62 actionsInfrastructure

Cloudflare Connector

DNS, CDN, security, and edge computing from support tickets.

Manage DNS records, SSL/TLS, firewall rules, Workers, KV storage, R2 buckets, WAF rulesets, page rules, and cache. Keva can purge caches, update DNS records, manage firewall rules, and deploy Workers through the Cloudflare API.

Total Actions

Capabilities

DNS managementCache purgingSSL/TLS configFirewall rulesWorkersKV storageR2 storageWAF rulesetsPage rulesCustom hostnames

Real-world use cases

See how Keva handles actual support tickets using Cloudflare actions.

Customer reports stale content after update

Customer Message

“We updated our homepage 2 hours ago but customers are still seeing the old version. Can you clear the cache?”

Find zone — Lists zones to find the customer's domain

Purge cache — Queues purge_cache for the zone (requires approval)

Confirm — Notifies customer that cache has been purged globally

Actions used

cloudflare.list_zonescloudflare.purge_cache

CDN cache purged globally, fresh content served within seconds.

Customer needs DNS record for new subdomain

Customer Message

“We need to add a CNAME record for api.example.com pointing to our-api.herokuapp.com. Can you set this up?”

Find zone — Looks up the zone for example.com

Check existing records — Lists DNS records to verify no conflict

Create record — Queues create_dns_record with the CNAME configuration

Actions used

cloudflare.list_zonescloudflare.list_dns_recordscloudflare.create_dns_record

CNAME record created, subdomain resolves to the target within minutes.

Block malicious IP address

Customer Message

“We're seeing a flood of requests from 203.0.113.50. Can you block this IP at the firewall level?”

Identify zone — Finds the relevant zone for the affected domain

Create firewall rule — Queues create_firewall_rule to block the IP (requires approval)

Verify — Confirms the rule is active and the IP is blocked

Actions used

cloudflare.list_zonescloudflare.create_firewall_rule

IP blocked at the edge, malicious traffic stopped immediately.

All Cloudflare Actions

Complete reference of 62 actions available through the Cloudflare connector.

