Appearance Fern Canopy · system
Go to TreeSeed

Displays / App Controls

HostCredentialPermissionNote

Reusable HostCredentialPermissionNote component copied into the TreeSeed UI library.

All components
Component frame
Credential requirementsCloudflare API token permissions

Use an account-level token for the Cloudflare account and root domain this host manages.

Account resources
  • Pages Write
  • Workers Scripts Write
  • Workers KV Storage Write
  • Workers R2 Storage Write
  • D1 Write
  • Queues Write
  • Turnstile Sites Write
Rules and cache
  • Account Rulesets Write
  • Account Rule Lists Write
  • Cache Settings Write for the target zone
Target domain
  • Zone Read
  • DNS Write
  • SSL and Certificates Write
Optional AI
  • AI Gateway Run and Workers AI Write when the project uses AI gateway or model execution

Cloudflare API docs call Cache Settings the Cache Rules permission, and Account Rule Lists the Account Filter Lists permission.