> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Cloudflare One

> Connect Cloudflare One (Zero Trust) to Myrmex with an API token — create the token and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect **Cloudflare One** (Zero Trust) so Myrmex can review your Gateway policies and lists, Access apps and policies, enrolled devices, and logs — and, with approval, help you manage them. Myrmex reaches the **Cloudflare API** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network, querying it in real time.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Gateway policies & lists" icon="filter">
    Review Zero Trust Gateway policies and lists — read and, on approval, adjust.
  </Card>

  <Card title="Access apps & policies" icon="user-lock">
    Inspect Access applications and their policies for gaps and overly broad rules.
  </Card>

  <Card title="Devices & logs" icon="laptop">
    Review enrolled devices and query logs during investigations, in real time.
  </Card>

  <Card title="Posture audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against your Zero Trust configuration.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** that can reach the Cloudflare API (`https://api.cloudflare.com`) over HTTPS. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* Your **Cloudflare Account ID**.
* Permission to create an **API token** on the account.

## Step 1 — Create the API Token in Cloudflare

The credential Myrmex needs is an **account-scoped API token**, used as a Bearer token.

<Steps>
  <Step title="Open API Tokens">
    In the Cloudflare dashboard, go to **My Profile → API Tokens → Create Token**, and start a custom token.
  </Step>

  <Step title="Grant Zero Trust permissions">
    Add account-scoped permissions for **Zero Trust** (Gateway), **Access: Apps and Policies**, and read access to devices and logs — read-only for analysis, edit to allow changes.
  </Step>

  <Step title="Create and copy the token">
    Finish creating the token and **copy it now** — it is shown only once.
  </Step>

  <Step title="Find your Account ID">
    In the dashboard, open your account; the **Account ID** is listed on the account home page.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: grant read-only permissions first, and add edit scopes only when you want the agents to apply changes.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Cloudflare One**, then fill in:

| Field           | Description                                                                                                |
| --------------- | ---------------------------------------------------------------------------------------------------------- |
| **Name**        | A unique name for this Cloudflare One instance.                                                            |
| **Description** | Optional note to identify the account.                                                                     |
| **API Token**   | The Cloudflare API token (Bearer) from Step 1.                                                             |
| **Account ID**  | Your Cloudflare account ID.                                                                                |
| **API URL**     | The Cloudflare API base URL (default `https://api.cloudflare.com/client/v4`).                              |
| **Collector**   | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will reach the Cloudflare API. |
| **Auth Type**   | Authentication method (preset to `bearer` — do not change).                                                |

## Connect

Click **Connect** to validate the token and finish. Cloudflare One then appears under **Environment → Integrations**, and you can start asking [Hydra](/documentation/multi-agent-system/integration-specialist-agent) about it in the Workspace.

<Note>
  Your API token is stored securely and resolved server-side — it never passes through the AI, and Myrmex queries Cloudflare on demand rather than storing its data.
</Note>