Showing 62 of 62 actions

Action	Description	Category	Risk	Reversible
Infrastructure Read (35)
`list_zones` List Zones	List all zones (domains) in the Cloudflare account, optionally filtered by name.	Infrastructure Read	low	—
`get_zone` Get Zone	Get details of a specific Cloudflare zone by its ID.	Infrastructure Read	low	—
`list_dns_records` List DNS Records	List DNS records for a zone, optionally filtered by type or name.	Infrastructure Read	low	—
`get_dns_record` Get DNS Record	Get details of a specific DNS record.	Infrastructure Read	low	—
`get_ssl_settings` Get SSL Settings	Get the current SSL/TLS encryption mode for a zone.	Infrastructure Read	low	—
`list_firewall_rules` List Firewall Rules	List WAF custom firewall rules configured for a zone.	Infrastructure Read	low	—
`get_analytics` Get Analytics	Get analytics data (requests, bandwidth, threats, pageviews) for a zone within a date range.	Infrastructure Read	low	—
`get_zone_setting` Get Zone Setting	Get a specific zone setting by name (e.g. always_use_https, ssl, min_tls_version, browser_cache_ttl, rocket_loader, minify, security_level, automatic_https_rewrites).	Infrastructure Read	low	—
`list_zone_settings` List Zone Settings	List all settings for a zone. Returns the complete set of zone configuration options.	Infrastructure Read	low	—
`get_zone_settings` Get Zone Settings	Get all settings for a zone. Alias for list_zone_settings.	Infrastructure Read	low	—
`get_ssl_verification` Get SSL Verification	Get the SSL/TLS certificate verification status for a zone, including certificate pack details and validation status.	Infrastructure Read	low	—
`list_certificate_packs` List Certificate Packs	List active SSL/TLS certificate packs for a zone.	Infrastructure Read	low	—
`get_dnssec_status` Get DNSSEC Status	Get the DNSSEC status and configuration for a zone.	Infrastructure Read	low	—
`list_ip_access_rules` List IP Access Rules	List IP access rules (block, challenge, whitelist) configured for a zone.	Infrastructure Read	low	—
`list_worker_routes` List Worker Routes	List all Worker routes configured for a zone.	Infrastructure Read	low	—
`get_worker_route` Get Worker Route	Get details of a specific Worker route.	Infrastructure Read	low	—
`list_health_checks` List Health Checks	List all health checks configured for a zone.	Infrastructure Read	low	—
`get_health_check` Get Health Check	Get details and status of a specific health check.	Infrastructure Read	low	—
`list_page_rules` List Page Rules	List active page rules for a zone.	Infrastructure Read	low	—
`get_page_rule` Get Page Rule	Get details of a specific page rule.	Infrastructure Read	low	—
`list_origin_certificates` List Origin Certificates	List Cloudflare Origin CA certificates for a zone. These certificates are used between Cloudflare and the origin server.	Infrastructure Read	low	—
`get_zone_analytics` Get Zone Analytics Dashboard	Get zone analytics from the dashboard endpoint using relative time (minutes ago). Defaults to last 24 hours.	Infrastructure Read	low	—
`list_custom_certificates` List Custom Certificates	List custom SSL certificates uploaded to a zone. Returns certificate metadata, expiration, and status.	Infrastructure Read	low	—
`get_cache_reserve_status` Get Cache Reserve Status	Get the Cache Reserve (tiered caching) status for a zone. Returns whether Cache Reserve is enabled. May return 403 on plans that do not support this feature.	Infrastructure Read	low	—
`get_bot_management` Get Bot Management	Get bot management settings for a zone (fight_mode, machine_learning, js_detection). May return 403 if the zone is not on an eligible plan (Business or Enterprise).	Infrastructure Read	low	—
`list_workers` List Workers	List all Workers scripts in the account.	Infrastructure Read	low	—
`get_worker` Get Worker	Get details of a specific Workers script.	Infrastructure Read	low	—
`list_kv_namespaces` List KV Namespaces	List all Workers KV namespaces in the account.	Infrastructure Read	low	—
`list_kv_keys` List KV Keys	List keys in a Workers KV namespace.	Infrastructure Read	low	—
`get_kv_value` Get KV Value	Read a value from a Workers KV namespace by key.	Infrastructure Read	low	—
