Cloudflare
Inventory your Cloudflare domains, members, Workers, API tokens, roles, and billing.
Questions you can answer 140
Each one is a saved query that ships with ConfigView, reading your Cloudflare data on your own server. Ask it in plain English, SQL, Slack or the API.
- What Zero Trust Access groups do we have in Cloudflare?
- Which Cloudflare Access groups let in anyone with a company email domain?
- Show me the rules behind each Cloudflare Access group
- Does our Cloudflare account require two-factor for everyone?
- What are the account-wide security settings in Cloudflare?
- Is API access restricted at the Cloudflare account level?
- Can Cloudflare members authorize third-party OAuth apps?
- List every Cloudflare API token
- Show me all Cloudflare API tokens with last-used and expiry dates
- What API keys exist on our Cloudflare account?
- How many Cloudflare API tokens do we have?
- Give me a count of Cloudflare tokens that are expired, unused or never expire
- Which Cloudflare API tokens have already expired?
- List expired Cloudflare tokens we should delete
- Which Cloudflare API tokens expire in the next 30 days?
- Are any Cloudflare tokens about to expire and break our automation?
- Show me Cloudflare API keys due for renewal soon
- Which Cloudflare API tokens have never been used?
- Find Cloudflare tokens nobody has ever used since they were created
- Which Cloudflare API tokens never expire?
- Find Cloudflare tokens without an expiration date
- List long-lived Cloudflare API keys with no expiry set
- Which Cloudflare API tokens haven't been used in 90 days?
- Show me idle Cloudflare API keys we could revoke
- Are there Cloudflare tokens that have gone stale?
- Who is making the most changes in Cloudflare?
- Rank Cloudflare audit activity by user or token
- Is a former employee still making changes in Cloudflare?
- Are Cloudflare changes coming from the dashboard, API tokens or SCIM?
- Break down Cloudflare audit events by interface
- Which actions failed in the Cloudflare audit log?
- Is anyone probing their permissions in Cloudflare?
- Show me unsuccessful Cloudflare changes by actor
- Who was added to or removed from Cloudflare recently?
- Which admin changed someone's Cloudflare role?
- Why did our Cloudflare member count drop?
- What changed in our Cloudflare account recently?
- Show me the Cloudflare audit log for the last 7 days
- Who made changes in Cloudflare this week and from where?
- Which Cloudflare error pages have we customized?
- Where are our custom Cloudflare block and challenge pages hosted?
- List every domain we have in Cloudflare
- Show me the full Cloudflare zone inventory with plans and status
- What domains does Cloudflare manage for us?
- How many Cloudflare zones are on Free, Pro, Business or Enterprise?
- Break down our Cloudflare domains by plan tier
- Break down our Cloudflare zones by status
- How many Cloudflare domains are active versus pending or moved?
- How many zones do we have in Cloudflare?
- Give me a summary of Cloudflare domains: active, paused and on paid plans
- How many Cloudflare zones are paused or in development mode?
- Which Cloudflare zones have development mode turned on?
- Did someone leave dev mode on for a Cloudflare domain?
- Find Cloudflare zones where edge caching is bypassed
- Which Cloudflare zones aren't fully active?
- Show me Cloudflare domains stuck pending or with unfinished nameserver setup
- Are there deactivated or moved domains still sitting in Cloudflare?
- Which Cloudflare zones are we paying for?
- List Cloudflare domains on a paid plan
- Are we paying for Cloudflare plans on parked or staging domains?
- Which Cloudflare zones are paused?
- Are any of our domains bypassing the Cloudflare proxy right now?
- Find paused Cloudflare domains where WAF and DDoS protection is off
- Which domains were added to Cloudflare in the last 30 days?
- Show me new Cloudflare zones created recently
- Has anyone added a new domain to Cloudflare this month?
- When was Cloudflare data last collected?
- Is the Cloudflare collector broken or are any tables empty?
- Show me how fresh each Cloudflare table is
- Which Cloudflare members have their own two-factor set up?
- Who could still log into Cloudflare with native 2FA if SSO went down?
- List the Cloudflare accounts with MFA enabled
- List every member of our Cloudflare account
- Who has access to our Cloudflare account?
- Show me the full Cloudflare user roster for an access review
- Which Cloudflare members can use the API?
- Who in Cloudflare isn't blocked from API access?
- List Cloudflare users with API access overrides
- Who effectively has Cloudflare API access once account-level settings are applied?
