Integrations

Cloudflare

Dun manages your Cloudflare edge — Workers, R2, KV, D1, Queues, Zero Trust Access, Tunnels, DNS zones, and cache — from one API token.

Connect with an API tokenHosting10 products

Note

Every mutating action — a deploy, a scale, a secret rotation, a DNS change — surfaces a plan in chat first. Dun never touches your Cloudflare resources until you approve it.

How to connect

Connect once from Integrations → Cloudflare, then toggle on the products you want Dun to manage.

Step 1

Go to Cloudflare Dashboard → My Profile → API Tokens → Create Token.

Step 2

For DNS only, use the 'Edit zone DNS' template. For the developer-platform features, create a Custom Token with the account + zone permissions for the products you'll use (e.g. Workers Scripts, Workers R2 Storage, Workers KV Storage, D1, Queues, Access, Cache Purge, Stream, Images, Logpush).

Step 3

Set the Account and Zone resources to the accounts/zones DunOps should manage.

Step 4

Copy the generated token and paste it below.

Where to get credentials: https://dash.cloudflare.com/profile/api-tokens

What Dun can do

Each product below is something you can turn on. The examples are real prompts you can type in a chat thread.

DNS

Discover zones, inspect records, and apply approved DNS record changes.

Type in a chat thread

Add a CNAME for app.example.com pointing to my Vercel deployment
Purge the cache for example.com

Permission	Required	What it does
Read zones + apply approved records	Yes	List zones, inspect records, create/update/delete on approval.

Workers

Read Worker scripts and deployments, and roll out / manage them on approval.

Type in a chat thread

Deploy my edge-router worker
List my Cloudflare Workers

Permission	Required	What it does
Read + deploy Worker scripts	Optional	Scripts, deployments, and routes.

R2 (object storage)

List R2 buckets and manage bucket lifecycle / objects on approval.

Type in a chat thread

List my R2 buckets

Permission	Required	What it does
Read + manage R2 buckets	Optional	Buckets and object operations.

Workers KV

Read KV namespaces and keys; write/delete values on approval (values are redacted).

Type in a chat thread

Show me my Cloudflare workers kv

Permission	Required	What it does
Read + write KV namespaces	Optional	Namespaces, keys, and values.

D1 (databases)

Read D1 databases and their metadata; manage lifecycle on approval.

Type in a chat thread

Show me my Cloudflare d1 (databases)

Permission	Required	What it does
Read + manage D1 databases	Optional	Database lifecycle + metadata.

Queues

Read and manage Cloudflare Queues on approval.

Type in a chat thread

Show me my Cloudflare queues

Permission	Required	What it does
Read + manage Queues	Optional	Queue lifecycle + consumers.

Zero Trust / Access

Manage Access applications, policies, groups, and service tokens, plus Tunnels. Service-token and tunnel secrets are redacted.

Type in a chat thread

Show me my Cloudflare zero trust / access

Permission	Required	What it does
Read + manage Zero Trust Access	Optional	Apps, policies, groups, service tokens, Tunnels.

Edge config

Zone settings, rulesets / WAF, page rules, cache purge, and custom hostnames.

Type in a chat thread

Show me my Cloudflare edge config

Permission	Required	What it does
Read + apply edge configuration	Optional	Zone settings, rulesets/WAF, page rules, cache purge.

Stream & Images

Manage Stream videos and live inputs, and Images plus variants. Stream/upload keys are redacted.

Type in a chat thread

Show me my Cloudflare stream & images

Permission	Required	What it does
Read + manage Stream and Images	Optional	Stream videos / live inputs, Images + variants.

Observability

Logpush jobs, health checks, and alerting (notification) policies.

Type in a chat thread

Show me my Cloudflare observability

Permission	Required	What it does
Read + manage Logpush / health checks / alerting	Optional	Logpush jobs, health checks, notification policies.

Next steps

Browse all integrations →

See every provider Dun can connect to, grouped by category.

Key concepts →

How approval gates, plans, and the confirm-before-mutate model work.