Skip to main content

Cloudflare zone operations

v0.1.6

Read-only zone, DNS record, cache, firewall, and analytics introspection plus narrow mutators (purge cache, enable/disable dev mode). Auth via CF_API_TOKEN env var.

8 allowed by default 2 need approval by default 1 denied by default
Pack ID
cloudflare
Vendor
emisar
OS
linux
Actions
11
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
curl

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install cloudflare --hash sha256:97544aa5297135f33653ef32788530940752eb96e0acfd053aa6f1d0b232a8c9

Actions 11 total

View on GitHub
  • cf.cache_settings exec low

    GET /zones/<id>/settings

    List all zone-level settings (cache TTL, security level, SSL mode, etc).

    View source on GitHub
  • cf.dev_mode_off exec medium

    PATCH /zones/<id>/settings/development_mode (off)

    Ends development mode early. Cache resumes normal behavior immediately.

    View source on GitHub
  • cf.dev_mode_on exec high

    PATCH /zones/<id>/settings/development_mode

    Enables development mode for 3 hours — bypasses caching for this zone.

    View source on GitHub
  • cf.dns_records exec low

    GET /zones/<id>/dns_records

    List all DNS records in one zone.

    View source on GitHub
  • cf.firewall_rules exec low

    GET /zones/<id>/rulesets/phases/http_request_firewall_custom/entrypoint

    List zone WAF custom rules — the entrypoint ruleset for the http_request_firewall_custom phase. Replaces the legacy /firewall/rules API, which Cloudflare sunset on 2025-06-15.

    View source on GitHub
  • cf.list_zones exec low

    GET /zones

    List all zones accessible by the API token.

    View source on GitHub
  • cf.page_rules exec low

    GET /zones/<id>/pagerules

    List all page rules for one zone.

    View source on GitHub
  • cf.purge_all_cache exec critical

    POST /zones/<id>/purge_cache (everything)

    Purges ALL cached content for one zone. Cold-cache origin spike — every URL becomes a miss until it warms again. Avoid on busy zones.

    View source on GitHub
  • cf.purge_url exec high

    POST /zones/<id>/purge_cache (single URL)

    Purges cache for one URL. Safe — only affects that URL's cached variants.

    View source on GitHub
  • cf.zone_analytics exec low

    GET /zones/<id>/analytics/dashboard

    Show last-24h analytics for one zone (requests, bandwidth, threats).

    View source on GitHub
  • cf.zone_details exec low

    GET /zones/<id>

    Show one zone's full settings + state + nameservers.

    View source on GitHub