Cloudflare (Domain registrar)
Connect Cloudflare to show domain renewals, registrar lock and DNS zones. The Domain registrar card connects once for the whole company. Cloudflare is the only registrar supported so far. Domains refresh daily.
What it lights up #
- Legal · domains
With only a token, the terminal reads your DNS zones (name servers and zone status). Add the Account ID as well to read your registered domains: expiry, auto-renew and lock.
Create a read-only API token #
- In the Cloudflare dashboard open My Profile → API Tokens and choose Create Token, then create a custom token.
- Add the permission Zone → Zone → Read.
- To read registered domains, also add the Account permission for Registrar domains at Read. Nothing needs Edit.
- Under Zone Resources, include all zones from the account.
- Create the token and copy it. Cloudflare shows it only once.
Use a token from My Profile (a user token). Cloudflare's account-owned tokens (Manage account → Account API tokens) can verify and read zones, but Cloudflare's Registrar doesn't accept them.
Find your Account ID #
Open any domain in the Cloudflare dashboard. On its Overview page, the API section near the bottom shows the Account ID (next to the Zone ID). It is 32 characters, letters a to f and digits.
Connect it in VX Terminal #
- Open Settings → Connections, find Domain registrar under IP & Legal and press Connect on the Global row.
- Leave Registrar as
cloudflare. - Paste the token into API token, and the Account ID (optional, but needed for registered domains).
- Press Test, then Save.
How Test works #
Test asks Cloudflare whether the token is active and counts the zones it can read, for example "Cloudflare token active · 12 zones readable · expires 2027-01-31". Nothing is changed.
Common errors #
| Message | Fix |
|---|---|
| "Cloudflare rejected the token. Check you copied all of it and that it hasn't been rolled or deleted. An account token also needs the Account ID." | Copy the token again, or create a new one. |
| "Cloudflare knows this token, but it is …. Re-enable it or create a new one." | The token is disabled or expired in Cloudflare. |
| "Cloudflare token active · it can't list zones yet; add Zone → Zone → Read" | Edit the token in Cloudflare and add that permission. |
| "Account ID must be the 32-character Account ID from the Cloudflare dashboard" | Copy the Account ID again; it is lowercase. |
| "Cloudflare is rate-limiting this token. Wait a minute and test again." | Wait, then test again. |
If zones appear but domain expiry and lock stay empty, the token lacks the Registrar read permission, it is an account-owned token, or the Account ID is missing.