Scytale

The user creating an API token should have Domain Administrator Read Only permissions. Otherwise the token won’t work even if the right scopes are granted to the token.

How to Connect Scytale and Cloudflare

Search for Cloudflare and select 'Connect'.

Paste the API token you generated in Cloudflare (see instructions below).

How to Generate an API Token in Cloudflare

1. Log in to <a href="" rel="nofollow noopener noreferrer" target="_blank">Cloudflare</a>.
2. Click on the user icon (top-right) → My Profile.
3. In the left-hand menu, go to API Tokens → click Create Token.
4. Select ‘Use template’ next to ‘Read all resources’.
5. Edit the Token Name (e.g., <code>ScytaleToken</code>).
 Note: For a seamless experience without the need to reconnect the integration in the future, we highly recommend using the template and granting read access to all resources.

6. Click Continue to summary → then Create Token.
7. Copy the token before leaving the page — it will not be shown again.

1. In Scytale, go to 'Integrations'
 
2. Search for Cloudflare and select 'Connect'.
 
3. Paste the API token you generated in Cloudflare (see instructions below).
 
 How to Generate an API Token in Cloudflare
 1. Log in to <a href="" rel="nofollow noopener noreferrer" target="_blank">Cloudflare</a>.
 2. Click on the user icon (top-right) → My Profile.
 3. In the left-hand menu, go to API Tokens → click Create Token.
 4. Select ‘Use template’ next to ‘Read all resources’.
 5. Edit the Token Name (e.g., <code>ScytaleToken</code>).
 Note: For a seamless experience without the need to reconnect the integration in the future, we highly recommend using the template and granting read access to all resources.
 
 6. Click Continue to summary → then Create Token.
 7. Copy the token before leaving the page — it will not be shown again.

___________________________________________________________

Permissions for Cloudflare Integration

To allow Scytale to collect audit-relevant evidence from Cloudflare, the API token must be granted read-only permissions. There are two options:

Recommended: Use the Cloudflare "Read all resources" template

Grants read access to all resources across zones and accounts.

This ensures full coverage for evidence collection without needing future reconfiguration.

🔧 Alternative: Use a Custom Token with the following permissions:

- Zone:Fraud Detection:Read
- Zone:Config Rules:Read
- Zone:Dynamic Redirect:Read
- Zone:API Gateway:Read
- Zone:HTTP DDoS Managed Ruleset:Read
- Zone:Zone WAF:Read
- Zone:Zone Settings:Read
- Zone:Zone:Read
- Zone:DNS:Read
- Zone:Load Balancers:Read
- Zone:Firewall Services:Read
- Zone:SSL and Certificates:Read
   

- User:Memberships:Read
- User Details:Read
   

- Account:SSL and Certificates:Read
- Account:API Gateway:Read
- Account:Access: SSH Auditing:Read
- Account:Page Shield:Read
- Account:Magic Firewall:Read
- Account:L3/4 DDoS Managed Ruleset:Read
- Account:Account WAF:Read
- Account:DDoS Protection:Read
- Account:Account Rulesets:Read
- Account:Access: Organizations, Identity Providers, and Groups:Read
- Account:Firewall Access Rules:Read
- Account:Account Settings:Read

Note: The user generating the API token must have Domain Administrator Read Only permissions. Without it, the token will not work, even if scopes are correctly granted.

- Grants read access to all resources across zones and accounts.
- This ensures full coverage for evidence collection without needing future reconfiguration.
 
 
 🔧 Alternative: Use a Custom Token with the following permissions:
 Zone-level:
 - Zone:Fraud Detection:Read
 - Zone:Config Rules:Read
 - Zone:Dynamic Redirect:Read
 - Zone:API Gateway:Read
 - Zone:HTTP DDoS Managed Ruleset:Read
 - Zone:Zone WAF:Read
 - Zone:Zone Settings:Read
 - Zone:Zone:Read
 - Zone:DNS:Read
 - Zone:Load Balancers:Read
 - Zone:Firewall Services:Read
 - Zone:SSL and Certificates:Read
 
 User-level:
 - User:Memberships:Read
 - User Details:Read
 
 Account-level:
 - Account:SSL and Certificates:Read
 - Account:API Gateway:Read
 - Account:Access: SSH Auditing:Read
 - Account:Page Shield:Read
 - Account:Magic Firewall:Read
 - Account:L3/4 DDoS Managed Ruleset:Read
 - Account:Account WAF:Read
 - Account:DDoS Protection:Read
 - Account:Account Rulesets:Read
 - Account:Access: Organizations, Identity Providers, and Groups:Read
 - Account:Firewall Access Rules:Read
 - Account:Account Settings:Read
 
 Note: The user generating the API token must have Domain Administrator Read Only permissions. Without it, the token will not work, even if scopes are correctly granted.
 
 
 
 
 
 
 ​

In this article, you will understand step by step how to easily integrate with Cloudflare

Cloudflare - User Guide

Create a custom design with text, images, and links

Support

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Empty Help Center

Uh oh. That page doesn’t exist.

Home

Search results

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Cloudflare - User Guide

Prerequisites For Cloudflare Integration

How to Connect Scytale and Cloudflare

How to Generate an API Token in Cloudflare

Permissions for Cloudflare Integration

Recommended: Use the Cloudflare "Read all resources" template