status warp-svc
• Already registered as Free? Delete first with warp-cli registration delete, then re-register with your team name.
• Permission denied? Some commands like tunnel endpoint require sudo for Zero Trust users.

---

Both fixes tested on CachyOS (Arch Linux) with PipeWire 1.6.4, WirePlumber 0.5.14, and WARP client 2026.3.846.