Explore 10 workflow actions for Cloudflare, including account permissions and operation limits.
5 read actions5 write actions
WORKFLOW ACTIONS
What you can configure.
Choose an action in the workflow builder, connect an account, and map its inputs. These actions are available in the catalog; your account access and a successful test determine whether they work for your setup.
Create DNS record
Write
Create one DNS record in the selected authorized zone.
Permissions and limits
Account permissions
DNS Write
Operation limits
Record type can be set to A, AAAA, CNAME, TXT, NS or PTR. Writing structured data and priority fields for MX, SRV, CAA and other records is not exposed.
Cloudflare checks record content, zone ownership and proxy eligibility. Explicit TTL values are 60 to 86400; create defaults to automatic. Updating a record to automatic TTL is not exposed.
Use a zone-scoped token. DNS propagation can continue after Cloudflare accepts a change.
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete DNS record
Write
Remove the identified DNS record and return Cloudflare's confirmed record ID.
Permissions and limits
Account permissions
DNS Write
Operation limits
Removes a live DNS record. Cloudflare confirms acceptance by record ID; propagation may continue afterward.
A repeated request may repeat the external action. Review the previous result before retrying a write.
Delete zone certificate
Write
Delete a zone-level Authenticated Origin Pulls certificate.
Permissions and limits
Account permissions
SSL and Certificates Write
A repeated request may repeat the external action. Review the previous result before retrying a write.
Get DNS record
Read
Read the current state of an identified DNS record.
Permissions and limits
Account permissions
DNS Read
Get zone certificate
Read
Read one zone-level Authenticated Origin Pulls certificate.
Permissions and limits
Account permissions
SSL and Certificates Read
List DNS records
Read
Read a page of records in one authorized zone, including pagination metadata.
Permissions and limits
Account permissions
DNS Read
Operation limits
Returns one page. Use result_info and increment page for further records.
Pagination: page. Check the result for additional pages; a single action may not return every record.
List zone certificates
Read
Read the zone-level Authenticated Origin Pulls certificates of a zone.
Permissions and limits
Account permissions
SSL and Certificates Read
List zones
Read
Read zones accessible to the named Cloudflare token, retaining page metadata.
Permissions and limits
Account permissions
Zone Read
Operation limits
Returns one page with result_info. The connection account ID supplies the default account filter.
Pagination: page. Check the result for additional pages; a single action may not return every record.
Update DNS record
Write
Change explicitly supplied fields on one DNS record.
Permissions and limits
Account permissions
DNS Write
Operation limits
Record type can be set to A, AAAA, CNAME, TXT, NS or PTR. Writing structured data and priority fields for MX, SRV, CAA and other records is not exposed.
Cloudflare checks record content, zone ownership and proxy eligibility. Explicit TTL values are 60 to 86400; create defaults to automatic. Updating a record to automatic TTL is not exposed.
Use a zone-scoped token. DNS propagation can continue after Cloudflare accepts a change.
Omitted fields are unchanged. Clearing a comment with an empty string is not supported.
A repeated request may repeat the external action. Review the previous result before retrying a write.
Upload zone certificate
Write
Upload a client certificate and its private key for zone-level Authenticated Origin Pulls.
Permissions and limits
Account permissions
SSL and Certificates Write
Operation limits
The private key must come from a protected workflow file, not typed text.
A lost answer is uncertain and never resent automatically.
A repeated request may repeat the external action. Review the previous result before retrying a write.
SETUP
Start with a controlled test.
01Connect the intended account
Use the account and permissions required for your process. Review the connection check before configuring a workflow action.
02Review inputs and access
Select a listed operation and map its required inputs. Use test records and add a human approval before writes that need review.
03Confirm the result
Inspect step outputs and confirm the result in Cloudflare. A saved workflow is not a completed provider action.
