Cloudflare Pages and Access official publishing documentationCopy wiki link

The preserved sources document four distinct pieces of a private-publication decision:

• Pages Direct Upload accepts a prebuilt directory through Wrangler or dashboard drag and drop.
• Pages custom headers can attach X-Robots-Tag: noindex to matching responses.
• Cloudflare Access places an authentication layer in front of a public hostname.
• Google’s robots-tag specification explains that noindex controls search presentation, while the crawler must be able to retrieve the directive.

Together they support two different publication modes. A public Pages site with noindex is intentionally obscure but readable by anyone who obtains its URL. A Pages site behind Access is actually access-controlled. The documentation does not justify treating noindex, an unlinked hostname, or robots.txt as authorization.