Skip to content
Cloudflare Docs
API
Cloudflare Docs
API
GitHub icon
Visit API on GitHub
Set theme to dark (⇧+D)

API tokens permissions

Below is a list of all the Token Permissions that are available to use. The current list can be fetched via the API at any time.

User permissions

NameIDDescriptionApplicable Scope
API Tokens Read0cc3a61731504c89b99ec1be78b77aa0Grants read access to user's API Tokenscom.cloudflare.api.user
API Tokens Write686d18d5ac6c441c867cbf6771e58a0aGrants write access to user's API Tokenscom.cloudflare.api.user
Memberships Read3518d0f75557482e952c6762d3e64903Grants read access to a user's account memberships,com.cloudflare.api.user
Memberships Write9201bc6f42d440968aaab0c6f17ebb1dGrants write access to a user's account membershipscom.cloudflare.api.user
User Details Read8acbe5bb0d54464ab867149d7f7cf8acGrants read access to user detailscom.cloudflare.api.user
User Details Write55a5e17cc99e4a3fa1f3432d262f2e55Grants write access to user detailscom.cloudflare.api.user

Account permissions

NameIDDescriptionApplicable Scope
Access: Apps and Policies Read7ea222f6d5064cfa89ea366d7c1fee89Grants read access to Cloudflare Access zone resourcescom.cloudflare.api.account.zone
Access: Apps and Policies Write1e13c5124ca64b72b1969a67e8829049Grants write access to Cloudflare Access zone resourcescom.cloudflare.api.account.zone
Access: Organizations, Identity Providers, and Groups Read26bc23f853634eb4bff59983b9064fdeGrants read access to Cloudflare Access account resourcescom.cloudflare.api.account
Access: Organizations, Identity Providers, and Groups Writebfe0d8686a584fa680f4c53b5eb0de6dGrants write access to Cloudflare Access account resourcescom.cloudflare.api.account
Account Firewall Access Rules Readde7a688cc47d43bd9ea700b467a09c96Grants read access to account firewall access rulescom.cloudflare.api.account
Account Firewall Access Rules Writea416acf9ef5a4af19fb11ed3b96b1fe6Grants write access to account firewall access rulescom.cloudflare.api.account
Account Settings Readc1fde68c7bcc44588cbb6ddbc16d6480Grants read access to Account resources, account membership, and account level featurescom.cloudflare.api.account
Account Settings Write1af1fa2adc104452b74a9a3364202f20Grants write access to Account resources, account membership, and account level featurescom.cloudflare.api.account
Analytics Read9c88f9c5bce24ce7af9a958ba9c504dbGrants read access to analyticscom.cloudflare.api.account.zone
Apps Write094547ab6e77498c8c4dfa87fadd5c51Grants full access to Cloudflare Appscom.cloudflare.api.account.zone
Billing Read7cf72faf220841aabcfdfab81c43c4f6Grants read access to billing profile, subscriptions, and access to fetch invoices and entitlementscom.cloudflare.api.account
Billing Write6c80e02421494afc9ae14414ed442632Grants write access to billing profile, subscriptions, and access to fetch invoices and entitlementscom.cloudflare.api.account
Cache Purgee17beae8b8cb423a99b1730f21238bedGrants access to purge cachecom.cloudflare.api.account.zone
DNS Firewall Read5f48a472240a4b489a21d43bd19a06e1Grants read access to DNS Firewallcom.cloudflare.api.account
DNS Firewall Writeda6d2d6f2ec8442eaadda60d13f42bcaGrants write access to DNS Firewallcom.cloudflare.api.account
DNS Read82e64a83756745bbbb1c9c2701bf816bGrants read access to DNScom.cloudflare.api.account.zone
DNS Write4755a26eedb94da69e1066d98aa820beGrants write access to DNScom.cloudflare.api.account.zone
Firewall Services Read4ec32dfcb35641c5bb32d5ef1ab963b4Grants read access to Firewall resourcescom.cloudflare.api.account.zone
Firewall Services Write43137f8d07884d3198dc0ee77ca6e79bGrants write access to Firewall resourcescom.cloudflare.api.account.zone
IP Prefixes: BGP On Demand Reade763fae6ee95443b8f56f19213c5f2a5Grants access to read ip prefix bgp configurationcom.cloudflare.api.account
IP Prefixes: BGP On Demand Write2ae23e4939d54074b7d252d27ce75a77Grants access to read and change ip prefix bgp configurationcom.cloudflare.api.account
Load Balancers Reade9a975f628014f1d85b723993116f7d5Grants read access to load balancers and associated resourcescom.cloudflare.api.account.zone
Load Balancers Write6d7f2f5f5b1d4a0e9081fdc98d432fd1Grants write access to load balancers and associated resourcescom.cloudflare.api.account.zone
Load Balancing: Monitors and Pools Read9d24387c6e8544e2bc4024a03991339fGrants read access to account level load balancer resourcescom.cloudflare.api.account
Load Balancing: Monitors and Pools Writed2a1802cc9a34e30852f8b33869b2f3cGrants write access to account level load balancer resourcescom.cloudflare.api.account
Logs Readc4a30cd58c5d42619c86a3c36c441e2dGrants read access to logs and logpush jobscom.cloudflare.api.account.zone
Logs Write3e0b5820118e47f3922f7c989e673882Grants write access to logpush jobscom.cloudflare.api.account.zone
Page Rules Readb415b70a4fd1412886f164451f20405cGrants read access to Page Rulescom.cloudflare.api.account.zone
Page Rules Writeed07f6c337da4195b4e72a1fb2c6bcaeGrants write access to Page Rulescom.cloudflare.api.account.zone
SSL and Certificates Read7b7216b327b04b8fbc8f524e1f9b7531Grants read access to SSL configuration and cert managementcom.cloudflare.api.account.zone
SSL and Certificates Writec03055bc037c4ea9afb9a9f104b7b721Grants write access to SSL configuration and cert managementcom.cloudflare.api.account.zone
Stream Readde21485a24744b76a004aa153898f7feGrants read access to Cloudflare Streamcom.cloudflare.api.account
Stream Write714f9c13a5684c2885a793f5edb36f59Grants write access to Cloudflare Streamcom.cloudflare.api.account
Teams Read3f376c8e6f764a938b848bd01c8995c4Grants read access to teamscom.cloudflare.api.account
Teams Reportefb81b5cd37d49f3be1da9363a6d7a19Grants reporting access to teamscom.cloudflare.api.account
Teams Writeb33f02c6f7284e05a6f20741c0bb0567Grants write access to teamscom.cloudflare.api.account
Workers KV Storage Read8b47d2786a534c08a1f94ee8f9f599efGrants read access to Cloudflare Workers KV Storagecom.cloudflare.api.account
Workers KV Storage Writef7f0eda5697f475c90846e879bab8666Grants write access to Cloudflare Workers KV Storagecom.cloudflare.api.account
Workers Routes Read2072033d694d415a936eaeb94e6405b8Grants read access to Cloudflare Workers and Workers KV Storagecom.cloudflare.api.account.zone
Workers Routes Write28f4b596e7d643029c524985477ae49aGrants write access to Cloudflare Workers and Workers KV Storagecom.cloudflare.api.account.zone
Workers Scripts Read1a71c399035b4950a1bd1466bbe4f420Grants read access to Cloudflare Workers scriptscom.cloudflare.api.account
Workers Scripts Writee086da7e2179491d91ee5f35b3ca210aGrants write access to Cloudflare Workers scriptscom.cloudflare.api.account
Zone Readc8fed203ed3043cba015a93ad1616f1fGrants read access to zone managementcom.cloudflare.api.account.zone
Zone Settings Read517b21aee92c4d89936c976ba6e4be55Grants read access to zone settingscom.cloudflare.api.account.zone
Zone Settings Write3030687196b94b638145a3953da2b699Grants write access to zone settingscom.cloudflare.api.account.zone
Zone Writee6d2666161e84845a636613608cee8d5Grants write access to zone managementcom.cloudflare.api.account.zone

