WARP Excluder

A lightweight native macOS menu bar utility for managing Cloudflare WARP domain exclusions.

WARP Excluder is an independent project and is not affiliated with or endorsed by Cloudflare, Inc.

Screenshots

Menu bar popover and options	Popup size and language settings

Features

• Add and remove Cloudflare WARP domain exclusions.
• Automatically convert zone names such as by, ru, or pro into wildcard rules such as *.by, *.ru, or *.pro.
• Search the current exclusion list.
• Restart WARP manually from the menu bar.
• Run built-in warp-cli diagnostics.
• Choose between compact, standard, and large popup sizes.
• Switch between English and Russian.
• Persist application preferences between launches.
• Use a compact native macOS interface without a permanent Dock icon.

Requirements

• macOS 14 or later.
• Cloudflare WARP installed on the Mac.
• The WARP CLI available at:

/usr/local/bin/warp-cli

Verify the path with:

which warp-cli

Installation

1. Open the repository's Releases page.
2. Download the latest WARP-Excluder.dmg.
3. Open the disk image.
4. Drag WARP Excluder.app into Applications.
5. Launch the application. Its shield icon will appear in the macOS menu bar.

If Gatekeeper blocks an unsigned test build, Control-click the application, select Open, and confirm the prompt. Public releases should be signed with a Developer ID certificate and notarized by Apple.

Usage

Exclude a specific domain

Enter a complete domain name:

onliner.by

Exclude an entire domain zone

Enter a short zone name:

by

WARP Excluder automatically converts it to:

*.by

The equivalent WARP CLI command is:

warp-cli tunnel host add '*.by'

Domain-based WARP exclusions depend on DNS resolution. The macOS DNS cache, browser Secure DNS, or DNS over HTTPS may affect when a rule takes effect.

Build from source

1. Clone the repository:

git clone https://github.com/YOUR_USERNAME/warp-excluder-macos.git
cd warp-excluder-macos

2. Open the Xcode project:

open WarpExcluder.xcodeproj

3. Select the WarpExcluder target.
4. Configure code signing for your Apple Developer team or use local signing.
5. Build and run the project on My Mac.

To create a release build, use:

Product → Archive → Distribute App

How it works

WARP Excluder launches the installed warp-cli executable directly through Process and uses the following commands:

warp-cli tunnel host list
warp-cli tunnel host add <host>
warp-cli tunnel host remove <host>
warp-cli disconnect
warp-cli connect

Commands run as the current user. The application does not request an administrator password and does not modify system files.

Project structure

warp-excluder-macos/
├── .github/workflows/build.yml
├── docs/images/
│   ├── main-window.png
│   └── settings-window.png
├── CHANGELOG.md
├── LICENSE
├── README.md
├── RELEASE_CHECKLIST.md
├── WarpExcluder.xcodeproj/
└── WarpExcluder/
    ├── AppSettings.swift
    ├── AboutWindow.swift
    ├── SettingsWindow.swift
    ├── ContentView.swift
    ├── WarpExcluderApp.swift
    └── Assets.xcassets/

Limitations

• Cloudflare WARP must be installed separately.
• The expected CLI path is /usr/local/bin/warp-cli.
• Wildcard rules are intended for the desktop WARP client on macOS.
• The application manages host exclusions created through the CLI.
• DNS caching and Secure DNS settings may affect domain-based exclusions.

Release artifacts

Attach release binaries to a GitHub Release instead of committing them to the repository. A release should normally include:

WARP-Excluder.dmg
WARP-Excluder.dmg.sha256

Generate a SHA-256 checksum with:

shasum -a 256 WARP-Excluder.dmg > WARP-Excluder.dmg.sha256

Author

Denis Vasilyevich

License

Distributed under the MIT License.

Trademark notice

Cloudflare and WARP are trademarks of Cloudflare, Inc. This project is an independent utility and is not maintained or supported by Cloudflare.