---
title: "Cloudflare Zero Trust integration for LuumenAI"
url: "https://www.luumen.ai/integrations/cloudflare-zero-trust/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Cloudflare Zero Trust integration for LuumenAI

Access and posture from Cloudflare Zero Trust, with approval on every change.

## What LuumenAI can do with Cloudflare Zero Trust

LuumenAI connects to Cloudflare Zero Trust with OAuth 2.0 and exposes 16 tools (10 read-only · 6 write). For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

## Key facts

- Authentication: OAuth 2.0
- Tools available: 16 tools (10 read-only · 6 write)
- Deployment: scoped as part of your Pilot, Platform, or Managed rollout
- Category: Identity & security

## About Cloudflare Zero Trust with LuumenAI

Answer access and posture questions from Cloudflare Zero Trust before you act, and change access or rotate credentials only through approved, bounded actions. Secret values never enter the conversation — only their metadata does.

## Example tools

Read-only (10 in total):

- `Look up user or group` — Resolve who has access to what before you act.
- `List findings` — Vulnerabilities, misconfigurations, and alerts in scope.
- `Fetch secret metadata` — Confirm a secret exists and when it rotates — never its value.
- `List applications` — Apps and who is assigned to them.
- `Get login events` — Recent sign-ins and their outcomes.
- `List policies` — Access policies and their scope.
- `Get device posture` — Compliance state for a device.
- `List API tokens` — Tokens, owners, and expiry.

Write and destructive (6 in total, subject to configured approval policy):

- `Grant or revoke access` — Change membership with a bounded, approved change.
- `Rotate credential` — Trigger rotation with the dependants listed first.
- `Suspend user` — Suspend an account as an approved action.
- `Reset factors` — Reset a user's MFA enrolments.
- `Update policy` — Change a policy with the diff shown.
- `Revoke token` — Invalidate a token and its sessions.

## Frequently asked questions

### How does LuumenAI connect to Cloudflare Zero Trust?

Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Cloudflare Zero Trust on its own?

For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

### Is there an audit trail?

Every call to Cloudflare Zero Trust — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/cloudflare-zero-trust/