What problem does it solve? Working with the Cloudflare v4 API requires handling scoped token authentication, zone versus account scoping, offset pagination, undocumented rate-limit behavior, and risky production mutations. This Skill provides a self-contained Python client and reference guides that handle all of that boilerplate and safety logic so you can query or modify Cloudflare resources directly and safely. ## Core Features & Use Cases - Full API coverage: Read and manage DNS records, zones, cache purge, firewall/WAF rulesets, page rules, SSL/TLS, DNSSEC, Workers/KV/R2, Zero Trust (Access, Gateway, tunnels), account members, and analytics through one CLI. - Safe mutations: Built-in dry-run previews and a read-only mode (CLOUDFLARE_READ_ONLY=1) block accidental changes to production DNS, cache, or firewall rules. - Robust client behavior: Handles the standard response envelope, offset and cursor pagination, exponential backoff on 429s (Cloudflare sends no Retry-After), and both scoped token and legacy Global API Key auth. - Use Case: Export every DNS record in a zone for audit, then upsert a single A record with a dry-run preview before applying the change to live traffic. ## Quick Start Export your Cloudflare API token and zone ID as environment variables, then ask the assistant to list all DNS records for your zone using the cloudflare client script.
