cloudflare-api-token-permissions

Maps Cloudflare API token permissions for GitHub Actions wrangler deploy and D1 migration authentication failures.

Updated Apr 22, 2026

Search Tags:#permissions #github actions #cloudflare #wrangler #workers #api token #ci deployment

Ready to run

npx skills add https://github.com/okayus/okayus-skills --skill cloudflare-api-token-permissions

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloudflare-api-token-permissions
Source: https://github.com/okayus/okayus-skills/tree/main/skills/cloudflare-api-token-permissions
Command: npx skills add https://github.com/okayus/okayus-skills --skill cloudflare-api-token-permissions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill resolves Cloudflare CI deployment authentication failures caused by missing API token permissions, helping developers diagnose errors without unnecessary token regeneration.

Core Features & Use Cases

Permission Error Mapping: Maps Cloudflare error codes such as 10000, 7403, and 9106 to the required API token permissions.
Token Configuration Guidance: Explains how to extend existing Cloudflare API tokens in-place while keeping GitHub Secrets unchanged.
Deployment Troubleshooting: Helps debug failed wrangler deploy or D1 migration workflows involving Workers, D1, R2, KV, Queues, Vectorize, and other bindings.

Quick Start

Use the cloudflare-api-token-permissions skill to diagnose my failed wrangler deploy authentication error and identify the missing Cloudflare API token permission.

Frequently Asked Questions about cloudflare-api-token-permissions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fix Cloudflare API token authentication failures in GitHub Actions?▼

To fix Cloudflare API token authentication failures in GitHub Actions, map the specific deployment error code to missing API token permissions and apply the corresponding remediation steps to your existing token.

What Cloudflare API token permissions are required for wrangler deploy?▼

The required Cloudflare API token permissions for wrangler deploy depend on your bindings, mapping specific error codes like 10000 or 9106 to the exact permissions needed for Workers, D1, or R2 resources.

Why does my wrangler deploy workflow fail with an authorization error?▼

Your wrangler deploy workflow fails with an authorization error when the configured Cloudflare API token lacks the necessary permissions for the specific Workers bindings or D1 migrations being executed.

Can I update Cloudflare API token permissions in-place without changing GitHub Secrets?▼

Yes, you can update Cloudflare API token permissions in-place by editing the token settings in your Cloudflare dashboard, allowing you to resolve deployment errors without modifying your stored GitHub Secrets.

How do Cloudflare error codes like 7403 and 9106 map to missing API token permissions?▼

Cloudflare error codes like 7403 and 9106 map directly to specific missing API token permissions, enabling targeted diagnostic workflows that identify exactly which access scopes need to be added for successful CI deployment.

What are the limitations of diagnosing Cloudflare CI deployment errors with existing tokens?▼

Diagnosing Cloudflare CI deployment errors with existing tokens assumes the failure is permission-related and requires accurate error code mapping, meaning it will not resolve failures caused by invalid tokens or network connectivity issues.