Cloudflare
Cloudflare is a comprehensive web performance, security, and DNS infrastructure platform that provides content delivery network (CDN) services, DDoS protection, Internet security, and distributed domain name server services. This integration enables organizations to query and manage their Cloudflare resources, configurations, and security policies for operational visibility, security auditing, compliance monitoring, and infrastructure management.
| Category | CDN, Network security |
| Direction | Query source |
| Sign-in | API Token or Legacy API Key, R2 Access Keys |
| Query languages | SQLite |
| Tables | 29 |
| Query templates | 115 |
| Website | cloudflare.com |
Before you start
Huntbase can sign in to Cloudflare with any of these methods: API Token or Legacy API Key, R2 Access Keys. Pick one, create the credential in Cloudflare, then keep it to hand for the Connect step.
API Token or Legacy API Key
Cloudflare API Token scoped to your account (recommended)
- In the Cloudflare dashboard, go to My Profile › API Tokens (user token) or Manage Account › API Tokens (account token) and click Create Token.
- Create a custom token and give it a name that explains its purpose.
- Add permissions with the Read access level only, and choose which resources (such as zones) the token can access.
- Select Continue to summary, review, then click Create Token and copy the secret. It is only shown once.
Permissions:
- Read access to the resources you want to query. Write access is not required.
R2 Access Keys
Access Key ID and Secret Access Key used to access Cloudflare R2 (S3-compatible).
- In the Cloudflare dashboard, open the R2 object storage page and, under Account Details, select Manage next to API Tokens.
- Choose Create Account API token or Create User API token.
- Under Permissions, select Admin Read only, or Object Read only and limit the token to specific buckets.
- Create the token and copy the Access Key ID and Secret Access Key. You cannot view the secret again.
Permissions:
- Admin Read only (account-wide read) or Object Read only (specific buckets)
- A connection covers a single Cloudflare account.
For the vendor's own instructions, see Cloudflare API token documentation.
Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.
Connect Cloudflare
- Go to Connections and click New connection, or click New connection on the Cloudflare product page.
- On Product, pick Cloudflare and choose the Owner.
- On Details, give the connection a Name and, optionally, a Description.
- On Connect, fill in the settings and credentials described below.
- On Verify, review the summary and click Create & check.
For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.
Settings
Where your Cloudflare lives:
| Field | Required | Notes |
|---|---|---|
| No | The email address of your Cloudflare account. Only needed with API Key (Legacy). | |
| Maximum Request Timeout (seconds) | No | |
| Maximum Retries | No |
Credentials
Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.
API Token or Legacy API Key
| Field | Required | Notes |
|---|---|---|
| API Token | Yes | An API token. This is the recommended option: use it instead of API Key (Legacy). Secret — not shown again after you save it. |
| API Key (Legacy) | Yes | Your Cloudflare API key. It is only used together with Email, and only if you do not provide an API Token. Secret — not shown again after you save it. |
R2 Access Keys
| Field | Required | Notes |
|---|---|---|
| R2 Access Key ID | Yes | Secret — not shown again after you save it. |
| R2 Secret Access Key | Yes | Secret — not shown again after you save it. |
Query it
Once connected, Cloudflare can serve these languages in a query tab, and Scout can use it when you ask in Auto:
| Language | Use it for |
|---|---|
| SQLite | SQL over the 29 tables listed below, alongside every other connected source. |
Example: SQLite
Query information about the user — Retrieve details of the current user profile to understand account status and settings.
select
*
from
cloudflare_user;
Cloudflare ships with 115 query templates. Find them in Library › Queries — see Query templates.
Tables
Cloudflare adds 29 tables. Browse their columns from Schema in the query bar's ⋯ menu.
All 29 tables
| Table | Contains |
|---|---|
cloudflare_access_application | Access Applications are used to restrict access to a whole application using an authorisation gateway managed by Cloudflare. |
cloudflare_access_group | Access Groups allows to define a set of users to which an application policy can be applied. |
cloudflare_access_policy | Access Policies define the users or groups who can, or cannot, reach the Application Resource. |
cloudflare_account | Accounts the user has access to. |
cloudflare_account_member | Cloudflare Account Member |
cloudflare_account_role | A Role defines what permissions a Member of an Account has. |
cloudflare_api_token | API tokens for the user. |
cloudflare_custom_certificate | Custom certificates are meant for Business and Enterprise customers who want to use their own SSL certificates. |
cloudflare_custom_page | |
cloudflare_dns_record | DNS records for a zone. |
cloudflare_firewall_rule | [DEPRECATED] Cloudflare Firewall Rules is a flexible and intuitive framework for filtering HTTP requests. |
cloudflare_healthcheck | A Health Check is a service that runs on Cloudflare’s edge network to monitor whether an origin server is online. |
cloudflare_load_balancer | Cloudflare Load balancers allows to distribute traffic across servers, which reduces server strain and latency and improves the experience for end users. |
cloudflare_load_balancer_monitor | A monitor issues health checks at regular intervals to evaluate the health of an origin pool. |
cloudflare_load_balancer_pool | A pool is a group of origin servers, with each origin identified by its IP address or hostname. |
cloudflare_logpush_job | Cloudflare Logpush job is a configuration that automatically ships log data from a specific zone or account to a chosen external destination in near real‑time batch delivery |
cloudflare_managed_transform | Managed Transforms allow you to perform common adjustments to HTTP request and response headers with the click of a button. |
cloudflare_notification_policy | Cloudflare Notifications help you stay up to date with your Cloudflare account. |
cloudflare_page_rule | Page Rules gives the ability to control how Cloudflare works on a URL or subdomain basis. |
cloudflare_r2_bucket | Cloudflare R2 Buckets |
cloudflare_r2_object | List Cloudflare R2 Objects by bucket name |
cloudflare_r2_object_data | List content of specific Cloudflare R2 objects by bucket name |
cloudflare_ruleset | Cloudflare Rulesets provide a powerful framework for configuring rules to process HTTP requests. |
cloudflare_user | Information about the current user making the request. |
cloudflare_user_audit_log | Cloudflare User Audit Logs |
cloudflare_worker_route | Routes are basic patterns used to enable or disable workers that match requests. |
cloudflare_worker_script | Cloudflare Worker Scripts host custom serverless code executed at Cloudflare’s edge for enhanced logic, routing, and performance optimizations. |
cloudflare_zone | A Zone is a domain name along with its subdomains and other identities. |
cloudflare_zone_setting | Individual zone settings that control various Cloudflare features for a zone. |
Next steps
- Connections — health, credentials and settings after you connect
- Query languages — syntax, parameters and time ranges
- Chatting with Scout — ask questions without writing a query
- All integrations — the rest of the catalog