`list_r2_buckets` List R2 Buckets	List all R2 object storage buckets in the account.	Infrastructure Read	low	—
`list_r2_objects` List R2 Objects	List objects in an R2 bucket.	Infrastructure Read	low	—
`list_rulesets` List Rulesets	List WAF rulesets configured for a zone.	Infrastructure Read	low	—
`get_ruleset` Get Ruleset	Get details and rules of a specific WAF ruleset.	Infrastructure Read	low	—
`list_custom_hostnames` List Custom Hostnames	List custom hostnames configured for a zone.	Infrastructure Read	low	—
Infrastructure Write (25)
`purge_cache` Purge Cache	Purge the entire cache for a zone or specific URLs. This clears cached content from Cloudflare edge servers.	Infrastructure Write	high	—
`create_dns_record` Create DNS Record	Create a new DNS record in a zone. Supports A, AAAA, CNAME, MX, TXT, and other record types.	Infrastructure Write	high
`update_dns_record` Update DNS Record	Update an existing DNS record in a zone.	Infrastructure Write	high
`delete_dns_record` Delete DNS Record	Delete a DNS record from a zone. This action is irreversible.	Infrastructure Write	high	—
`create_firewall_rule` Create Firewall Rule	Create a new WAF custom rule for a zone using a filter expression.	Infrastructure Write	high
`delete_firewall_rule` Delete Firewall Rule	Delete a WAF custom rule from a zone.	Infrastructure Write	high	—
`update_zone_setting` Update Zone Setting	Update a specific zone setting by name. The value format varies by setting.	Infrastructure Write	medium
`create_ip_access_rule` Create IP Access Rule	Create a new IP access rule to block, challenge, or whitelist an IP address, IP range, or country.	Infrastructure Write	high
`delete_ip_access_rule` Delete IP Access Rule	Delete an IP access rule from a zone.	Infrastructure Write	high	—
`purge_by_url` Purge Cache by URL	Purge specific URLs from the Cloudflare cache (max 30 URLs per request).	Infrastructure Write	medium	—
`create_page_rule` Create Page Rule	Create a new page rule for a zone with URL pattern matching and configurable actions (e.g. always_online, cache_level, forwarding_url).	Infrastructure Write	high
`delete_page_rule` Delete Page Rule	Delete a page rule from a zone. This action is irreversible.	Infrastructure Write	high	—
`create_worker_route` Create Worker Route	Create a new Worker route for a zone, mapping a URL pattern to a Worker script.	Infrastructure Write	high
`delete_worker_route` Delete Worker Route	Delete a Worker route from a zone. This action is irreversible.	Infrastructure Write	high	—
`create_health_check` Create Health Check	Create a new health check for a zone to monitor an address (hostname or IP) via HTTP, HTTPS, or TCP.	Infrastructure Write	medium
`delete_health_check` Delete Health Check	Delete a health check from a zone. This action is irreversible.	Infrastructure Write	medium	—
`enable_dnssec` Enable DNSSEC	Enable DNSSEC for a zone. Returns the DS record that must be added at your domain registrar. This action is not easily reversible.	Infrastructure Write	high	—
`delete_worker` Delete Worker	Delete a Workers script. This action is destructive and irreversible.	Infrastructure Write	critical	—
`put_kv_value` Put KV Value	Write a value to a Workers KV namespace. Creates or overwrites the key.	Infrastructure Write	medium	—
`delete_kv_key` Delete KV Key	Delete a key-value pair from a Workers KV namespace.	Infrastructure Write	high	—
`delete_r2_object` Delete R2 Object	Delete an object from an R2 bucket.	Infrastructure Write	high	—
`create_ruleset_rule` Create Ruleset Rule	Add a new rule to a WAF ruleset.	Infrastructure Write	high
`delete_ruleset_rule` Delete Ruleset Rule	Delete a rule from a WAF ruleset.	Infrastructure Write	high	—
`create_custom_hostname` Create Custom Hostname	Create a custom hostname for a zone with SSL provisioning.	Infrastructure Write	medium
`delete_custom_hostname` Delete Custom Hostname	Delete a custom hostname from a zone.	Infrastructure Write	high	—
Settings Change (2)
`update_ssl_settings` Update SSL Settings	Change the SSL/TLS encryption mode for a zone (off, flexible, full, or strict).	Settings Change	high
`toggle_dev_mode` Toggle Development Mode	Enable or disable development mode for a zone. Development mode temporarily bypasses Cloudflare caching.	Settings Change	medium

