·Security

We hold keys. So we hold few.

The scopes are the security model.

You approve only the scopes an app needs on Cloudflare's consent screen. The token is sealed, opened once inside one deploy job, and the app lands in your account. Revoke cuts the link; the app keeps running. Authorize Flareyard workers:deploy d1:write email:send dns:editoptional Deploy job Your account Mailroom Keeps running Revoke ConsentSealedOne jobYours

Principles

Least scope
Sealed tokens
Revoke anytime
No app data here
Signed releases
Your audit log

Never

  • Pasted API keys
  • Just-in-case scopes
  • Unsigned code
  • Kept tokens