Skip to content

Integration

Cloudflare integrationWhat it reads

Connect a Cloudflare zone with a read-only token. MarshalCloud shows its records, plan, and yesterday's traffic and blocked threats on the map. Scaled plan.

Which plan includes itWhat it can read

Scaled (quoted). It is part of the environment-building plan, not the multi-cloud one.

What does MarshalCloud do with Cloudflare?

  • The zone itself: its plan, its DNS records, and the day's requests and blocked threats from Cloudflare's own analytics.

Read-only is the default everywhere. A fix is drafted, priced and explained, and then waits for a person to approve it.

What MarshalCloud never does in Cloudflare

  • The API token is stored encrypted and never shown back. The zone id is not a secret and is shown.
  • Nothing in Cloudflare is created, changed or deleted by the map. An approved build run may write the DNS records a new environment needs, using this same token, which is why the connection sits on the Scaled plan.

What it does not cover

  • No cost figure: a zone's plan is a flat monthly charge nobody itemises, so MarshalCloud does not turn it into a spend line. A token that cannot read analytics leaves traffic as unknown, not zero.

How do you connect Cloudflare?

  1. 01Create an API token in Cloudflare with read access to the zone and its analytics (add DNS edit only if builds will use this zone).
  2. 02Paste the token and the zone id (from the zone's overview page) into the Cloudflare connection in MarshalCloud. It is verified before it is saved.
  3. 03The zone appears on the map with its records and the day's traffic.

Questions about the Cloudflare integration

01Does MarshalCloud change my DNS?

Not on its own. The map only reads the zone. If you build an environment with MarshalCloud and point it at this zone, the approved build run writes the DNS records that environment needs, with this token. A token with read access only is enough for the map.

02Which plan includes Cloudflare?

Scaled. Cloudflare sits with the environment-building features, so it is not in the Growth multi-cloud gate that covers Google Cloud, Linode and Hetzner.

The DNS zone on the map

Connect Cloudflare read-only

A DNS zone on the map with its records and yesterday's traffic. Read-only, no cost figure, Scaled plan.

Start freeSee which plan