Cloud

Cloudflare

cloudflare-pp-cli

Agent-ready CLI for Cloudflare accounts, zones, DNS, Workers, Pages, R2, tunnels, Zero Trust, and infrastructure operations.

Printed by @cathrynlavery (Cathryn Lavery)

Install

npx — recommended

npx -y @mvanhorn/printing-press-library install cloudflare

Installs the CLI binary and the agent skill (Claude Code, Codex, Cursor, Gemini CLI, Copilot, and more). Add --cli-only or --skill-only for one half. Requires Node.

Hermes

hermes skills install mvanhorn/printing-press-library/cli-skills/pp-cloudflare --force

From the Hermes CLI. Inside a chat session use /skills install with the same path.

OpenClaw

Install the pp-cloudflare skill from https://github.com/mvanhorn/printing-press-library/tree/main/cli-skills/pp-cloudflare. The skill defines how its required CLI can be installed.

Paste this to your OpenClaw agent — the skill describes how to install its CLI.

Claude Desktop

This CLI ships an MCPB bundle. Download the latest release .mcpb and double-click it — Claude Desktop walks you through the install.

View source on GitHub →

cloudflare-pp-cli is an agent-ready command-line interface for the Cloudflare v4 API. It turns Cloudflare's large API surface into scriptable, discoverable commands for accounts, zones, DNS, Workers, Pages, R2, Email Routing, tunnels, Zero Trust, Radar, and billing-adjacent operations.

Use it when an agent or operator needs to inspect or change Cloudflare resources without dashboard spelunking: diagnose a zone, verify token permissions, connect a domain, deploy or roll back a Pages/Workers project, manage Worker secrets, or bootstrap agent infrastructure with R2, D1, KV, Queues, Vectorize, and AI Gateway.

Authentication is token-first. Create a scoped API token from the Cloudflare dashboard and expose it as CLOUDFLARE_API_TOKEN, or store it with cloudflare-pp-cli auth set-token. Prefer narrow tokens for day-to-day workflows; use the built-in token recipe and doctor commands to work out which permissions a workflow actually needs.

Quick Start

1. Install

See Install above.

2. Set Up Credentials

Get your access token from your API provider's developer portal, then store it:

cloudflare-pp-cli auth set-token YOUR_TOKEN_HERE

Or set it via environment variable:

export CLOUDFLARE_API_TOKEN="your-token-here"

3. Verify Setup

cloudflare-pp-cli doctor

This checks your configuration and credentials.

4. Try Your First Command

cloudflare-pp-cli accounts list

Usage

Run cloudflare-pp-cli --help for the full command reference and flag list.

Commands

accounts

Manage accounts

cloudflare-pp-cli accounts batch-move - Batch move a collection of accounts to a specific organization. ⚠️ Not implemented.
cloudflare-pp-cli accounts creation - Create an account (only available for tenant admins at this time)
cloudflare-pp-cli accounts deletion - Delete a specific account (only available for tenant admins at this time). This is a permanent operation that will delete any zones or other resources under the account
cloudflare-pp-cli accounts details - Get information about a specific account that you are a member of.
cloudflare-pp-cli accounts list - List all accounts you have ownership or verified access to.
cloudflare-pp-cli accounts update - Update an existing account.

certificates

Manage certificates

cloudflare-pp-cli certificates origin-ca-create - Create an Origin CA certificate. You can use an Origin CA Key as your User Service Key or an API token when calling this endpoint (see above).
cloudflare-pp-cli certificates origin-ca-get - Get an existing Origin CA certificate by its serial number. You can use an Origin CA Key as your User Service Key or an API token when calling this endpoint (see above).
cloudflare-pp-cli certificates origin-ca-list - List all existing Origin CA certificates for a given zone. You can use an Origin CA Key as your User Service Key or an API token when calling this endpoint (see above).
cloudflare-pp-cli certificates origin-ca-revoke - Revoke an existing Origin CA certificate by its serial number. You can use an Origin CA Key as your User Service Key or an API token when calling this endpoint (see above).

internal

Manage internal

cloudflare-pp-cli internal - Internal route for testing URL submissions

ips

Manage ips

cloudflare-pp-cli ips - Get IPs used on the Cloudflare/JD Cloud network, see https://www.cloudflare.com/ips for Cloudflare IPs or https://developers.cloudflare.com/china-network/reference/infrastructure/ for JD Cloud IPs.

live

Manage live

cloudflare-pp-cli live - Return a success message after running liveness checks

memberships

Manage memberships

cloudflare-pp-cli memberships user-s-account-delete - Remove the associated member from an account.
cloudflare-pp-cli memberships user-s-account-details - Get a specific membership.
cloudflare-pp-cli memberships user-s-account-list - List memberships of accounts the user can access.
cloudflare-pp-cli memberships user-s-account-update - Accept or reject this account invitation.

oauth

Manage oauth

cloudflare-pp-cli oauth - List all available OAuth scopes. This endpoint requires authentication but has no authorization role requirements.

organizations

Manage organizations

cloudflare-pp-cli organizations create-user - Create a new organization for a user. (Currently in Public Beta - see https://developers.cloudflare.com/fundamentals/organizations/)
cloudflare-pp-cli organizations delete - Delete an organization. The organization MUST be empty before deleting. It must not contain any sub-organizations, accounts, members or users. (Currently in Public Beta - see https://developers.cloudflare.com/fundamentals/organizations/)

Access Control: Restricted to enterprise organizations.

cloudflare-pp-cli organizations list - Retrieve a list of organizations a particular user has access to. (Currently in Public Beta - see https://developers.cloudflare.com/fundamentals/organizations/)
cloudflare-pp-cli organizations modify - Modify organization. (Currently in Public Beta - see https://developers.cloudflare.com/fundamentals/organizations/)
cloudflare-pp-cli organizations retrieve - Retrieve the details of a certain organization. (Currently in Public Beta - see https://developers.cloudflare.com/fundamentals/organizations/)

