Create a Cloudflare API token

Before you can connect Cloudflare to InfraNest, you need to create an API token in your Cloudflare account with the right permissions. This article is for anyone setting up a Cloudflare connection for the first time.

Overview

• InfraNest uses this token to read your DNS zones and manage records on your behalf.
• You create the token directly in Cloudflare, then paste it into InfraNest when you connect the provider.
• The exact permissions you choose determine what InfraNest is allowed to do — DNS management, domain renewal, or both.

Create the token

1. Sign in to the Cloudflare dashboard.

2. Go to My Profile → API Tokens.

3. Select Create Token, then Create Custom Token.

4. Give the token these permissions:

   • Zone → DNS → Edit
   • Zone → Zone → Read
   • Also add Account → Domain Registrar → Edit if you want to manage your Cloudflare-registered domains.

5. Select Continue to summary, then Create Token.

6. Copy the token now — Cloudflare shows it only once.

WarningCloudflare only displays the token once. If you navigate away without copying it, you'll need to create a new token.

What the permissions are for

• Zone:Read + DNS:Edit let InfraNest see your zones and manage records.
• Domain Registrar:Edit lets InfraNest renew and manage domains registered at Cloudflare. Leave it out if you only use Cloudflare for DNS.

TipIf you're not sure whether you need the Domain Registrar permission, skip it for now — you can always create a new token later if you decide to manage domain renewals through InfraNest.

Next step

Go back to InfraNest and follow Connect Cloudflare to paste the token.