Integrating Cloudflare with Escape's ASM enhances API ecosystem management by incorporating your Cloudflare configuration.

## Discovered Resources

The Cloudflare integration automatically discovers and inventories the following resources from your Cloudflare account:

- **Cloudflare Zones**: DNS zones managed by Cloudflare, including all domain names and subdomains
- **Cloudflare API Gateway**: API endpoints and schemas exposed through Cloudflare's API Gateway

These discovered resources are automatically classified as Assets (APIs, DNS records, WebApps) in Escape's ASM, enabling continuous security monitoring and testing.

### Generate a Cloudflare API Key

To create your API key:

1. Go to your profile in the [Cloudflare Dashboard](<https://dash.cloudflare.com/profile/api-tokens>)
2. Create a new `user` token in the `Create Custom Token` section
3. Name your token and select the following permissions:

   - Account: `API Gateway: Read`
   - Zone: `Zone: Read`
   - Zone: `DNS: Read`
4. Click `Create Token`

> [!WARNING]
>
> The integration works with `user` tokens as defined in the [Cloudflare API documentation](<https://developers.cloudflare.com/api/resources/user/subresources/tokens/methods/verify/>). Using other token types such as `account` or `zone` isn't supported.