radar

Manage radar

cloudflare-pp-cli radar get-agent-readiness-summary - Returns a summary of AI agent readiness scores across scanned domains, grouped by the specified dimension. Data is sourced from weekly bulk scans. All values are raw domain counts.
cloudflare-pp-cli radar get-ai-bots-summary - Retrieves an aggregated summary of AI bots HTTP requests grouped by the specified dimension.
cloudflare-pp-cli radar get-ai-bots-summary-by-user-agent - Retrieves the distribution of traffic by AI user agent.
cloudflare-pp-cli radar get-ai-bots-timeseries - Retrieves AI bots HTTP request volume over time.
cloudflare-pp-cli radar get-ai-bots-timeseries-group - Retrieves the distribution of HTTP requests from AI bots, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-ai-bots-timeseries-group-by-user-agent - Retrieves the distribution of traffic by AI user agent over time.
cloudflare-pp-cli radar get-ai-inference-summary - Retrieves an aggregated summary of unique accounts using Workers AI inference grouped by the specified dimension.
cloudflare-pp-cli radar get-ai-inference-summary-by-model - Retrieves the distribution of unique accounts by model.
cloudflare-pp-cli radar get-ai-inference-summary-by-task - Retrieves the distribution of unique accounts by task.
cloudflare-pp-cli radar get-ai-inference-timeseries-group - Retrieves the distribution of unique accounts using Workers AI inference, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-ai-inference-timeseries-group-by-model - Retrieves the distribution of unique accounts by model over time.
cloudflare-pp-cli radar get-ai-inference-timeseries-group-by-task - Retrieves the distribution of unique accounts by task over time.
cloudflare-pp-cli radar get-ai-markdown-for-agents-summary - Retrieves the overall median HTML-to-markdown reduction ratio for AI agent requests over the given date range.
cloudflare-pp-cli radar get-ai-markdown-for-agents-timeseries - Retrieves the median HTML-to-markdown reduction ratio over time for AI agent requests.
cloudflare-pp-cli radar get-annotations - Retrieves the latest annotations.
cloudflare-pp-cli radar get-annotations-outages - Retrieves the latest Internet outages and anomalies.
cloudflare-pp-cli radar get-annotations-outages-top - Retrieves the number of outages by location.
cloudflare-pp-cli radar get-as-botnet-threat-feed - Retrieves a ranked list of Autonomous Systems based on their presence in the Cloudflare Botnet Threat Feed. Rankings can be sorted by offense count or number of bad IPs. Optionally compare to a previous date to see rank changes.
cloudflare-pp-cli radar get-asns-as-set - Retrieves Internet Routing Registry AS-SETs that an AS is a member of.
cloudflare-pp-cli radar get-asns-rel - Retrieves AS-level relationship for given networks.
cloudflare-pp-cli radar get-attacks-layer3-summary - Retrieves the distribution of layer 3 attacks by the specified dimension.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-bitrate - Retrieves the distribution of layer 3 attacks by bitrate.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-duration - Retrieves the distribution of layer 3 attacks by duration.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-industry - Retrieves the distribution of layer 3 attacks by targeted industry.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-ip-version - Retrieves the distribution of layer 3 attacks by IP version.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-protocol - Retrieves the distribution of layer 3 attacks by protocol.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-vector - Retrieves the distribution of layer 3 attacks by vector.
cloudflare-pp-cli radar get-attacks-layer3-summary-by-vertical - Retrieves the distribution of layer 3 attacks by targeted vertical.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-by-bytes - Get layer 3 attacks by bytes time series
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group - Retrieves the distribution of layer 3 attacks grouped by dimension over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-bitrate - Retrieves the distribution of layer 3 attacks by bitrate over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-duration - Retrieves the distribution of layer 3 attacks by duration over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-industry - Retrieves the distribution of layer 3 attacks by targeted industry over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-ip-version - Retrieves the distribution of layer 3 attacks by IP version over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-protocol - Retrieves the distribution of layer 3 attacks by protocol over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-vector - Retrieves the distribution of layer 3 attacks by vector over time.
cloudflare-pp-cli radar get-attacks-layer3-timeseries-group-by-vertical - Retrieves the distribution of layer 3 attacks by targeted vertical over time.
cloudflare-pp-cli radar get-attacks-layer3-top-attacks - Retrieves the top layer 3 attacks from origin to target location. Values are a percentage out of the total layer 3 attacks (with billing country). You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).
cloudflare-pp-cli radar get-attacks-layer3-top-industries - This endpoint is deprecated. To continue getting this data, switch to the summary by industry endpoint.
cloudflare-pp-cli radar get-attacks-layer3-top-origin-locations - Retrieves the origin locations of layer 3 attacks.
cloudflare-pp-cli radar get-attacks-layer3-top-target-locations - Retrieves the target locations of layer 3 attacks.
cloudflare-pp-cli radar get-attacks-layer3-top-verticals - This endpoint is deprecated. To continue getting this data, switch to the summary by vertical endpoint.
cloudflare-pp-cli radar get-attacks-layer7-summary - Retrieves the distribution of layer 7 attacks by the specified dimension.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-http-method - Retrieves the distribution of layer 7 attacks by HTTP method.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-http-version - Retrieves the distribution of layer 7 attacks by HTTP version.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-industry - Retrieves the distribution of layer 7 attacks by targeted industry.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-ip-version - Retrieves the distribution of layer 7 attacks by IP version.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-managed-rules - Retrieves the distribution of layer 7 attacks by managed rules.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-mitigation-product - Retrieves the distribution of layer 7 attacks by mitigation product.
cloudflare-pp-cli radar get-attacks-layer7-summary-by-vertical - Retrieves the distribution of layer 7 attacks by targeted vertical.
cloudflare-pp-cli radar get-attacks-layer7-timeseries - Retrieves layer 7 attacks over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group - Retrieves the distribution of layer 7 attacks grouped by dimension over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-http-method - Retrieves the distribution of layer 7 attacks by HTTP method over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-http-version - Retrieves the distribution of layer 7 attacks by HTTP version over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-industry - Retrieves the distribution of layer 7 attacks by targeted industry over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-ip-version - Retrieves the distribution of layer 7 attacks by IP version used over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-managed-rules - Retrieves the distribution of layer 7 attacks by managed rules over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-mitigation-product - Retrieves the distribution of layer 7 attacks by mitigation product over time.
cloudflare-pp-cli radar get-attacks-layer7-timeseries-group-by-vertical - Retrieves the distribution of layer 7 attacks by targeted vertical over time.
