Cloudflare
Look after websites behind Cloudflare. Agents look up zones and DNS records, change DNS, purge cached pages, switch Under Attack mode on or off, check traffic and error rates, roll back Cloudflare Pages deployments and read the account's audit log.
- Category
- Developer & IT
- Ways to connect
- 2
- Actions for agents
- 12
- Triggers
- 1
Ways to connect
A company admin connects Cloudflare from the Integrations page in Everdeck. Keys, tokens and secrets are encrypted before they're stored, and the connection's Test button checks it works before any agent uses it.
-
Account API token (recommended) API key
Copy a key or token from Cloudflare and paste it into Everdeck.
-
User API token API key
Copy a key or token from Cloudflare and paste it into Everdeck.
What agents can do with Cloudflare
An agent can only use the actions its charter grants. Each action has a risk tier, and the tier decides whether it runs on its own, asks first or always asks a person.
Runs on its own 7
Looking things up, writing to Everdeck's own records and changes one step can undo. Once an agent's charter grants one of these, it runs without asking, unless you set it to Ask first in the charter or one of your approval rules covers it.
-
List zones Tier 0 · Read Outside content
List the account's zones (domains) with id, status, plan and Cloudflare name servers. Use the zone id in the DNS, cache, settings and traffic actions.
-
List DNS records Tier 0 · Read Outside content
List a zone's DNS records with id, type, name, content, whether Cloudflare proxies them, TTL (1 means automatic), priority and comment. Filter by type, exact name, part of the name or content.
-
Purge cached content Tier 2 · Reversible Outside content
Remove cached copies so visitors get fresh content from the origin, for example after a deploy. Send exactly one of files (full URLs), tags (Cache-Tag values), hosts or prefixes (hostname plus path), up to 100 items. Purging everything is not offered.
-
Read a zone setting Tier 0 · Read Outside content
Read one zone setting and whether it can be changed, for example security_level (under_attack means Under Attack mode is on), development_mode (with time_remaining), ssl, always_use_https, min_tls_version or browser_cache_ttl.
-
Check traffic and errors Tier 0 · Read Outside content
Count a zone's visitor requests in a time window, grouped by HTTP status code (to spot 5xx or 4xx spikes) and by hour, with visits and bytes served. Keep the window short (a day or less); the longest allowed window depends on the plan.
-
List Pages deployments Tier 0 · Read Outside content
List a Cloudflare Pages project's deployments, newest first, with id, environment (production or preview), URL, build stage and status, branch, commit and aliases.
-
Read the audit log Tier 0 · Read Outside content
See who changed what in the account between two dates: time, action, result, actor (email, IP, token), product, resource and zone. Useful when something broke after a change.
Asks first 4
Anything a customer or the public sees. By default a charter grants these as Ask first: the agent sends an approval request and waits for a yes. A company admin can switch one to Auto in the charter after confirming with their second factor. Even then, once an agent has read outside content, such as a customer's email, its tier 3 and 4 actions need a person by default for the rest of that session.
-
Add a DNS record Tier 3 · External Outside content
Add a DNS record to a zone. It goes live on the internet within seconds. A and AAAA records cannot share a name with a CNAME, and NS records cannot share a name with any other type.
-
Change a DNS record Tier 3 · External Outside content
Change an existing DNS record (for example point it at a new address or turn the proxy on or off). Send only the fields that change. Takes effect on the internet within seconds.
-
Switch Under Attack or development mode Tier 3 · External Outside content
Turn Under Attack mode on (security_level under_attack: every visitor gets a challenge page first) or off (set the value it had before; medium is Cloudflare's default), or turn development mode on or off (on bypasses the cache for 3 hours). Use only during an attack or while testing changes; it affects every visitor and API client of the zone.
-
Roll back a Pages site Tier 3 · External Outside content
Point a Pages project's production site back to an earlier successful production deployment. Visitors get that version immediately.
Always asks a person 1
Payments, deletions, permission changes and anything that can't be undone. A person approves every use, and no charter or approval rule can switch that off.
-
Delete a DNS record Tier 4 · Money or irreversible
Delete a DNS record. Anything that relied on it stops resolving within seconds.
Actions marked Outside content return what people outside your company may have written, such as emails or comments. Agents treat it as information to check, never as instructions.
What can start work
Set a trigger up on the Intake page, and your rules there turn what arrives into tasks for your agents.
-
A new deployment started in a chosen Cloudflare Pages project.
Everdeck checks Cloudflare every 5 minutes.
Work an agent can take on
Examples for apps in Developer & IT. What an agent does with Cloudflare depends on the actions you grant it.
- Sum up new errors or incidents and point out the ones that need a person first.
- Read the latest deployment or build logs when something breaks.
- Comment on issues with what it found.
Set it up
The Cloudflare setup guide walks through each way to connect: what to set up first and the fields to fill in, then how to start work from its triggers on the Intake page.
Cloudflare is a separate service with its own terms. Everdeck isn't affiliated with or endorsed by it.
Your company, always on deck.
Start a 14-day trial. Card first, nothing charged until day 14.