- Show me each Cloudflare member's resolved API access, including inherited settings
- How many Cloudflare members are accepted versus still pending?
- Break down Cloudflare members by invitation status
- How many members does our Cloudflare account have?
- Give me a quick count of Cloudflare members, pending invites and super admins
- How many Cloudflare users are missing 2FA or have API access?
- Which Cloudflare members aren't on example.com email addresses?
- Find Cloudflare users with personal or outside email domains, not example.com
- Do any contractors outside example.com have access to Cloudflare?
- Which Cloudflare members don't have two-factor turned on?
- Who in Cloudflare is missing MFA on their own login?
- Find Cloudflare users without 2FA
- Who has an unaccepted Cloudflare invite?
- Show me Cloudflare invitations that are still pending
- Are there stale Cloudflare invites we should revoke?
- Who are the Super Administrators in Cloudflare?
- How many people have full admin control of our Cloudflare account?
- List every Cloudflare super admin
- What alerting policies do we have set up in Cloudflare?
- List Cloudflare notification policies and how many destinations each has
- Which Cloudflare alerts are disabled or have no destination?
- Are any Cloudflare notification policies alerting nobody?
- Find Cloudflare alerts that wouldn't actually page anyone
- What roles exist in our Cloudflare account?
- List Cloudflare account roles and what permissions each one has
- What Cloudflare subscriptions do we have?
- List all our Cloudflare subscriptions with price and billing frequency
- What are we paying Cloudflare for?
- How many Cloudflare subscriptions are paid, on trial or cancelled?
- Break down Cloudflare subscriptions by state and total price
- Which Cloudflare subscriptions renew in the next 30 days?
- Are any Cloudflare subscriptions about to auto-bill soon?
- Show me Cloudflare subscription periods ending this month
- How much do we spend on Cloudflare monthly versus annually?
- Summarize our recurring Cloudflare spend by billing frequency
- What's our total active Cloudflare subscription cost?
- List every Cloudflare Tunnel we have
- What inbound paths into our network run through Cloudflare Tunnels?
- When did each Cloudflare Tunnel last have an active connection?
- How many Cloudflare Tunnels are healthy versus down?
- Break down our Cloudflare Tunnels by status
- Which Cloudflare Tunnels are down or degraded?
- Find Cloudflare Tunnels that have never connected
- Are there dead Cloudflare Tunnels we should delete?
- What user groups exist in our Cloudflare account?
- Which Cloudflare IAM groups grant the most permissions?
- List every Cloudflare Worker we have deployed
- Show me all Workers scripts with their compatibility dates and last deploy
- What Cloudflare Workers are running on our account?
- How many Cloudflare Workers are on bundled versus unbound?
- Break down our Workers by usage model to see which bill on CPU time
- How many Cloudflare Workers do we have deployed?
- What's the total size of our Cloudflare Workers scripts?
- Which Cloudflare Workers are the biggest?
- Rank our Workers scripts by deployed size
- Are any Cloudflare Workers getting close to the script size limit?
- Which Cloudflare Workers don't have logpush enabled?
- Find Workers scripts that aren't sending logs anywhere
- Which Cloudflare Workers have an old compatibility date?
- Find Workers scripts whose compatibility date is over a year old
- Are any of our Workers missing newer runtime fixes because of an outdated compat date?
No Cloudflare questions match that yet. Try a shorter word.
What ConfigView collects from Cloudflare 13
-
Domains
Retrieve and manage Cloudflare Domains information.
-
Members
Retrieve and manage Cloudflare Members information.
-
Workers
Inventory Workers scripts with size, usage model, and deployment metadata.
-
API Tokens
Audit account-owned API tokens, their status, and last-used dates.
-
Roles
List account roles and their permission scopes.
-
Subscriptions
Track products, licenses, and billing via account subscriptions and rate plans.
-
Account Settings
Account-wide posture: 2FA enforcement, API access restriction, and OAuth app access.
-
Audit Logs
Administrative changes made in the Cloudflare dashboard — who did what, when, and from where.
-
User Groups (Account IAM)
Account IAM user groups, the newer alternative to granting roles member by member, with how many policies each carries.
-
Access Groups
Zero Trust Access groups and the rules that decide who gets in.
-
Tunnels
Cloudflare Tunnel inventory with health and connection state.
-
Notification Policies
Alerting coverage, including policies that would page nobody.
-
Custom Pages
The account's custom error and challenge pages, and whether each is customized or still the Cloudflare default.