Cloudflare Integration
Read zone traffic, security events, and DNS; purge cache and manage DNS records (with approval).
Capabilities
This integration enables workers to:
- List zones (domains) on the account
- Read zone traffic & security analytics (requests, bytes, threats, cached)
- List DNS records
- Purge cache (approval-gated)
- Create/update DNS records (approval-gated)
Setup
Follow these steps to connect Cloudflare:
- Create a Cloudflare API token (My Profile → API Tokens) with the needed read/edit permissions
- Navigate to Integrations and click 'Add Connection'
- Select Cloudflare and paste your API token
- Assign workers (e.g. Security Analyst, Operations Assistant) to use it
Official links
Security
- API tokens are encrypted at rest (AES-256-GCM)
- Use a scoped Cloudflare token (least privilege)
- Cache purge and DNS changes require human approval
Credential Storage
All integration credentials are encrypted at rest using AES-256-GCM encryption. OAuth tokens are automatically refreshed when needed.
Supported Roles
The following roles can use this integration by default: