ES
DocsCloudflareAPI token

API token

Create a Cloudflare API token with exactly the three permissions vuzon needs — least privilege, one zone, one account.

Create the token

  1. Open the Cloudflare dashboard → My Profile (avatar, top right) → API Tokens.
  2. Click Create Token → Create Custom Token.
  3. Under Permissions, add these rows (names match the English Cloudflare UI):
Scope Permission Why vuzon needs it
Account → Email Routing Addresses Edit List, add and remove destination addresses.
Zone → Email Routing Rules Edit List, create, update, enable/disable and delete routing rules.
Zone → Zone Read On startup, resolve CF_ZONE_ID and CF_ACCOUNT_ID from DOMAIN. Skip this row only if you set both IDs manually in .env.
  1. Under Account Resources, choose the account that owns the zone (or All accounts if you accept broader access).
  2. Under Zone Resources, restrict to Specific zone → your domain (recommended), or All zones for that account.
  3. Create the token and copy the value into CF_API_TOKEN in .env.

Cloudflare shows the token once. Copy it right away — if you lose it, revoke it and create a new one.

Least privilege

Use an API token, not the Global API Key. Prefer least privilege — one zone, one account — over “all zones” when possible. vuzon never logs the token and never returns it to the browser.

The official guide: Create API tokens.

PreviousInitial setupNextEmail Routing