Cloudflare

What it covers

Edge TLS: the zone enforces Full or Strict SSL to the origin.

Credential to create

Cloudflare API token (scoped)

Create a Cloudflare API token

Permissions to grant

• Zone > SSL and Certificates > Read
• Zone > Zone > Read

Setup steps

1. Create a custom API token with the two zone read permissions above, scoped to the zone you want checked.
2. Copy the Zone ID from the zone's Overview page.
3. On the Integrations page, enter the Zone ID and paste the token.

Notes and gotchas

• Scope the token to a single zone for least privilege; the connector reads that zone's SSL/TLS mode.