Sanaf AI
Start free
Security & Identity Tools

Cloudflare, worked by an AI employee

Not another app for your team to learn, and not a set of rules for you to build. You hire an AI employee, you give it access to your Cloudflare account, and you ask it for things in Slack or Teams the way you would ask anyone else on the team. There is nothing to map and nothing to maintain.

  • Security & Identity Tools
  • Connects with a key
  • 16 ready-made tools
  • Asked in Slack or Teams
At work

An illustration of how the conversation reads, not a transcript from a client account.

What Cloudflare is

Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable.

You paste in a key from your own Cloudflare account. It is kept encrypted, and you can withdraw it from inside Cloudflare whenever you like.

How a run works

One message in, the work done in Cloudflare.

  1. 01

    You ask

    You message your AI employee in the chat your team already has open, in one sentence, in your own words.

  2. 02

    It works out the step

    It decides what the job needs in Cloudflare. You do not pick anything from a menu or wire anything together.

  3. 03

    It does the work

    Signed in to your own Cloudflare account, inside the access you granted it, doing the thing you asked for.

  4. 04

    It reports back

    It tells you what it did, in the same thread. If it could not do something, it says so rather than guessing.

16 tools it already has

What it can do in Cloudflare

These are the ready-made tools your AI employee already has in Cloudflare. It is not limited to them, but it never has to be taught these.

  • Create DNS recordTool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.
  • Create WAF ListTool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id", kind="ip", name="blocklist")
  • Create ZoneTool to create a new zone. use after confirming account id when adding a domain to cloudflare.
  • Delete DNS RecordTool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."
  • Delete WAF ListTool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id", list id="<list id")
  • Delete ZoneTool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8a
  • List Account MembersTool to list members of a given cloudflare account. use after confirming the account id.
  • List AccountsTool to list all accounts accessible to the user. use when you need to enumerate cloudflare accounts for selection or auditing.
  • List Firewall RulesTool to list firewall rules for a specific zone. use after confirming the zone id to retrieve and audit current firewall rules.
  • List MonitorsTool to list all load-balancer monitors in a cloudflare account. use after creating or updating monitors to retrieve a paginated list.
  • List PoolsTool to list all load balancer pools in a cloudflare account. use after confirming account id to discover pool ids.
  • List WAF ListsTool to fetch all waf lists (no items) for an account. use after confirming account id.
  • List ZonesThis tool lists, searches, sorts, and filters your zones.
  • Update DNS recordTool to update an existing dns record within a specific zone. use after confirming both zone and record identifiers; only provided fields are modified.
  • Update WAF ListTool to update the description of a waf list (cannot update items). use after confirming list metadata.
  • Update ZoneTool to update properties of an existing zone. use after confirming the zone id; only one field can be modified per call.
Access, and who is in charge of it

You stay the boss of your Cloudflare account.

Nothing connects until you approve it. You grant access one app at a time, you can take it back the same way, and everything your AI employee does in there is written down where you can see it.

How we handle your data
  • It signs in to your own Cloudflare account. You are not moving anything into ours.
  • You grant access one app at a time, and you can take it back the same way.
  • Everything it does in Cloudflare is written down, with what it did and when.
  • Anything you tell it to check with you first, it checks with you first.
Other apps in the same corner of the business

It works in Cloudflare and the rest of your software in the same job

A real job rarely stays in one place. Reading a message in one app, checking a record in another and writing the result in a third is one request to your AI employee, not three.

See every app

Questions people ask about Cloudflare

Can an AI employee really work inside Cloudflare?
Yes. It signs in to your own Cloudflare account and works in it the way a new hire would, from the chat your team already has open. Nobody installs anything, and nobody learns a new screen.
Do I have to move anything out of Cloudflare?
No. Nothing moves and nothing is replaced. Your records stay in Cloudflare, your team carries on in the same screens they used yesterday, and your AI employee works alongside them in there.
How does it get into my Cloudflare account?
You paste in a key from your own Cloudflare account. It is kept encrypted, and you can withdraw it from inside Cloudflare whenever you like. You approve it before anything connects, and you can take the access back the same way you gave it.
What can it actually do in Cloudflare?
It has 16 ready-made tools in Cloudflare today, among them Create DNS record, Create WAF List and Create Zone. The full list is on this page. It is not limited to those, but it never has to be taught them.
Can it use Cloudflare and the rest of my software in the same job?
Yes, and that is usually the point. Reading a message in one app, checking a record in Cloudflare and writing the result somewhere else is one request to your AI employee, not three separate ones you stitch together.
Who decides what it is allowed to do in Cloudflare?
You do. You grant access one app at a time and can withdraw it at any time, anything you ask it to check with you first it checks with you first, and everything it does in Cloudflare is written down with what it did and when.