Cloudflare DNS-01

What is implemented

POST /api/v1/integrations/dns with provider cloudflare. Credentials are encrypted at rest. During DNS-01 the Cloudflare provider creates and later removes the challenge record when a valid token is present.

What you must supply

A Cloudflare API token with Zone.DNS edit on the zones you manage. We do not ship a shared platform token. Without your token, use manual DNS.

Safety

Tokens never appear in API list responses after create. Failed DNS calls are recorded on the integration test status and on the order error fields.