Skip to main content

Cloudflare

Credentials​

Mantle uses a read-only Cloudflare account API token. Mantle stores the token encrypted at rest. The account ID must be 32 lowercase hexadecimal characters.

  1. Create the integration. Enter a display name and the Cloudflare account ID.
  2. Go to https://dash.cloudflare.com/profile/api-tokens and create an account API token with Account Settings Read, Zone Read, and DNS Read.
  3. Paste the token.

The integration starts in Draft. After you save the token, the status is Unverified. After the checks pass, the status is Connected. The backend then starts the first sync.

Backend checks​

We regularly check that Cloudflare accepts the token:

  • cloudflare.token_permissions: call GET /accounts/{account_id}/tokens/verify

The token also needs these permissions. We do not check them one by one:

Account Settings Read
Zone Read
DNS Read