---
title: "Cloudflare Api Key integration for LuumenAI"
url: "https://www.luumen.ai/integrations/cloudflare-api-key/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Cloudflare Api Key integration for LuumenAI

Read Cloudflare zones, DNS, and rulesets. Change them as approved steps.

## What LuumenAI can do with Cloudflare Api Key

LuumenAI connects to Cloudflare Api Key with an API token and exposes 25 tools (8 read-only · 12 write · 5 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 25 tools (8 read-only · 12 write · 5 destructive)
- Plan: available on all plans
- Category: Identity & security

## About Cloudflare Api Key with LuumenAI

Connect Cloudflare and Luumen can read your zones, DNS records, lockdown rules, rulesets, and cache settings while you work a ticket or an incident. When a record needs to change, it drafts the exact call, shows you the record it will write, and waits for your approval before sending it. Authentication uses an API key.

## Example tools

Read-only (8 in total):

- `CLOUDFLARE_API_KEY_GET_CLOUDFLARE_IP_ADDRESSES` — Retrieve IP addresses used on the Cloudflare or JD Cloud network.
- `CLOUDFLARE_API_KEY_GET_ENTRYPOINT_RULESET_VERSION` — Retrieves a specific historical version of an entry point ruleset from Cloudflare.
- `CLOUDFLARE_API_KEY_GET_LOCKDOWN_RULE` — Get a Zone Lockdown rule.
- `CLOUDFLARE_API_KEY_GET_REGIONAL_TIERED_CACHE` — Get the regional tiered cache setting for a zone.
- `CLOUDFLARE_API_KEY_GET_RULESET` — Fetch the latest version of a ruleset by ID.
- `CLOUDFLARE_API_KEY_GET_ZONE_DETAILS` — Get details for a specific zone.
- `CLOUDFLARE_API_KEY_LIST_DNS_RECORDS` — List, search, sort, and filter DNS records for a Cloudflare zone.
- `CLOUDFLARE_API_KEY_LIST_ZONES` — List, search, sort, and filter Cloudflare zones.

Write and destructive (17 in total, approval required by default):

- `CLOUDFLARE_API_KEY_CREATE_DNS_RECORD` — Create a new DNS record in a Cloudflare zone.
- `CLOUDFLARE_API_KEY_CREATE_LOCKDOWN_RULE` — Create a Zone Lockdown rule.
- `CLOUDFLARE_API_KEY_CREATE_RULE_IN_RULESET` — Add a rule to an existing ruleset.
- `CLOUDFLARE_API_KEY_CREATE_RULESET` — Creates a new Cloudflare ruleset at account or zone scope.
- `CLOUDFLARE_API_KEY_DELETE_DNS_RECORD` — Delete a DNS record.
- `CLOUDFLARE_API_KEY_DELETE_DNSSEC` — Delete DNSSEC records for a zone.
- `CLOUDFLARE_API_KEY_DELETE_RULE_FROM_RULESET` — Delete a specific rule from a ruleset.
- `CLOUDFLARE_API_KEY_DELETE_RULESET` — Delete all versions of a ruleset.

## Frequently asked questions

### How does LuumenAI connect to Cloudflare Api Key?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Cloudflare Api Key on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 5 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Cloudflare Api Key — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/cloudflare-api-key/