cloudflare-pp-cli radar get-attacks-layer7-top-attacks - Retrieves the top attacks from origin to target location. Values are percentages of the total layer 7 attacks (with billing country). The attack magnitude can be defined by the number of mitigated requests or by the number of zones affected. You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).
cloudflare-pp-cli radar get-attacks-layer7-top-industries - This endpoint is deprecated. To continue getting this data, switch to the summary by industry endpoint.
cloudflare-pp-cli radar get-attacks-layer7-top-origin-as - Retrieves the top origin autonomous systems of layer 7 attacks. Values are percentages of the total layer 7 attacks, with the origin autonomous systems determined by the client IP address.
cloudflare-pp-cli radar get-attacks-layer7-top-origin-location - Retrieves the top origin locations of layer 7 attacks. Values are percentages of the total layer 7 attacks, with the origin location determined by the client IP address.
cloudflare-pp-cli radar get-attacks-layer7-top-target-location - Retrieves the top target locations of and by layer 7 attacks. Values are a percentage out of the total layer 7 attacks. The target location is determined by the attacked zone's billing country, when available.
cloudflare-pp-cli radar get-attacks-layer7-top-verticals - This endpoint is deprecated. To continue getting this data, switch to the summary by vertical endpoint.
cloudflare-pp-cli radar get-bgp-hijacks-events - Retrieves the BGP hijack events.
cloudflare-pp-cli radar get-bgp-ips-timeseries - Retrieves time series data for the announced IP space count, represented as the number of IPv4 /24s and IPv6 /48s, for a given ASN.
cloudflare-pp-cli radar get-bgp-ips-top-ases - Returns the top-N autonomous systems by announced IP space at the nearest 8-hour RIB boundary at or before the requested date. The snapped boundary is returned as anchor_ts.
cloudflare-pp-cli radar get-bgp-pfx2as - Retrieves the prefix-to-ASN mapping from global routing tables.
cloudflare-pp-cli radar get-bgp-pfx2as-moas - Retrieves all Multi-Origin AS (MOAS) prefixes in the global routing tables.
cloudflare-pp-cli radar get-bgp-route-leak-events - Retrieves the BGP route leak events.
cloudflare-pp-cli radar get-bgp-routes-asns - Retrieves all ASes in the current global routing tables with routing statistics.
cloudflare-pp-cli radar get-bgp-routes-realtime - Retrieves real-time BGP routes for a prefix, using public real-time data collectors (RouteViews and RIPE RIS).
cloudflare-pp-cli radar get-bgp-routes-stats - Retrieves the BGP routing table stats.
cloudflare-pp-cli radar get-bgp-rpki-aspa-changes - Retrieves ASPA (Autonomous System Provider Authorization) changes over time. Returns daily aggregated changes including additions, removals, and modifications of ASPA objects.
cloudflare-pp-cli radar get-bgp-rpki-aspa-snapshot - Retrieves current or historical ASPA (Autonomous System Provider Authorization) objects. ASPA objects define which ASNs are authorized upstream providers for a customer ASN.
cloudflare-pp-cli radar get-bgp-rpki-aspa-timeseries - Retrieves ASPA (Autonomous System Provider Authorization) object count over time. Supports filtering by RIR or location (country code) to generate multiple named series. If no RIR or location filter is specified, returns total count.
cloudflare-pp-cli radar get-bgp-rpki-roas-timeseries - Retrieves RPKI ROA (Route Origin Authorization) validation ratios over time. Returns the selected metric as a time series. Supports filtering by ASN or location (country code) — multiple values of the same filter type produce one series per value. If no ASN or location is specified, returns the global aggregate.
cloudflare-pp-cli radar get-bgp-timeseries - Retrieves BGP updates over time. When requesting updates for an autonomous system, only BGP updates of type announcement are returned.
cloudflare-pp-cli radar get-bgp-top-ases - Retrieves the top autonomous systems by BGP updates (announcements only).
cloudflare-pp-cli radar get-bgp-top-asns-by-prefixes - Retrieves the full list of autonomous systems on the global routing table ordered by announced prefixes count. The data comes from public BGP MRT data archives and updates every 2 hours.
cloudflare-pp-cli radar get-bgp-top-prefixes - Retrieves the top network prefixes by BGP updates.
cloudflare-pp-cli radar get-bot-details - Retrieves the requested bot information.
cloudflare-pp-cli radar get-bots - Retrieves a list of bots.
cloudflare-pp-cli radar get-bots-summary - Retrieves an aggregated summary of bots HTTP requests grouped by the specified dimension.
cloudflare-pp-cli radar get-bots-timeseries - Retrieves bots HTTP request volume over time.
cloudflare-pp-cli radar get-bots-timeseries-group - Retrieves the distribution of HTTP requests from bots, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-certificate-authorities - Retrieves a list of certificate authorities.
cloudflare-pp-cli radar get-certificate-authority-details - Retrieves the requested CA information.
cloudflare-pp-cli radar get-certificate-log-details - Retrieves the requested certificate log information.
cloudflare-pp-cli radar get-certificate-logs - Retrieves a list of certificate logs.
cloudflare-pp-cli radar get-crawlers-summary - Retrieves an aggregated summary of HTTP requests from crawlers, grouped by the specified dimension.
cloudflare-pp-cli radar get-crawlers-timeseries-group - Retrieves the distribution of HTTP requests from crawlers, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-ct-summary - Retrieves an aggregated summary of certificates grouped by the specified dimension.
cloudflare-pp-cli radar get-ct-timeseries - Retrieves certificate volume over time.
cloudflare-pp-cli radar get-ct-timeseries-group - Retrieves the distribution of certificates grouped by the specified dimension over time.
cloudflare-pp-cli radar get-dns-as112-summary - Retrieves the distribution of AS112 queries by the specified dimension.
cloudflare-pp-cli radar get-dns-as112-timeseries - Retrieves the AS112 DNS queries over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-dnssec - Retrieves the distribution of DNS queries to AS112 by DNSSEC (DNS Security Extensions) support.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-edns - Retrieves the distribution of DNS queries to AS112 by EDNS (Extension Mechanisms for DNS) support.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-ip-version - Retrieves the distribution of DNS queries to AS112 by IP version.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-protocol - Retrieves the distribution of DNS queries to AS112 by protocol.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-query-type - Retrieves the distribution of DNS queries to AS112 by type.
cloudflare-pp-cli radar get-dns-as112-timeseries-by-response-codes - Retrieves the distribution of AS112 DNS requests classified by response code.
cloudflare-pp-cli radar get-dns-as112-timeseries-group - Retrieves the distribution of AS112 queries grouped by dimension over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-dnssec - Retrieves the distribution of AS112 DNS queries by DNSSEC (DNS Security Extensions) support over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-edns - Retrieves the distribution of AS112 DNS queries by EDNS (Extension Mechanisms for DNS) support over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-ip-version - Retrieves the distribution of AS112 DNS queries by IP version over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-protocol - Retrieves the distribution of AS112 DNS requests classified by protocol over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-query-type - Retrieves the distribution of AS112 DNS queries by type over time.
cloudflare-pp-cli radar get-dns-as112-timeseries-group-by-response-codes - Retrieves the distribution of AS112 DNS requests classified by response code over time.
cloudflare-pp-cli radar get-dns-as112-top-locations - Retrieves the top locations by AS112 DNS queries.
