Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.iru.com/llms.txt

Use this file to discover all available pages before exploring further.

​
About Cloudflare

Iru reads zones, DNS, security and WAF settings, firewall rules, and account membership via the Cloudflare API using a scoped API token sent as Bearer authorization.

​
How it works

Authorization: Bearer YOUR_API_TOKEN
DetailValue
CategoryEdge security / DNS
AuthenticationAPI token (Bearer)
Prefer Account API tokens (Manage Account → API Tokens) for long-lived automation; User tokens follow individual users. Official references: Create a token, Restrict tokens, API.

​
Prerequisites

  • Admin or Super Administrator (or equivalent) on the Cloudflare account.

​
Connect Cloudflare to Iru

​
Cloudflare

1

Create an API token

In the Cloudflare dashboard, open Manage Account → API Tokens (account token) or My Profile → API Tokens (user token). Create a token - use a template like Read all resources or a custom token with Account, Zone, and User read permissions.Optional: set TTL and IP restrictions. Copy the token once. It is shown once.

​
Iru Compliance

1

Open Sources

In Iru Compliance, on the left navigation bar, expand Compliance and select Sources.
Left navigation: Compliance expanded, Sources selected
2

Turn on Cloudflare

Find Cloudflare (use Category or Search by name or description). On that card, turn on the toggle. A browser tab or window may open for the connector wizard.
3

Paste the API token

Paste the token into the Bearer token field.
4

Confirm the source is Active

Submit until the Cloudflare card shows Active.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Verify with GET https://api.cloudflare.com/client/v4/user/tokens/verify; check TTL and revocation.
Token scope - recreate with correct account and zone resources.
If you set TTL, rotate before expiry and update Iru.

​
Considerations

Iru uses read permissions only: it does not change…

Iru uses read permissions only - it does not change DNS, rules, or zones.

​
See also