KNOTLINE / CLOUDFLARE GUIDE
Create an Account
API Token.
OAuth is the recommended connection method. Use this manual option when you need a durable, account-owned service token.
Create the token in Cloudflare, then return to the unfinished native flow and paste it there. Knotline sends it directly from your device to Cloudflare for verification.
Open Account API Tokens
In the Cloudflare dashboard, open the account you want to connect. Go to Manage Account → API Tokens, then choose Create Token. Do not use My Profile API Tokens or the legacy Global API Key.
Add only the required read permissions
Select the account used by your component and add the permissions it needs:
Account Settings and Account Analytics are shared requirements. Add Workers Scripts only for Worker components and D1 only for D1 Database. Do not grant Edit or Write.
Review restrictions and create
Give the token a recognizable name such as Knotline. You may set an expiration time. Use an IP restriction only if this iPhone will continue to originate requests from an allowed address. Review the summary, then create the token.
Copy once, then return to Knotline
Cloudflare shows the secret once. Copy it, return to Knotline, and paste it into the Account API Token field. New account-owned tokens begin with cfat_; Knotline does not accept cfut_ User API Tokens or Global API Keys.
Common validation failures
- No account found: add Account Settings · Read for the selected account.
- No Workers or databases found: add the matching Workers Scripts or D1 read permission and confirm the resource is in the selected account.
- Analytics permission denied: add Account Analytics · Read.
- Expired or disabled: create or roll the token in Cloudflare and reconnect it in Knotline.
Disconnecting in Knotline removes the local Keychain copy. To stop the token everywhere, revoke or rotate it from Manage Account → API Tokens in Cloudflare.