cloudflare-pp-cli radar get-dns-as112-top-locations-by-dnssec - Retrieves the top locations of DNS queries to AS112 with DNSSEC (DNS Security Extensions) support.
cloudflare-pp-cli radar get-dns-as112-top-locations-by-edns - Retrieves the top locations of DNS queries to AS112 with EDNS (Extension Mechanisms for DNS) support.
cloudflare-pp-cli radar get-dns-as112-top-locations-by-ip-version - Retrieves the top locations of DNS queries to AS112 for an IP version.
cloudflare-pp-cli radar get-dns-summary - Retrieves the distribution of DNS queries by the specified dimension.
cloudflare-pp-cli radar get-dns-summary-by-cache-hit-status - Retrieves the distribution of DNS queries by cache status.
cloudflare-pp-cli radar get-dns-summary-by-dnssec - Retrieves the distribution of DNS responses by DNSSEC (DNS Security Extensions) support.
cloudflare-pp-cli radar get-dns-summary-by-dnssec-awareness - Retrieves the distribution of DNS queries by DNSSEC (DNS Security Extensions) client awareness.
cloudflare-pp-cli radar get-dns-summary-by-dnssec-e2e-version - Retrieves the distribution of DNSSEC-validated answers by end-to-end security status.
cloudflare-pp-cli radar get-dns-summary-by-ip-version - Retrieves the distribution of DNS queries by IP version.
cloudflare-pp-cli radar get-dns-summary-by-matching-answer-status - Retrieves the distribution of DNS queries by matching answers.
cloudflare-pp-cli radar get-dns-summary-by-protocol - Retrieves the distribution of DNS queries by DNS transport protocol.
cloudflare-pp-cli radar get-dns-summary-by-query-type - Retrieves the distribution of DNS queries by type.
cloudflare-pp-cli radar get-dns-summary-by-response-code - Retrieves the distribution of DNS queries by response code.
cloudflare-pp-cli radar get-dns-summary-by-response-ttl - Retrieves the distribution of DNS queries by minimum response TTL.
cloudflare-pp-cli radar get-dns-timeseries - Retrieves normalized query volume to the 1.1.1.1 DNS resolver over time.
cloudflare-pp-cli radar get-dns-timeseries-group - Retrieves the distribution of DNS queries grouped by dimension over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-cache-hit-status - Retrieves the distribution of DNS queries by cache status over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-dnssec - Retrieves the distribution of DNS responses by DNSSEC (DNS Security Extensions) support over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-dnssec-awareness - Retrieves the distribution of DNS queries by DNSSEC (DNS Security Extensions) client awareness over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-dnssec-e2e-version - Retrieves the distribution of DNSSEC-validated answers by end-to-end security status over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-ip-version - Retrieves the distribution of DNS queries by IP version over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-matching-answer-status - Retrieves the distribution of DNS queries by matching answers over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-protocol - Retrieves the distribution of DNS queries by DNS transport protocol over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-query-type - Retrieves the distribution of DNS queries by type over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-response-code - Retrieves the distribution of DNS queries by response code over time.
cloudflare-pp-cli radar get-dns-timeseries-group-by-response-ttl - Retrieves the distribution of DNS queries by minimum answer TTL over time.
cloudflare-pp-cli radar get-dns-top-ases - Retrieves the top autonomous systems by DNS queries made to 1.1.1.1 DNS resolver.
cloudflare-pp-cli radar get-dns-top-locations - Retrieves the top locations by DNS queries made to 1.1.1.1 DNS resolver.
cloudflare-pp-cli radar get-email-routing-summary - Retrieves the distribution of email routing metrics by the specified dimension.
cloudflare-pp-cli radar get-email-routing-summary-by-arc - Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation.
cloudflare-pp-cli radar get-email-routing-summary-by-dkim - Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation.
cloudflare-pp-cli radar get-email-routing-summary-by-dmarc - Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation.
cloudflare-pp-cli radar get-email-routing-summary-by-encrypted - Retrieves the distribution of emails by encryption status (encrypted vs. not-encrypted).
cloudflare-pp-cli radar get-email-routing-summary-by-ip-version - Retrieves the distribution of emails by IP version.
cloudflare-pp-cli radar get-email-routing-summary-by-spf - Retrieves the distribution of emails by SPF (Sender Policy Framework) validation.
cloudflare-pp-cli radar get-email-routing-timeseries-group - Retrieves the distribution of email routing metrics grouped by dimension over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-arc - Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-dkim - Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-dmarc - Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-encrypted - Retrieves the distribution of emails by encryption status (encrypted vs. not-encrypted) over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-ip-version - Retrieves the distribution of emails by IP version over time.
cloudflare-pp-cli radar get-email-routing-timeseries-group-by-spf - Retrieves the distribution of emails by SPF (Sender Policy Framework) validation over time.
cloudflare-pp-cli radar get-email-security-summary - Retrieves the distribution of email security metrics by the specified dimension.
cloudflare-pp-cli radar get-email-security-summary-by-arc - Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation.
cloudflare-pp-cli radar get-email-security-summary-by-dkim - Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation.
cloudflare-pp-cli radar get-email-security-summary-by-dmarc - Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation.
cloudflare-pp-cli radar get-email-security-summary-by-malicious - Retrieves the distribution of emails by malicious classification.
cloudflare-pp-cli radar get-email-security-summary-by-spam - Retrieves the proportion of emails by spam classification (spam vs. non-spam).
cloudflare-pp-cli radar get-email-security-summary-by-spf - Retrieves the distribution of emails by SPF (Sender Policy Framework) validation.
cloudflare-pp-cli radar get-email-security-summary-by-spoof - Retrieves the proportion of emails by spoof classification (spoof vs. non-spoof).
cloudflare-pp-cli radar get-email-security-summary-by-threat-category - Retrieves the distribution of emails by threat categories.
cloudflare-pp-cli radar get-email-security-summary-by-tls-version - Retrieves the distribution of emails by TLS version.
cloudflare-pp-cli radar get-email-security-timeseries-group - Retrieves the distribution of email security metrics grouped by dimension over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-arc - Retrieves the distribution of emails by ARC (Authenticated Received Chain) validation over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-dkim - Retrieves the distribution of emails by DKIM (DomainKeys Identified Mail) validation over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-dmarc - Retrieves the distribution of emails by DMARC (Domain-based Message Authentication, Reporting and Conformance) validation over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-malicious - Retrieves the distribution of emails by malicious classification over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-spam - Retrieves the distribution of emails by spam classification (spam vs. non-spam) over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-spf - Retrieves the distribution of emails by SPF (Sender Policy Framework) validation over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-spoof - Retrieves the distribution of emails by spoof classification (spoof vs. non-spoof) over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-threat-category - Retrieves the distribution of emails by threat category over time.
