Paste a scoped Cloudflare API token. We hold it only in an encrypted, expiring cookie — never in a database.
We never save your Cloudflare token — it lives only in an encrypted cookie that expires with your session. For best security, delete the token in your Cloudflare dashboard when you're done here; creating a new one later lets you view this dashboard again.
Your endpoint's API key is never saved either — it's shown only when created or renewed. To display it here again on a later visit, renew it from the dashboard (the old key stops working).