---
title: "Cloudflare integration for LuumenAI"
url: "https://www.luumen.ai/integrations/cloudflare/"
entity: SoftwareIntegration
category: "Cloud & infrastructure"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Cloudflare integration for LuumenAI

Read zones, DNS, and WAF lists; change records as an approved step.

## What LuumenAI can do with Cloudflare

LuumenAI connects to Cloudflare with an API token and exposes 20 tools (10 read-only · 7 write · 3 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 20 tools (10 read-only · 7 write · 3 destructive)
- Plan: available on all plans
- Category: Cloud & infrastructure

## About Cloudflare with LuumenAI

Connect Cloudflare and the agent can read your zones, DNS records, firewall rules, WAF lists, load balancer pools, and tunnels while you work. Ask what a record points at today, or which rules cover a zone, and get an answer straight away. Changes like creating a DNS record are previewed first and go out for approval before they touch the live zone.

## Example tools

Read-only (10 in total):

- `CLOUDFLARE_GET_BOT_MANAGEMENT_SETTINGS` — Retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management).
- `CLOUDFLARE_GET_LISTS` — Fetch all WAF lists (no items) for an account.
- `CLOUDFLARE_LIST_ACCOUNT_MEMBERS` — Lists all members of a Cloudflare account with their roles, permissions, and status.
- `CLOUDFLARE_LIST_ACCOUNTS` — List all Cloudflare accounts you have ownership or verified access to.
- `CLOUDFLARE_LIST_DNS_RECORDS` — List and search DNS records in a Cloudflare zone.
- `CLOUDFLARE_LIST_FIREWALL_RULES` — List firewall rules for a specific DNS zone.
- `CLOUDFLARE_LIST_MONITORS` — List all load-balancer monitors in a Cloudflare account.
- `CLOUDFLARE_LIST_POOLS` — List all load balancer pools in a Cloudflare account.

Write and destructive (10 in total, approval required by default):

- `CLOUDFLARE_CREATE_DNS_RECORD` — Create a new DNS record within a specific zone.
- `CLOUDFLARE_CREATE_LIST` — Create a new empty custom list for use in WAF rules and filters.
- `CLOUDFLARE_CREATE_ZONE` — Creates a new DNS zone (domain) in Cloudflare.
- `CLOUDFLARE_DELETE_DNS_RECORD` — Delete a DNS record within a specific zone.
- `CLOUDFLARE_DELETE_LIST` — Delete a WAF list.
- `CLOUDFLARE_DELETE_ZONE` — Delete a zone.
- `CLOUDFLARE_UPDATE_DNS_RECORD` — Update an existing DNS record within a specific zone.
- `CLOUDFLARE_UPDATE_LIST` — Update the description of a WAF list (cannot update items).

## Frequently asked questions

### How does LuumenAI connect to Cloudflare?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Cloudflare on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 3 actions classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Cloudflare — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/cloudflare/