Cloudflare

Overview

Use Cloudflare credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	cloudflare
Category	Developer Tools
Credential Type	Bearer Token

Step 1: Get Credentials

Log in to the Cloudflare Dashboard

Log in to the Cloudflare Dashboard at dash.cloudflare.com.

Go to My Profile → API Tokens

Go to My Profile → API Tokens at dash.cloudflare.com/profile/api-tokens.

Create a token

Click ‘Create Token’ and select a template or create custom.

Configure permissions

Configure permissions and click ‘Create Token’.

Copy the generated API token

Copy the generated API token (it won’t be shown again).

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Cloudflare

Go to Managed Secrets > Add Provider > Cloudflare.

Enter credentials

Paste your API Token into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.GET,
    "https://api.cloudflare.com/client/v4/zones",
    grant_id="YOUR_GRANT_ID",
)

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
zones-get	read	GET	/zones
zones-post	write	POST	/zones
zones-0-get	read	GET	/zones/{zone_id}
zones-0-patch	admin	PATCH	/zones/{zone_id}
zones-0-delete	delete	DELETE	/zones/{zone_id}
zone-purge	delete	POST	/zones/{zone_id}/purge_cache
dns-records-for-a-zone-list-dns-records	read	GET	/zones/{zone_id}/dns_records
dns-records-for-a-zone-create-dns-record	write	POST	/zones/{zone_id}/dns_records
dns-records-for-a-zone-dns-record-details	read	GET	/zones/{zone_id}/dns_records/{dns_record_id}
dns-records-for-a-zone-patch-dns-record	write	PATCH	/zones/{zone_id}/dns_records/{dns_record_id}
dns-records-for-a-zone-update-dns-record	write	PUT	/zones/{zone_id}/dns_records/{dns_record_id}
dns-records-for-a-zone-delete-dns-record	delete	DELETE	/zones/{zone_id}/dns_records/{dns_record_id}
dns-records-for-a-zone-batch-dns-records	delete, write	POST	/zones/{zone_id}/dns_records/batch
dns-records-for-a-zone-export-dns-records	read	GET	/zones/{zone_id}/dns_records/export
dns-records-for-a-zone-import-dns-records	write	POST	/zones/{zone_id}/dns_records/import
worker-script-list-workers	read	GET	/accounts/{account_id}/workers/scripts
worker-script-download-worker	read	GET	/accounts/{account_id}/workers/scripts/{script_name}
worker-script-upload-worker-module	write	PUT	/accounts/{account_id}/workers/scripts/{script_name}
worker-script-delete-worker	delete	DELETE	/accounts/{account_id}/workers/scripts/{script_name}
worker-script-get-settings	read	GET	/accounts/{account_id}/workers/scripts/{script_name}/settings
worker-script-patch-settings	admin	PATCH	/accounts/{account_id}/workers/scripts/{script_name}/settings
worker-list-script-secrets	read	GET	/accounts/{account_id}/workers/scripts/{script_name}/secrets
worker-put-script-secret	admin	PUT	/accounts/{account_id}/workers/scripts/{script_name}/secrets
worker-delete-script-secret	admin, delete	DELETE	/accounts/{account_id}/workers/scripts/{script_name}/secrets/{secret_name}
worker-cron-trigger-get-cron-triggers	read	GET	/accounts/{account_id}/workers/scripts/{script_name}/schedules
worker-cron-trigger-update-cron-triggers	write	PUT	/accounts/{account_id}/workers/scripts/{script_name}/schedules
worker-deployments-list-deployments	read	GET	/accounts/{account_id}/workers/scripts/{script_name}/deployments
worker-deployments-create-deployment	write	POST	/accounts/{account_id}/workers/scripts/{script_name}/deployments
workers-kv-namespace-list-namespaces	read	GET	/accounts/{account_id}/storage/kv/namespaces
workers-kv-namespace-create-a-namespace	write	POST	/accounts/{account_id}/storage/kv/namespaces
workers-kv-namespace-get-a-namespace	read	GET	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}
workers-kv-namespace-rename-a-namespace	write	PUT	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}
workers-kv-namespace-remove-a-namespace	delete	DELETE	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}
workers-kv-namespace-list-a-namespace'-s-keys	read	GET	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/keys
workers-kv-namespace-read-key-value-pair	read	GET	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/values/{key_name}
workers-kv-namespace-read-the-metadata-for-a-key	read	GET	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/metadata/{key_name}
workers-kv-namespace-write-key-value-pair-with-metadata	write	PUT	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/values/{key_name}
workers-kv-namespace-delete-key-value-pair	delete	DELETE	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/values/{key_name}
workers-kv-namespace-write-multiple-key-value-pairs	write	PUT	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/bulk
workers-kv-namespace-delete-multiple-key-value-pairs	delete	POST	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/bulk/delete
workers-kv-namespace-get-multiple-key-value-pairs	read	POST	/accounts/{account_id}/storage/kv/namespaces/{namespace_id}/bulk/get