Zone permissions

NameIDDescriptionApplicable Scope
Access: Apps and Policies Read7ea222f6d5064cfa89ea366d7c1fee89Grants read access to Cloudflare Access zone resourcescom.cloudflare.api.account.zone
Access: Apps and Policies Write1e13c5124ca64b72b1969a67e8829049Grants write access to Cloudflare Access zone resourcescom.cloudflare.api.account.zone
Analytics Read9c88f9c5bce24ce7af9a958ba9c504dbGrants read access to analyticscom.cloudflare.api.account.zone
Apps Write094547ab6e77498c8c4dfa87fadd5c51Grants full access to Cloudflare Appscom.cloudflare.api.account.zone
Cache Purgee17beae8b8cb423a99b1730f21238bedGrants access to purge cachecom.cloudflare.api.account.zone
DNS Read82e64a83756745bbbb1c9c2701bf816bGrants read access to DNScom.cloudflare.api.account.zone
DNS Write4755a26eedb94da69e1066d98aa820beGrants write access to DNScom.cloudflare.api.account.zone
Firewall Services Read4ec32dfcb35641c5bb32d5ef1ab963b4Grants read access to Firewall resourcescom.cloudflare.api.account.zone
Firewall Services Write43137f8d07884d3198dc0ee77ca6e79bGrants write access to Firewall resourcescom.cloudflare.api.account.zone
Load Balancers Reade9a975f628014f1d85b723993116f7d5Grants read access to load balancers and associated resourcescom.cloudflare.api.account.zone
Load Balancers Write6d7f2f5f5b1d4a0e9081fdc98d432fd1Grants write access to load balancers and associated resourcescom.cloudflare.api.account.zone
Logs Readc4a30cd58c5d42619c86a3c36c441e2dGrants read access to logs and logpush jobscom.cloudflare.api.account.zone
Logs Write3e0b5820118e47f3922f7c989e673882Grants write access to logpush jobscom.cloudflare.api.account.zone
Page Rules Readb415b70a4fd1412886f164451f20405cGrants read access to Page Rulescom.cloudflare.api.account.zone
Page Rules Writeed07f6c337da4195b4e72a1fb2c6bcaeGrants write access to Page Rulescom.cloudflare.api.account.zone
SSL and Certificates Read7b7216b327b04b8fbc8f524e1f9b7531Grants read access to SSL configuration and cert managementcom.cloudflare.api.account.zone
SSL and Certificates Writec03055bc037c4ea9afb9a9f104b7b721Grants write access to SSL configuration and cert managementcom.cloudflare.api.account.zone
Workers Routes Read2072033d694d415a936eaeb94e6405b8Grants read access to Cloudflare Workers and Workers KV Storagecom.cloudflare.api.account.zone
Workers Routes Write28f4b596e7d643029c524985477ae49aGrants write access to Cloudflare Workers and Workers KV Storagecom.cloudflare.api.account.zone
Zone Readc8fed203ed3043cba015a93ad1616f1fGrants read access to zone managementcom.cloudflare.api.account.zone
Zone Settings Read517b21aee92c4d89936c976ba6e4be55Grants read access to zone settingscom.cloudflare.api.account.zone
Zone Settings Write3030687196b94b638145a3953da2b699Grants write access to zone settingscom.cloudflare.api.account.zone
Zone Writee6d2666161e84845a636613608cee8d5Grants write access to zone managementcom.cloudflare.api.account.zone