Guides
Global API Key
Legacy authentication method (less secure but simpler)
Security Warning
Global API Key provides full access to your Cloudflare account. Use API Token instead for better security.
How to Get Global API Key
- Go to your Cloudflare profile pagehere
- Scroll down to the "API Keys" section
- Click "View" next to "Global API Key"
- Enter your Cloudflare password to reveal the key
••••••••••••••••••••••••••••••••API Token (Recommended)
More secure authentication method with granular permissions
Recommended
API Token is more secure because it only grants specific permissions you choose, not full account access.
How to Create API Token
- Go to your Cloudflare API Tokens pagehere
- Click "Create Token" button
- Use "Edit zone DNS" template as a starting point
- Add the required permissions listed below
- Click "Continue to summary" then "Create Token"
Required Permissions
Add these permissions to your API Token for full aioflare functionality
Zone - DNS - Edit
Required for adding, editing, and deleting DNS records
• Permission: Zone
• Resource: DNS
• Access: Edit → Zone Resources: All zones
Zone - Zone - Edit
Required for adding and removing domains/zones
• Permission: Zone
• Resource: Zone
• Access: Edit → Zone Resources: All zones
Zone - Zone Settings - Edit
Required for development mode toggle and page rules (for redirect)(Includes: development mode, page rules for redirect)
• Permission: Zone
• Resource: Zone Settings
• Access: Edit → Zone Resources: All zones
Zone - Cache Purge - Edit
Required for purging cached content from Cloudflare CDN
• Permission: Zone
• Resource: Cache Purge
• Access: Purge → Zone Resources: All zones
Zone - Bot Management - Edit
Required for enabling/disabling Bot Fight Mode and bot protection settings
• Permission: Zone
• Resource: Bot Management
• Access: Edit → Zone Resources: All zones
Zone - Analytics - Read
Required for viewing zone analytics data and traffic statisticsNote: This permission may not be available on all Cloudflare accounts
• Permission: Zone
• Resource: Analytics
• Access: Read → Zone Resources: All zones
Account - Account Settings - Read
Required for reading account information and API usage
• Permission: Account
• Resource: Account Settings
• Access: Read → Account Resources: Include → Select your account