notary-log-cloudflare-staging

Deploy and verify a multi-tenant Cal booking app on Cloudflare Workers staging with D1.

Updated Sep 5, 2026
One-click install
npx skills add https://github.com/SillyHippy/zo-skills --skill notary-log-cloudflare-staging-sillyhippy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: notary-log-cloudflare-staging
Source: https://github.com/SillyHippy/zo-skills/tree/main/skills/notary-log-cloudflare-staging
Command: npx skills add https://github.com/SillyHippy/zo-skills --skill notary-log-cloudflare-staging-sillyhippy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? It prevents accidental production deploys and OAuth authentication loops when deploying the Notary-log Cal multi-tenant app to Cloudflare Workers staging, enforcing API-token auth and staging-only wrangler config. ## Core Features & Use Cases - Staging-only deployment guardrails: Mandates wrangler.cal.toml for all deploys and blocks merging feature/cal-multi-tenant to main without explicit user approval. - API-token-first Cloudflare auth: Uses CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID with D1 Edit permissions instead of fragile OAuth flows, with documented anti-loop rules for OAuth fallback. - D1 provisioning and verification: Creates the D1 database, applies the schema, sets webhook secrets, deploys the staging Worker, and runs an 18-check verification script. - Use Case: A user asks the agent to deploy the Cal booking feature to Cloudflare staging; the agent sources the credentials file, runs the staging deploy command, and verifies the live Worker URL without touching production. ## Quick Start Deploy the Notary-log Cal app to Cloudflare Workers staging using the wrangler.cal.toml config and verify the staging URL with the verification script.

Frequently Asked Questions about notary-log-cloudflare-staging

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a Cloudflare Worker to staging only with wrangler?

Use a separate staging config file and pass it explicitly, such as wrangler deploy -c wrangler.cal.toml or a dedicated pnpm deploy script. Never run the default deploy command, which targets the production wrangler.toml config.

How do I authenticate wrangler with a Cloudflare API token instead of OAuth?

Set CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID environment variables, then run wrangler whoami to confirm. The token needs Workers Scripts Edit plus D1 Edit permissions, or D1 API calls will return authentication errors.

Why does my Cloudflare API token fail on D1 database operations?

The Edit Cloudflare Workers template does not include D1 permissions, so D1 API calls return auth errors even though Worker deploys succeed. Add Account D1 Edit to the same token or create a custom token with Workers, D1, and KV scopes.

Does connecting Cloudflare in Zo Computer integrations authenticate Hermes MCP?

No. Zo Computer integrations store tokens on the Zo platform and do not populate ~/.hermes/mcp-tokens/. Hermes requires its own login via hermes mcp login or a shared API token credentials file.

How do I avoid OAuth re-authorization loops with Cloudflare MCP login?

Persist the PKCE verifier and state to disk before sending the authorize link, then complete the token exchange when the callback URL is pasted. Never start a new session for the same state; after two failures, switch to an API token.