cloudflare-pp-cli radar get-email-security-timeseries-group-by-tls-version - Retrieves the distribution of emails by TLS version over time.
cloudflare-pp-cli radar get-email-security-top-tlds-by-malicious - Retrieves the top TLDs by emails classified as malicious or not.
cloudflare-pp-cli radar get-email-security-top-tlds-by-messages - Retrieves the top TLDs by number of email messages.
cloudflare-pp-cli radar get-email-security-top-tlds-by-spam - Retrieves the top TLDs by emails classified as spam or not.
cloudflare-pp-cli radar get-email-security-top-tlds-by-spoof - Retrieves the top TLDs by emails classified as spoof or not.
cloudflare-pp-cli radar get-entities-asn-by-id - Retrieves the requested autonomous system information. (A confidence level below 5 indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this AS). Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
cloudflare-pp-cli radar get-entities-asn-by-ip - Retrieves the requested autonomous system information based on IP address. Population estimates come from APNIC (refer to https://labs.apnic.net/?p=526).
cloudflare-pp-cli radar get-entities-asn-list - Retrieves a list of autonomous systems.
cloudflare-pp-cli radar get-entities-ip - Retrieves IP address information.
cloudflare-pp-cli radar get-entities-location-by-alpha2 - Retrieves the requested location information. (A confidence level below 5 indicates a low level of confidence in the traffic data - normally this happens because Cloudflare has a small amount of traffic from/to this location).
cloudflare-pp-cli radar get-entities-locations - Retrieves a list of locations.
cloudflare-pp-cli radar get-geolocation-details - Retrieves the requested Geolocation information. Geolocation names can be localized by sending an Accept-Language HTTP header with a BCP 47 language tag (e.g., Accept-Language: pt-PT). The full quality-value chain is supported (e.g., pt-PT,pt;q=0.9,en;q=0.8).
cloudflare-pp-cli radar get-geolocations - Retrieves a list of geolocations. Geolocation names can be localized by sending an Accept-Language HTTP header with a BCP 47 language tag (e.g., Accept-Language: pt-PT). The full quality-value chain is supported (e.g., pt-PT,pt;q=0.9,en;q=0.8).
cloudflare-pp-cli radar get-http-summary - Retrieves the distribution of HTTP requests by the specified dimension.
cloudflare-pp-cli radar get-http-summary-by-bot-class - Retrieves the distribution of bot-generated HTTP requests to genuine human traffic, as classified by Cloudflare. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
cloudflare-pp-cli radar get-http-summary-by-device-type - Retrieves the distribution of HTTP requests generated by mobile, desktop, and other types of devices.
cloudflare-pp-cli radar get-http-summary-by-http-protocol - Retrieves the distribution of HTTP requests by HTTP protocol (HTTP vs. HTTPS).
cloudflare-pp-cli radar get-http-summary-by-http-version - Retrieves the distribution of HTTP requests by HTTP version.
cloudflare-pp-cli radar get-http-summary-by-ip-version - Retrieves the distribution of HTTP requests by IP version.
cloudflare-pp-cli radar get-http-summary-by-operating-system - Retrieves the distribution of HTTP requests by operating system (Windows, macOS, Android, iOS, and others).
cloudflare-pp-cli radar get-http-summary-by-post-quantum - Retrieves the distribution of HTTP requests by post-quantum support.
cloudflare-pp-cli radar get-http-summary-by-tls-version - Retrieves the distribution of HTTP requests by TLS version.
cloudflare-pp-cli radar get-http-timeseries - Retrieves the HTTP requests over time.
cloudflare-pp-cli radar get-http-timeseries-group - Retrieves the distribution of HTTP requests grouped by dimension.
cloudflare-pp-cli radar get-http-timeseries-group-by-bot-class - Retrieves the distribution of HTTP requests classified as automated or human over time. Visit https://developers.cloudflare.com/radar/concepts/bot-classes/ for more information.
cloudflare-pp-cli radar get-http-timeseries-group-by-browser-families - Retrieves the distribution of HTTP requests by user agent family over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-browsers - Retrieves the distribution of HTTP requests by user agent over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-device-type - Retrieves the distribution of HTTP requests by device type over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-http-protocol - Retrieves the distribution of HTTP requests by HTTP protocol (HTTP vs. HTTPS) over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-http-version - Retrieves the distribution of HTTP requests by HTTP version over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-ip-version - Retrieves the distribution of HTTP requests by IP version over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-operating-system - Retrieves the distribution of HTTP requests by operating system over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-post-quantum - Retrieves the distribution of HTTP requests by post-quantum support over time.
cloudflare-pp-cli radar get-http-timeseries-group-by-tls-version - Retrieves the distribution of HTTP requests by TLS version over time.
cloudflare-pp-cli radar get-http-top-ases-by-bot-class - Retrieves the top autonomous systems, by HTTP requests, of the requested bot class.
cloudflare-pp-cli radar get-http-top-ases-by-browser-family - Retrieves the top autonomous systems, by HTTP requests, of the requested browser family.
cloudflare-pp-cli radar get-http-top-ases-by-device-type - Retrieves the top autonomous systems, by HTTP requests, of the requested device type.
cloudflare-pp-cli radar get-http-top-ases-by-http-protocol - Retrieves the top autonomous systems, by HTTP requests, of the requested HTTP protocol.
cloudflare-pp-cli radar get-http-top-ases-by-http-requests - Retrieves the top autonomous systems by HTTP requests.
cloudflare-pp-cli radar get-http-top-ases-by-http-version - Retrieves the top autonomous systems, by HTTP requests, of the requested HTTP version.
cloudflare-pp-cli radar get-http-top-ases-by-ip-version - Retrieves the top autonomous systems, by HTTP requests, of the requested IP version.
cloudflare-pp-cli radar get-http-top-ases-by-operating-system - Retrieves the top autonomous systems, by HTTP requests, of the requested operating system.
cloudflare-pp-cli radar get-http-top-ases-by-tls-version - Retrieves the top autonomous systems, by HTTP requests, of the requested TLS protocol version.
cloudflare-pp-cli radar get-http-top-browser-families - Retrieves the top user agents, aggregated in families, by HTTP requests.
cloudflare-pp-cli radar get-http-top-browsers - Retrieves the top user agents by HTTP requests.
cloudflare-pp-cli radar get-http-top-locations-by-bot-class - Retrieves the top locations, by HTTP requests, of the requested bot class.
cloudflare-pp-cli radar get-http-top-locations-by-browser-family - Retrieves the top locations, by HTTP requests, of the requested browser family.
cloudflare-pp-cli radar get-http-top-locations-by-device-type - Retrieves the top locations, by HTTP requests, of the requested device type.
cloudflare-pp-cli radar get-http-top-locations-by-http-protocol - Retrieves the top locations, by HTTP requests, of the requested HTTP protocol.
cloudflare-pp-cli radar get-http-top-locations-by-http-requests - Retrieves the top locations by HTTP requests.
cloudflare-pp-cli radar get-http-top-locations-by-http-version - Retrieves the top locations, by HTTP requests, of the requested HTTP version.
cloudflare-pp-cli radar get-http-top-locations-by-ip-version - Retrieves the top locations, by HTTP requests, of the requested IP version.
cloudflare-pp-cli radar get-http-top-locations-by-operating-system - Retrieves the top locations, by HTTP requests, of the requested operating system.
cloudflare-pp-cli radar get-http-top-locations-by-tls-version - Retrieves the top locations, by HTTP requests, of the requested TLS protocol version.
