Connect your app to Cloudflare API
Connect your Lovable app to Cloudflare using an API token to manage domain records, purge web cache, and monitor traffic. This lets you build custom management dashboards without deploying your Lovable app to Cloudflare.
Anyone who wants to build internal tools or dashboards to view and manage their Cloudflare domains, security settings, and cloud resources.
Do this, in order
- 1
Sign in to Cloudflare and create an API token with only the specific read or edit permissions and domains your app needs.
Restricting token access protects your live websites from accidental changes and prevents unexpected usage bills.
- 2
Copy the token value immediately after generating it.
Cloudflare shows the token string only once.
- 3
Open Connectors in your Lovable dashboard, select Cloudflare API, and click Connect.
This starts configuring the shared connection for your Lovable workspace.
- 4
Enter a display name, paste your API token, select who can access the connection, and click Connect.
Lovable validates your token with Cloudflare and stores the connection securely.
- 5
Open your project chat and ask Lovable to link the Cloudflare connection and build your interface.
This enables your app to make secure requests to Cloudflare through Lovable's gateway.
Paste this into your project
Use Cloudflare and build a page where I can view and edit the DNS records for my domains. List all available zones, show each record's type, name, and target, and require confirmation before applying any record changes.
Words decoded
- DNS
- The internet system that points human-friendly domain names to numerical server addresses.
- Zone
- A domain name and all its subdomains managed together in Cloudflare.
- API token
- A unique secret key that lets external software interact with your account without using your regular password.
- Cache purge
- Deleting saved temporary copies of web pages so visitors see the newest site updates right away.
Where people get stuck
- Using a Global API Key instead of an API token, which this connector rejects.
- Expecting this connector to publish or host your Lovable app on Cloudflare Pages or Workers instead of using Lovable's native publish flow.
- Granting broad edit rights when your app only needs to display analytics or inventory, creating an unnecessary security risk.
- Using an account token for services like Page Rules, Turnstile, or Super Bot Fight Mode, which require a user token instead.
- Replacing an entire security ruleset by sending a full overwrite request rather than updating an individual rule.
- Hitting Cloudflare request limits by scheduling automatic polling too frequently instead of loading data on demand.
The short version, steps, decoder and prompt on this page are written automatically from Lovable's own documentation and can lag or misread it. The official page is always the authority.