Infrastructure Read

list_zoneslow

List Zones

List all zones (domains) in the Cloudflare account, optionally filtered by name.

Infrastructure Read

get_zonelow

Get Zone

Get details of a specific Cloudflare zone by its ID.

Infrastructure Read

list_dns_recordslow

List DNS Records

List DNS records for a zone, optionally filtered by type or name.

Infrastructure Read

get_dns_recordlow

Get DNS Record

Get details of a specific DNS record.

Infrastructure Read

get_ssl_settingslow

Get SSL Settings

Get the current SSL/TLS encryption mode for a zone.

Infrastructure Read

list_firewall_ruleslow

List Firewall Rules

List WAF custom firewall rules configured for a zone.

Infrastructure Read

get_analyticslow

Get Analytics

Get analytics data (requests, bandwidth, threats, pageviews) for a zone within a date range.

Infrastructure Read

get_zone_settinglow

Get Zone Setting

Get a specific zone setting by name (e.g. always_use_https, ssl, min_tls_version, browser_cache_ttl, rocket_loader, minify, security_level, automatic_https_rewrites).

Infrastructure Read

list_zone_settingslow

List Zone Settings

List all settings for a zone. Returns the complete set of zone configuration options.

Infrastructure Read

get_zone_settingslow

Get Zone Settings

Get all settings for a zone. Alias for list_zone_settings.

Infrastructure Read

get_ssl_verificationlow

Get SSL Verification

Get the SSL/TLS certificate verification status for a zone, including certificate pack details and validation status.

Infrastructure Read

list_certificate_packslow

List Certificate Packs

List active SSL/TLS certificate packs for a zone.

Infrastructure Read

get_dnssec_statuslow

Get DNSSEC Status

Get the DNSSEC status and configuration for a zone.

Infrastructure Read

list_ip_access_ruleslow

List IP Access Rules

List IP access rules (block, challenge, whitelist) configured for a zone.

Infrastructure Read

list_worker_routeslow

List Worker Routes

List all Worker routes configured for a zone.

Infrastructure Read

get_worker_routelow

Get Worker Route

Get details of a specific Worker route.

Infrastructure Read

list_health_checkslow

List Health Checks

List all health checks configured for a zone.

Infrastructure Read

get_health_checklow

Get Health Check

Get details and status of a specific health check.

Infrastructure Read

list_page_ruleslow

List Page Rules

List active page rules for a zone.

Infrastructure Read

get_page_rulelow

Get Page Rule

Get details of a specific page rule.

Infrastructure Read

list_origin_certificateslow

List Origin Certificates

List Cloudflare Origin CA certificates for a zone. These certificates are used between Cloudflare and the origin server.

Infrastructure Read

get_zone_analyticslow

Get Zone Analytics Dashboard

Get zone analytics from the dashboard endpoint using relative time (minutes ago). Defaults to last 24 hours.

Infrastructure Read

list_custom_certificateslow

List Custom Certificates

List custom SSL certificates uploaded to a zone. Returns certificate metadata, expiration, and status.

Infrastructure Read

get_cache_reserve_statuslow

Get Cache Reserve Status

Get the Cache Reserve (tiered caching) status for a zone. Returns whether Cache Reserve is enabled. May return 403 on plans that do not support this feature.

Infrastructure Read

get_bot_managementlow

Get Bot Management

Get bot management settings for a zone (fight_mode, machine_learning, js_detection). May return 403 if the zone is not on an eligible plan (Business or Enterprise).

Infrastructure Read

list_workerslow

List Workers

List all Workers scripts in the account.

Infrastructure Read

get_workerlow

Get Worker

Get details of a specific Workers script.

Infrastructure Read

list_kv_namespaceslow

List KV Namespaces

List all Workers KV namespaces in the account.

Infrastructure Read

list_kv_keyslow

List KV Keys

List keys in a Workers KV namespace.

Infrastructure Read

get_kv_valuelow

Get KV Value

Read a value from a Workers KV namespace by key.

Infrastructure Read

list_r2_bucketslow

List R2 Buckets

List all R2 object storage buckets in the account.

Infrastructure Read

list_r2_objectslow

List R2 Objects

List objects in an R2 bucket.

Infrastructure Read

list_rulesetslow

List Rulesets

List WAF rulesets configured for a zone.

Infrastructure Read

get_rulesetlow

Get Ruleset

Get details and rules of a specific WAF ruleset.

Infrastructure Read

list_custom_hostnameslow

List Custom Hostnames

List custom hostnames configured for a zone.

Infrastructure Read

Infrastructure Write

purge_cachehigh

Purge Cache

Purge the entire cache for a zone or specific URLs. This clears cached content from Cloudflare edge servers.

Infrastructure Write

create_dns_recordhigh

Create DNS Record

Create a new DNS record in a zone. Supports A, AAAA, CNAME, MX, TXT, and other record types.

Infrastructure WriteReversible

update_dns_recordhigh

Update DNS Record

Update an existing DNS record in a zone.

Infrastructure WriteReversible

delete_dns_recordhigh

Delete DNS Record

Delete a DNS record from a zone. This action is irreversible.