cloudflare-pp-cli radar get-leaked-credential-checks-summary - Retrieves an aggregated summary of HTTP authentication requests grouped by the specified dimension.
cloudflare-pp-cli radar get-leaked-credential-checks-summary-by-bot-class - Retrieves the distribution of HTTP authentication requests by bot class.
cloudflare-pp-cli radar get-leaked-credential-checks-summary-by-compromised - Retrieves the distribution of HTTP authentication requests by compromised credential status.
cloudflare-pp-cli radar get-leaked-credential-checks-timeseries-group - Retrieves the distribution of HTTP authentication requests, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-leaked-credential-checks-timeseries-group-by-bot-class - Retrieves the distribution of HTTP authentication requests by bot class over time.
cloudflare-pp-cli radar get-leaked-credential-checks-timeseries-group-by-compromised - Retrieves the distribution of HTTP authentication requests by compromised credential status over time.
cloudflare-pp-cli radar get-netflows-summary - Retrieves the distribution of network traffic (NetFlows) by the specified dimension.
cloudflare-pp-cli radar get-netflows-summary-deprecated - Retrieves the distribution of network traffic (NetFlows) by HTTP vs other protocols.
cloudflare-pp-cli radar get-netflows-timeseries - Retrieves network traffic (NetFlows) over time.
cloudflare-pp-cli radar get-netflows-timeseries-group - Retrieves the distribution of NetFlows traffic, grouped by the specified dimension over time.
cloudflare-pp-cli radar get-netflows-top-ases - Retrieves the top autonomous systems by network traffic (NetFlows).
cloudflare-pp-cli radar get-netflows-top-locations - Retrieves the top locations by network traffic (NetFlows).
cloudflare-pp-cli radar get-origin-details - Retrieves the requested origin information with its regions.
cloudflare-pp-cli radar get-origin-post-quantum-summary - Returns a summary of origin post-quantum data grouped by the specified dimension.
cloudflare-pp-cli radar get-origin-post-quantum-timeseries-groups - Returns a timeseries of origin post-quantum data grouped by the specified dimension.
cloudflare-pp-cli radar get-origins - Retrieves a list of origins with their regions.
cloudflare-pp-cli radar get-origins-summary - Retrieves an aggregated summary of origin metrics grouped by the specified dimension.
cloudflare-pp-cli radar get-origins-timeseries - Retrieves the time series of origin metrics for the specified origin.
cloudflare-pp-cli radar get-origins-timeseries-group - Retrieves the distribution of origin metrics grouped by the specified dimension over time.
cloudflare-pp-cli radar get-post-quantum-tls-support - Tests whether a hostname or IP address supports Post-Quantum (PQ) TLS key exchange. Returns information about the negotiated key exchange algorithm, whether it uses PQ cryptography, and any detected TLS implementation bugs (Split ClientHello, HRR failure, etc.).
cloudflare-pp-cli radar get-quality-index-summary - Retrieves a summary (percentiles) of bandwidth, latency, or DNS response time from the Radar Internet Quality Index (IQI).
cloudflare-pp-cli radar get-quality-index-timeseries-group - Retrieves a time series (percentiles) of bandwidth, latency, or DNS response time from the Radar Internet Quality Index (IQI).
cloudflare-pp-cli radar get-quality-speed-histogram - Retrieves a histogram from the previous 90 days of Cloudflare Speed Test data, split into fixed bandwidth (Mbps), latency (ms), or jitter (ms) buckets.
cloudflare-pp-cli radar get-quality-speed-summary - Retrieves a summary of bandwidth, latency, jitter, and packet loss, from the previous 90 days of Cloudflare Speed Test data.
cloudflare-pp-cli radar get-quality-speed-top-ases - Retrieves the top autonomous systems by bandwidth, latency, jitter, or packet loss, from the previous 90 days of Cloudflare Speed Test data.
cloudflare-pp-cli radar get-quality-speed-top-locations - Retrieves the top locations by bandwidth, latency, jitter, or packet loss, from the previous 90 days of Cloudflare Speed Test data.
cloudflare-pp-cli radar get-ranking-domain-details - Retrieves domain rank details. Cloudflare provides an ordered rank for the top 100 domains, but for the remainder it only provides ranking buckets like top 200 thousand, top one million, etc.. These are available through Radar datasets endpoints.
cloudflare-pp-cli radar get-ranking-domain-timeseries - Retrieves domains rank over time.
cloudflare-pp-cli radar get-ranking-internet-services-categories - Retrieves the list of Internet services categories.
cloudflare-pp-cli radar get-ranking-internet-services-timeseries - Retrieves Internet Services rank update changes over time.
cloudflare-pp-cli radar get-ranking-top-domains - Retrieves the top or trending domains based on their rank. Popular domains are domains of broad appeal based on how people use the Internet. Trending domains are domains that are generating a surge in interest. For more information on top domains, see https://blog.cloudflare.com/radar-domain-rankings/.
cloudflare-pp-cli radar get-ranking-top-internet-services - Retrieves top Internet services based on their rank.
cloudflare-pp-cli radar get-reports-dataset-download - Retrieves the CSV content of a given dataset by alias or ID. When getting the content by alias the latest dataset is returned, optionally filtered by the latest available at a given date.
cloudflare-pp-cli radar get-reports-datasets - Retrieves a list of datasets.
cloudflare-pp-cli radar get-robots-txt-top-domain-categories-by-files-parsed - Retrieves the top domain categories by the number of robots.txt files parsed.
cloudflare-pp-cli radar get-robots-txt-top-user-agents-by-directive - Retrieves the top user agents on robots.txt files.
cloudflare-pp-cli radar get-search-global - Searches for locations, autonomous systems, reports, bots, certificate logs, certificate authorities, industries and verticals. Location names can be localized by sending an Accept-Language HTTP header with a BCP 47 language tag (e.g., Accept-Language: pt-PT). The full quality-value chain is supported (e.g., pt-PT,pt;q=0.9,en;q=0.8).
cloudflare-pp-cli radar get-tcp-resets-timeouts-summary - Retrieves the distribution of connection stage by TCP connections terminated within the first 10 packets by a reset or timeout.
cloudflare-pp-cli radar get-tcp-resets-timeouts-timeseries-group - Retrieves the distribution of connection stage by TCP connections terminated within the first 10 packets by a reset or timeout over time.
cloudflare-pp-cli radar get-tld-details - Retrieves the requested TLD information.
cloudflare-pp-cli radar get-tlds - Retrieves a list of TLDs.
cloudflare-pp-cli radar get-tlds-performance-summary - Returns a summary of TLD authoritative nameserver performance grouped by the specified dimension.
cloudflare-pp-cli radar get-tlds-performance-timeseries-groups - Returns a timeseries of TLD authoritative nameserver performance grouped by the specified dimension.
cloudflare-pp-cli radar get-traffic-anomalies - Retrieves the latest Internet traffic anomalies, which are signals that might indicate an outage. These alerts are automatically detected by Radar and manually verified by our team.
cloudflare-pp-cli radar get-traffic-anomalies-top - Retrieves the sum of Internet traffic anomalies, grouped by location. These anomalies are signals that might indicate an outage, automatically detected by Radar and manually verified by our team.
cloudflare-pp-cli radar get-verified-bots-top-by-http-requests - Retrieves the top verified bots by HTTP requests, with owner and category.
cloudflare-pp-cli radar get-verified-bots-top-categories-by-http-requests - Retrieves the top verified bot categories by HTTP requests, along with their corresponding percentage, over the total verified bot HTTP requests.
cloudflare-pp-cli radar post-reports-dataset-download-url - Retrieves an URL to download a single dataset.

