Monitoring Cloudflare DNS
Monitoring your Cloudflare DNS records automatically is made easy with ZoneWatcher. After you've added your account credentials, we will automatically import all of your domains and begin monitoring them for changes.
Generating your Cloudflare API Token
ZoneWatcher uses a Cloudflare API token to fetch your domains and DNS records. For a team, create an account API token under Manage Account → Account API Tokens. The token belongs to the Cloudflare account and keeps working when staff change. A user API token under My Profile → API Tokens is also supported, and fits a personal account.
Required permissions are the same for both. For monitoring-only use, create a custom token with only Zone:DNS:Read and Zone:Zone:Read. That limits the token to reading DNS records. To import zone tags as well, also allow the token to list account tags (Cloudflare resource tagging). Without that permission, zone sync still succeeds and zone tags stay empty.
This form is the user API token screen. Account API tokens use the same permissions.
Permissions for Change Management & Rollback
If you plan to use ZoneWatcher's Change Management or rollback features, the read-only token above is not sufficient — those features write back to Cloudflare on your behalf to apply approved changesets and revert unauthorized changes.
Generate a custom token — an account API token or a user API token — with the following permissions instead:
- Zone — DNS — Edit
- Zone — Zone — Read
Zone:DNS:Edit implicitly grants read access in addition to create, update, and delete on DNS records. Set the Zone Resources to either "All zones" or to the specific zones you want ZoneWatcher to manage. If you only want change notifications, stick with the read-only permissions described above.
Creating your Cloudflare Provider
Once you've generated your API token, you can create your new Cloudflare provider on ZoneWatcher by giving it a descriptive name and pasting in the API token you generated.
Monitoring Your Zones
After you've created your Cloudflare provider, we will sync all the zones associated with your account and their associated DNS records. You'll be able to view them from either the Provider's page or the Zone Dashboard.