Manage Cloudflare DNS records, zero-error BIND migrations, edge SSL certificates, zone settings, and cache purges from your terminal or AI workflows.
Single standalone static binary written in Rust Edition 2024. Zero runtime dependencies, no .NET CLR, and instant responsiveness for terminal pipelines.
Clean human-readable YAML by default, raw JSON with --json, structured error envelopes, and self-documenting agent-readme.
Protects API tokens natively in macOS Keychain, Windows DPAPI, and Linux Secret Service. Zero plaintext disk exposure without explicit opt-in.
Migrate zones between providers without hand-typing DNS records. Avoid Cloudflare's lossy automatic DNS scans with full BIND fidelity.
Verify encryption mode, Universal SSL enablement, and edge certificate pack issuance in a single unified command (ssl status).
Purge cached assets globally across edge datacenters instantly with zones purge-cache for entire zones or specific URLs.
Every command supports --json for deterministic machine parsing.
| Group | Command | Description |
|---|---|---|
| Zones | cloudflare zones list |
List all zones in the account |
| Zones | cloudflare zones get --zone <Z> |
Inspect zone status and assigned nameservers |
| Zones | cloudflare zones add --name <D> |
Register a new domain zone |
| Zones | cloudflare zones purge-cache --zone <Z> |
Purge edge cache (--everything or --file <URL>) |
| Records | cloudflare records list --zone <Z> |
List DNS records (optional --type, --name) |
| Records | cloudflare records export --zone <Z> |
Export zone as BIND file (optional --out <F>) |
| Records | cloudflare records import --zone <Z> --file <F> |
Import BIND zone file (optional --proxied) |
| Records | cloudflare records add --zone <Z> |
Add DNS record (A, AAAA, CNAME, MX, TXT, SRV) |
| Records | cloudflare records update --zone <Z> |
Update record content, TTL, or proxy status |
| Records | cloudflare records proxy --zone <Z> |
Toggle edge proxy on (orange) or off (grey) |
| Records | cloudflare records delete --zone <Z> |
Delete DNS record by name or ID |
| Settings | cloudflare settings list --zone <Z> |
List all zone settings |
| Settings | cloudflare settings set --zone <Z> |
Set zone setting, e.g. ssl or always_use_https |
| SSL | cloudflare ssl status --zone <Z> |
Show encryption mode, Universal SSL & cert packs |
| Page Rules | cloudflare pagerules list --zone <Z> |
List configured page rules |
| Page Rules | cloudflare pagerules add --zone <Z> |
Add page rule, e.g. enforce HTTPS on specific subdomains |
| Accounts | cloudflare login [name] |
Browser token flow & keystore storage |
| Accounts | cloudflare accounts list |
List profiles and verify connectivity (--check) |