ready

Manage ready

cloudflare-pp-cli ready - Return a success message after running readiness checks

signed-url

Manage signed url

cloudflare-pp-cli signed-url - Internal route for testing signed URLs

system

Manage system

cloudflare-pp-cli system secrets-store-create - Creates a store in the account on behalf of the calling service. The store will be marked as managed by the authenticated service. Requires account_id in the request body.
cloudflare-pp-cli system secrets-store-delete-bulk - Deletes one or more secrets from a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-delete-by-id - Deletes a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service. By default, a store that still contains secrets cannot be deleted and returns HTTP 409 (Conflict) with the "store_not_empty" error. Pass force=true to cascade-delete all secrets in the store.
cloudflare-pp-cli system secrets-store-duplicate-by-id - Duplicates a secret in a store managed by the calling service, keeping the value. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-get-by-id - Returns details of a single secret from a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-get-store-by-id - Returns details of a single store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-list - Lists all stores in an account that are managed by the calling service. Only returns stores where managed_by matches the authenticated service.
cloudflare-pp-cli system secrets-store-patch-by-id - Updates a single secret in a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-secret-create - Creates one or more secrets in a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-secret-delete-by-id - Deletes a single secret from a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.
cloudflare-pp-cli system secrets-store-secrets-list - Lists all secrets in a store managed by the calling service. Returns 404 if the store doesn't exist or is not managed by the authenticated service.

tenants

Manage tenants

cloudflare-pp-cli tenants <tenant_id> - Retrieves a Tenant by Tenant ID.

user

Manage user

cloudflare-pp-cli user api-tokens-create-token - Create a new access token.
cloudflare-pp-cli user api-tokens-delete-token - Destroy a token.
cloudflare-pp-cli user api-tokens-list-tokens - List all access tokens you created.
cloudflare-pp-cli user api-tokens-roll-token - Roll the token secret.
cloudflare-pp-cli user api-tokens-token-details - Get information about a specific token.
cloudflare-pp-cli user api-tokens-update-token - Update an existing token.
cloudflare-pp-cli user api-tokens-verify-token - Test whether a token works.
cloudflare-pp-cli user audit-logs-get-audit-logs - Gets a list of audit logs for a user account. Can be filtered by who made the change, on which zone, and the timeframe of the change.
cloudflare-pp-cli user billing-history-deprecated-billing-history-details - Accesses your billing history object.
cloudflare-pp-cli user billing-profile-deprecated-billing-profile-details - Accesses your billing profile object.
cloudflare-pp-cli user details - User Details
cloudflare-pp-cli user edit - Edit part of your user details.
cloudflare-pp-cli user ip-access-rules-for-a-create-an-ip-access-rule - Creates a new IP Access rule for all zones owned by the current user.

Note: To create an IP Access rule that applies to a specific zone, refer to the IP Access rules for a zone endpoints.

cloudflare-pp-cli user ip-access-rules-for-a-delete-an-ip-access-rule - Deletes an IP Access rule at the user level.

