Support

Help with Sunflare

Something not working, or got an idea? Email [email protected] and you'll get a reply, usually within a couple of days. It helps to include your iOS version and a screenshot. Please never send your API token.

Creating an API token

Sign in to the Cloudflare dashboard and go to My Profile → API Tokens.
Tap Create Token, then Create Custom Token, and give it a name such as Sunflare.
Add the permissions below. Leave out anything you don't want Sunflare to touch.
Under Zone Resources, choose all zones or just the ones you want, then create the token.
Copy the token, open Sunflare, tap Connect Cloudflare and paste it in. Cloudflare only shows it once.

Scope	Permission	Used for
Account	Account Settings: Read	Listing your accounts
Account	Cloudflare Pages: Edit	Projects, retrying builds and rollbacks
Account	Cloudflare Tunnel: Read	Tunnel health on the Home screen
Account	Email Routing Addresses: Edit	Destination inboxes
Zone	Zone: Read	Your domains (required)
Zone	DNS: Edit	DNS records
Zone	Analytics: Read	Traffic and the Home screen trends
Zone	Zone Settings: Edit	Development Mode
Zone	Cache Purge: Purge	Purging the cache
Zone	Email Routing Rules: Edit	Custom addresses and the catch-all

Want Sunflare to only look, never change? Choose Read instead of Edit for each one.

Common problems

"Cloudflare didn't accept this API token": the token was mistyped, has expired, or was deleted or rolled. Create a new one and edit the account in Sunflare's settings.
"This API token doesn't have permission": edit the token in the Cloudflare dashboard and add the permission from the table above. You don't need to paste it into Sunflare again.
A domain is missing: the token's Zone Resources don't include it.
Email shows "Email Routing Is Off": turn it on once for that domain in the Cloudflare dashboard, which adds the MX records it needs. After that you can manage addresses in Sunflare.
A new destination address says Pending: open the verification email Cloudflare sent to it and click the link.

Face ID

In Sunflare's settings, set Require Face ID to For Changes to confirm DNS edits, purges, rollbacks and email changes, or to To Open Sunflare to lock the whole app whenever you leave it.

Try it without an account

Tap Explore the Demo on the welcome screen to load a simulated Cloudflare account. Nothing you do in the demo touches a real account.