cloudflare-access-app-setup

Provision Cloudflare Access apps, email allowlist policies, and service tokens via API.

320|3|Updated Apr 24, 2026

Search Tags:#automation #api #idempotent #infrastructure #cloudflare #provisioning #access

Ready to run

npx skills add https://github.com/mizchi/skills --skill cloudflare-access-app-setup

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloudflare-access-app-setup
Source: https://github.com/mizchi/skills/tree/main/cloudflare/access-app-setup
Command: npx skills add https://github.com/mizchi/skills --skill cloudflare-access-app-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

Cloudflare Access provisioning for self-hosted apps often requires multiple steps and manual config. This skill provides a one-shot automation to create an Access app, an email-allowlist policy, and a service token via the API, enabling quick, repeatable setups without a Pulumi stack.

Core Features & Use Cases

Creates a self-hosted Access application, an email-allowlist policy, and a service token.
Idempotent: re-running updates the existing app rather than creating duplicates.
Useful for CI pipelines, ephemeral environments, or gating Workers behind Access without full infra stacks.

Quick Start

Run the setup script with your Cloudflare API token and account ID to create or update the Access app.

Frequently Asked Questions about cloudflare-access-app-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Cloudflare Access app provisioning via API?▼

You can automate Cloudflare Access app provisioning by using a script that creates an Access application, an email allowlist policy, and a service token via the Cloudflare API in a single operation. This enables repeatable setups for CI pipelines without manual configuration.

How do I gate a Cloudflare Worker behind Access without a Pulumi stack?▼

To gate a Worker behind Access without a Pulumi stack, use an API-driven provisioning script that creates an Access app, an email-allowlist policy, and a service token. This approach is ideal for ephemeral environments and avoids full infrastructure stacks.

Can I re-run Cloudflare Access provisioning without creating duplicate apps?▼

Yes, you can re-run Cloudflare Access provisioning safely because the process is idempotent. Running the setup script again updates the existing Access app and policies rather than creating duplicates, making it suitable for CI pipelines.

What do I need to set up a Cloudflare Access application with an email allowlist?▼

To set up a Cloudflare Access application with an email allowlist, you need a Cloudflare API token and an account ID. The automation script validates these required inputs and returns the app id, aud, and policy details upon successful creation.

What is the best way to create a Cloudflare Access service token for CI pipelines?▼

The best way to create a Cloudflare Access service token for CI pipelines is using an idempotent API automation script. It provisions the token alongside an Access app and allowlist policy, returning the app id and aud for immediate integration.