cloudflare-one

Agent skill from cloudflare/skills.

cloudflare ↓ 11k

Claude Code

View source ↗

What it does

Sites and users: offices, branches, data centers, VPCs, remote users, contractors, user counts, and current connectivity model.
Applications and destinations: SaaS, public apps, private apps, APIs, infrastructure targets, protocols, ports, hostnames, and IP ranges.
Connectivity: VPN, MPLS, SD-WAN, direct Internet breakout, centralized backhaul, site-to-site needs, and private DNS architecture.
Security stack: current SWG, NGFW, VPN/ZTNA, DLP, CASB, email security, logging, and compliance requirements.
Identity: IdP, SCIM/group sync, group naming, multi-IdP needs, service accounts, and contractor/partner access.
Rollout: pilot users/sites, blast radius, rollback path, support owners, and success criteria.
SaaS details: SAML vs OIDC support, ACS/redirect URLs, Entity IDs/client IDs, required attributes, and tenant-control requirements.

Requirements & configuration

Connectivity: VPN, MPLS, SD-WAN, direct Internet breakout, centralized backhaul, site-to-site needs, and private DNS architecture.
Identity: IdP, SCIM/group sync, group naming, multi-IdP needs, service accounts, and contractor/partner access.
Policy needs: user groups, device posture, session duration, mTLS, service tokens, and app launcher visibility. Retrieve Access policy docs before configuring selectors or evaluation order.
Sites and segments: which data centers, VPCs, offices, or network segments need connectivity.
Routing: required CIDRs/hostnames, overlapping IP spaces, virtual networks, Split Tunnels, and private DNS/resolver policy needs.

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

Source

Repository: https://github.com/cloudflare/skills

cloudflare-one FAQ

What does the cloudflare-one skill do?

Guides Cloudflare One Zero Trust and SASE work across Access, Gateway, WARP, Tunnel, Cloudflare WAN, DLP, CASB, device posture, and identity. Use when designing, configuring, troubleshooting, or reviewing Cloudflare One deployments. Retrieval-first: use current Cloudflare docs/API schemas instead of embedded product docs. Sites and users: offices, branches, data centers, VPCs, remote users, contractors, user counts, and current connectivity model. Applications and destinations: SaaS, public apps, private apps, APIs, infrastructure targets, protocols, ports, hostnames, and IP ranges.

What does cloudflare-one require?

Connectivity: VPN, MPLS, SD-WAN, direct Internet breakout, centralized backhaul, site-to-site needs, and private DNS architecture. Identity: IdP, SCIM/group sync, group naming, multi-IdP needs, service accounts, and contractor/partner access. Policy needs: user groups, device posture, session duration, mTLS, service tokens, and app launcher visibility. Retrieve Access policy docs before configuring selectors or evaluation order. Sites and segments: which data centers, VPCs, offices, or network segments need connectivity. Routing: required CIDRs/hostnames, overlapping IP spaces, virtual networks, Split Tunnels, and private DNS/resolver policy needs.

How do I install cloudflare-one?

Run: npx -y skills add https://github.com/cloudflare/skills --skill cloudflare-one --agent claude-code — the source lives at github.com/cloudflare/skills.

Maintain cloudflare-one?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![cloudflare-one on getagentictools](https://getagentictools.com/badge/skills/cloudflare-skills-cloudflare-one.svg)](https://getagentictools.com/skills/cloudflare-skills-cloudflare-one?ref=badge)

npx agentictools info skills/cloudflare-skills-cloudflare-one

The second line is the CLI lookup for this page — handy in READMEs and docs.