Adds edge traffic, cache, and origin error signals to InfraDesk cleanup decisions. Read-only — InfraDesk never changes your DNS, WAF, cache rules, or zone settings.

Required permissions

• Zone: Read

• Zone Analytics: Read

• Account Analytics: Read

Create API token in Cloudflare dashboard →

What InfraDesk reads

Traffic analytics (requests, bytes)
Cache hit ratio
Edge 4xx and 5xx error counts
Zone metadata (name, status, plan)

What InfraDesk never changes

DNS records
WAF rules
Cache rules / page rules
Zone settings
Load balancers
Workers

Decision signals generated

Traffic spike

Avoid scheduled scale-down during this window.

Origin 5xx spike

Review AWS ALB/target health before cleanup.

Low cache hit ratio

AWS origin may be taking avoidable load.

Edge error anomaly

Review before capacity changes.

Known limitations

Cloudflare GraphQL Analytics API requires Business or Enterprise plan for some metrics. If unavailable, InfraDesk stores null and shows "Signal unavailable from Cloudflare API for this zone." No fake data is generated.

How to disconnect

Go to /dashboard/integrations → Cloudflare → Disconnect. This removes the encrypted token from our database and revokes the local connection.