Note: Deleting a user-level rule will affect all zones owned by the user.

cloudflare-pp-cli user ip-access-rules-for-a-list-ip-access-rules - Fetches IP Access rules of the user. You can filter the results using several optional parameters.
cloudflare-pp-cli user ip-access-rules-for-a-update-an-ip-access-rule - Updates an IP Access rule defined at the user level. You can only update the rule action (mode parameter) and notes.
cloudflare-pp-cli user list-tenants - Retrieves list of tenants the authenticated user / method has access to.
cloudflare-pp-cli user load-balancer-healthcheck-events-list-healthcheck-events - List origin health changes.
cloudflare-pp-cli user load-balancer-monitors-create-monitor - Create a configured monitor.
cloudflare-pp-cli user load-balancer-monitors-delete-monitor - Delete a configured monitor.
cloudflare-pp-cli user load-balancer-monitors-list-monitor-references - Get the list of resources that reference the provided monitor.
cloudflare-pp-cli user load-balancer-monitors-list-monitors - List configured monitors for a user.
cloudflare-pp-cli user load-balancer-monitors-monitor-details - List a single configured monitor for a user.
cloudflare-pp-cli user load-balancer-monitors-patch-monitor - Apply changes to an existing monitor, overwriting the supplied properties.
cloudflare-pp-cli user load-balancer-monitors-preview-monitor - Preview pools using the specified monitor with provided monitor details. The returned preview_id can be used in the preview endpoint to retrieve the results.
cloudflare-pp-cli user load-balancer-monitors-preview-result - Get the result of a previous preview operation using the provided preview_id.
cloudflare-pp-cli user load-balancer-monitors-update-monitor - Modify a configured monitor.
cloudflare-pp-cli user load-balancer-pools-create-pool - Create a new pool.
cloudflare-pp-cli user load-balancer-pools-delete-pool - Delete a configured pool.
cloudflare-pp-cli user load-balancer-pools-list-pool-references - Get the list of resources that reference the provided pool.
cloudflare-pp-cli user load-balancer-pools-list-pools - List configured pools.
cloudflare-pp-cli user load-balancer-pools-patch-pool - Apply changes to an existing pool, overwriting the supplied properties.
cloudflare-pp-cli user load-balancer-pools-patch-pools - Apply changes to a number of existing pools, overwriting the supplied properties. Pools are ordered by ascending name. Returns the list of affected pools. Supports the standard pagination query parameters, either limit/offset or per_page/page.
cloudflare-pp-cli user load-balancer-pools-pool-details - Fetch a single configured pool.
cloudflare-pp-cli user load-balancer-pools-pool-health-details - Fetch the latest pool health status for a single pool.
cloudflare-pp-cli user load-balancer-pools-preview-pool - Preview pool health using provided monitor details. The returned preview_id can be used in the preview endpoint to retrieve the results.
cloudflare-pp-cli user load-balancer-pools-update-pool - Modify a configured pool.
cloudflare-pp-cli user permission-groups-list-permission-groups - Find all available permission groups for API Tokens.
cloudflare-pp-cli user s-invites-invitation-details - Gets the details of an invitation.
cloudflare-pp-cli user s-invites-list-invitations - Lists all invitations associated with my user.
cloudflare-pp-cli user s-invites-respond-to-invitation - Responds to an invitation.
cloudflare-pp-cli user s-organizations-leave-organization - Removes association to an organization.
cloudflare-pp-cli user s-organizations-list-organizations - Lists organizations the user is associated with.
cloudflare-pp-cli user s-organizations-organization-details - Gets a specific organization the user is associated with.
cloudflare-pp-cli user subscription-delete-subscription - Deletes a user's subscription.
cloudflare-pp-cli user subscription-get-subscriptions - Lists all of a user's subscriptions.
cloudflare-pp-cli user subscription-update-subscription - Updates a user's subscriptions.

workers

Manage workers

cloudflare-pp-cli workers <deploy_hook_uuid> - Trigger a build using a deploy hook. This endpoint does not require authentication - the deploy_hook_uuid acts as a secret token.

zones

Manage zones

cloudflare-pp-cli zones 0-delete - Deletes an existing zone.
cloudflare-pp-cli zones 0-get - Zone Details
cloudflare-pp-cli zones 0-patch - Edits a zone. Only one zone property can be changed at a time.
cloudflare-pp-cli zones get - Lists, searches, sorts, and filters your zones. Listing zones across more than 500 accounts is currently not allowed.
cloudflare-pp-cli zones post - Create Zone

Output Formats

# Human-readable table (default in terminal, JSON when piped)
cloudflare-pp-cli accounts list

# JSON for scripting and agents
cloudflare-pp-cli accounts list --json

# Filter to specific fields
cloudflare-pp-cli accounts list --json --select id,name,status

# Dry run — show the request without sending
cloudflare-pp-cli accounts list --dry-run

# Agent mode — JSON + compact + no prompts in one flag
cloudflare-pp-cli accounts list --agent

Agent Usage

This CLI is designed for AI agent consumption:

Non-interactive - never prompts, every input is a flag
Pipeable - --json output to stdout, errors to stderr
Filterable - --select id,name returns only fields you need
Previewable - --dry-run shows the request without sending
Explicit retries - add --idempotent to create retries and --ignore-missing to delete retries when a no-op success is acceptable
Confirmable - --yes for explicit confirmation of destructive actions
Piped input - write commands can accept structured input when their help lists --stdin
Offline-friendly - sync/search commands can use the local SQLite store when available
Agent-safe by default - no colors or formatting unless --human-friendly is set

Exit codes: 0 success, 2 usage error, 3 not found, 4 auth error, 5 API error, 7 rate limited, 10 config error.

Health Check

cloudflare-pp-cli doctor

Verifies configuration, credentials, and connectivity to the API.

Configuration

Config file: ~/.config/cloudflare-pp-cli/config.toml

Static request headers can be configured under headers; per-command header overrides take precedence.

Environment variables:

Name	Kind	Required	Description
`CLOUDFLARE_API_TOKEN`	per_call	No	Set to your API credential.

agentcookie (optional)

If you use agentcookie to sync secrets across machines, this CLI auto-adopts agentcookie-managed credentials with no extra setup. When the daemon writes to this CLI's config, cloudflare-pp-cli doctor reports agentcookie: detected and auth-status labels the source as agentcookie. Skip this section if you don't use agentcookie - the CLI works the same as any other.

Troubleshooting

Authentication errors (exit code 4)

Run cloudflare-pp-cli doctor to check credentials
Verify the environment variable is set: echo $CLOUDFLARE_API_TOKEN Not found errors (exit code 3)
Check the resource ID is correct
Run the list command to see available items

Generated by CLI Printing Press