Infrastructure Write

create_firewall_rulehigh

Create Firewall Rule

Create a new WAF custom rule for a zone using a filter expression.

Infrastructure WriteReversible

delete_firewall_rulehigh

Delete Firewall Rule

Delete a WAF custom rule from a zone.

Infrastructure Write

update_zone_settingmedium

Update Zone Setting

Update a specific zone setting by name. The value format varies by setting.

Infrastructure WriteReversible

create_ip_access_rulehigh

Create IP Access Rule

Create a new IP access rule to block, challenge, or whitelist an IP address, IP range, or country.

Infrastructure WriteReversible

delete_ip_access_rulehigh

Delete IP Access Rule

Delete an IP access rule from a zone.

Infrastructure Write

purge_by_urlmedium

Purge Cache by URL

Purge specific URLs from the Cloudflare cache (max 30 URLs per request).

Infrastructure Write

create_page_rulehigh

Create Page Rule

Create a new page rule for a zone with URL pattern matching and configurable actions (e.g. always_online, cache_level, forwarding_url).

Infrastructure WriteReversible

delete_page_rulehigh

Delete Page Rule

Delete a page rule from a zone. This action is irreversible.

Infrastructure Write

create_worker_routehigh

Create Worker Route

Create a new Worker route for a zone, mapping a URL pattern to a Worker script.

Infrastructure WriteReversible

delete_worker_routehigh

Delete Worker Route

Delete a Worker route from a zone. This action is irreversible.

Infrastructure Write

create_health_checkmedium

Create Health Check

Create a new health check for a zone to monitor an address (hostname or IP) via HTTP, HTTPS, or TCP.

Infrastructure WriteReversible

delete_health_checkmedium

Delete Health Check

Delete a health check from a zone. This action is irreversible.

Infrastructure Write

enable_dnssechigh

Enable DNSSEC

Enable DNSSEC for a zone. Returns the DS record that must be added at your domain registrar. This action is not easily reversible.

Infrastructure Write

delete_workercritical

Delete Worker

Delete a Workers script. This action is destructive and irreversible.

Infrastructure Write

put_kv_valuemedium

Put KV Value

Write a value to a Workers KV namespace. Creates or overwrites the key.

Infrastructure Write

delete_kv_keyhigh

Delete KV Key

Delete a key-value pair from a Workers KV namespace.

Infrastructure Write

delete_r2_objecthigh

Delete R2 Object

Delete an object from an R2 bucket.

Infrastructure Write

create_ruleset_rulehigh

Create Ruleset Rule

Add a new rule to a WAF ruleset.

Infrastructure WriteReversible

delete_ruleset_rulehigh

Delete Ruleset Rule

Delete a rule from a WAF ruleset.

Infrastructure Write

create_custom_hostnamemedium

Create Custom Hostname

Create a custom hostname for a zone with SSL provisioning.

Infrastructure WriteReversible

delete_custom_hostnamehigh

Delete Custom Hostname

Delete a custom hostname from a zone.

Infrastructure Write

Settings Change

update_ssl_settingshigh

Update SSL Settings

Change the SSL/TLS encryption mode for a zone (off, flexible, full, or strict).

Settings ChangeReversible

toggle_dev_modemedium

Toggle Development Mode

Enable or disable development mode for a zone. Development mode temporarily bypasses Cloudflare caching.

Settings ChangeReversible

Related connectors

Other platforms in the Infrastructure category.

AWS

40 actions

Cloud infrastructure management from support tickets.

Vercel

29 actions

Frontend hosting and deployment management from support tickets.

Railway

25 actions

Cloud hosting and service management from support tickets.

Supabase

31 actions

Backend platform management from support tickets.

Docker

30 actions

Container lifecycle and infrastructure management from support tickets.

Kubernetes

30 actions

Cluster management and workload orchestration from support tickets.

Ready to automate Cloudflare support?

62 actions. Full approval control. Set up in minutes.

14-day free trial. No credit card required.

Get Started Free