Cloudflare Api Key
for LuumenAI
Read Cloudflare zones, DNS, and rulesets. Change them as approved steps.
Connect Cloudflare and Luumen can read your zones, DNS records, lockdown rules, rulesets, and cache settings while you work a ticket or an incident. When a record needs to change, it drafts the exact call, shows you the record it will write, and waits for your approval before sending it. Authentication uses an API key.
The Cloudflare Api Key toolbox
25 tools: 8 read, 17 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet Cloudflare IP AddressesRetrieve IP addresses used on the Cloudflare or JD Cloud network.
- ReadGet Entrypoint Ruleset VersionRetrieves a specific historical version of an entry point ruleset from Cloudflare.
- ReadGet Lockdown RuleGet a Zone Lockdown rule.
- ReadGet Regional Tiered CacheGet the regional tiered cache setting for a zone.
- ReadGet RulesetFetch the latest version of a ruleset by ID.
- ReadGet Zone DetailsGet details for a specific zone.
- ReadList DNS RecordsList, search, sort, and filter DNS records for a Cloudflare zone.
- ReadList Cloudflare ZonesList, search, sort, and filter Cloudflare zones.
- WriteCreate DNS RecordCreate a new DNS record in a Cloudflare zone. Approval by default
- WriteCreate Zone Lockdown RuleCreate a Zone Lockdown rule. Approval by default
- WriteCreate Rule in RulesetAdd a rule to an existing ruleset. Approval by default
- WriteCreate RulesetCreates a new Cloudflare ruleset at account or zone scope. Approval by default
- WriteDelete DNS RecordDelete a DNS record. Approval by default
- WriteDelete DNSSECDelete DNSSEC records for a zone. Approval by default
- WriteDelete Rule from RulesetDelete a specific rule from a ruleset. Approval by default
- WriteDelete RulesetDelete all versions of a ruleset. Approval by default
- WriteDelete a zoneDelete an existing zone. Approval by default
- WriteOverwrite DNS RecordCompletely overwrite a DNS record. Approval by default
- WriteRerun Zone Activation CheckTriggers a new activation check for a zone with 'pending' status. Approval by default
- WriteUpdate DNSSEC StatusUpdate DNSSEC configuration for a zone. Approval by default
- WriteUpdate Lockdown RuleUpdate a zone lockdown rule. Approval by default
- WriteUpdate Rule in RulesetUpdate a specific rule in a ruleset. Approval by default
- WriteUpdate RulesetUpdate a Cloudflare ruleset, creating a new version. Approval by default
- WriteUpdate Cloudflare ZoneEdit a Cloudflare zone. Approval by default
- WriteUpload File to S3Upload arbitrary file content to temporary storage. Approval by default
One prompt, start to finish
What a governed Cloudflare Api Key run looks like inside Luumen.
Questions
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — create dns record, create zone lockdown rule, create rule in ruleset, create ruleset, and more — is shown as a plan and requires approval by default, including the 5 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to Cloudflare Api Key — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
OktaAccess and posture from Okta, with approval on every change.
Microsoft Entra IDAccess and posture from Microsoft Entra ID, with approval on every change.
Auth0Access and posture from Auth0, with approval on every change.Ping IdentityAccess and posture from Ping Identity, with approval on every change.Put Cloudflare Api Key to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.