Back to catalog / Integrations
Cloudflare One: confirm identity and traffic paths before configuration
Route by Access, Gateway, device, or connector need and inventory existing policies first.
Skills
Classify architecture, configuration, troubleshooting, migration, or review. Gather account ID, IdP/SCIM, apps/domains, traffic path, compliance, and pilot boundary. Retrieve current Cloudflare One docs/API schema before selecting Access app/policy, Gateway selector, WARP/device profile, Tunnel/route/DNS, DLP, or CASB resources. Inspect current state read-only where possible; show dependencies, validation, and rollback. Stage risky changes disabled or to a pilot. Do not publish policy, shift traffic, or alter production access without authorization.
Permissions
Prerequisites
- Design/configure/troubleshoot Cloudflare One Zero Trust/SASE: Access, Gateway, WARP, Tunnel, WAN, DLP/CASB, identity, posture.
Permissions
- May inspect or change access policies, DNS/routes, tunnels, device posture, and groups.
Limitations
Retrieve current docs/API schema and confirm account, users/sites, IdP, blast radius; stage risky rules in a pilot/disabled state with rollback.
Pinned upstream source
- Repository
- cloudflare/skills
- File path
- skills/cloudflare-one/SKILL.md
- Pinned commit
53395984c3ea1925d00fce03b266112302f050e6- Source checked
- 2026-10-14 · Reviewed against the pinned upstream source
Repository metrics
These values describe the upstream repository, not popularity or likes for an individual skill or playbook.
- Stars
- Not collected
- Forks
- Not collected
- Observed at
- Not collected
No metrics snapshot is available yet.
License: Apache-2.0
Compatible tools
Cloudflare One docs/API schemas · Cloudflare dashboard · Cloudflare CLI/MCP
Main topic
Make Agent behavior safer and easier to verify