Super Page Cache Cloudflare Permissions

Super Page Cache can connect to Cloudflare using either an API Token (recommended for security) or a Global API Key. Each method requires a specific set of permissions.

Authentication Methods

The plugin supports two methods to authenticate with Cloudflare's API:

API Token (Recommended)

API Tokens provide granular access control with specific permissions for better security. To set up using an API Token:

1. Log into your Cloudflare dashboard
2. Navigate to My Profile > API Tokens
3. Click Create Token
4. Select the WordPress template
5. Click Continue to summary
6. Review permissions and click Create Token
7. Copy the generated token
8. In plugin settings:
   • Select "API Token" authentication mode
   • Paste your API token
   • Enter your domain name

The WordPress template already includes the permissions the plugin needs to read your account and manage caching, including Zone > Zone > Read, which lets the plugin load the list of domains (zones) on your Cloudflare account. Keep all of the template's permissions in place, and add these two permissions manually before you create the token:

• Zone/Cache Rules: Edit
• Zone/Transform Rules: Edit

⚠️ Important: If you build a custom token instead of starting from the WordPress template, make sure it still includes Zone > Zone > Read. Without it, the plugin cannot fetch your domain list, and the settings screen can load blank when you connect. Review every permission on the summary screen before you click Create Token.

If the settings screen goes blank when connecting

If the settings screen goes blank, the domain selector stays empty, or your browser console shows an error such as Cannot convert undefined or null to object after you click Connect to Cloudflare, your API token is most likely missing Zone > Zone > Read. To fix it:

1. In your Cloudflare dashboard, open My Profile > API Tokens and edit the token you connected (or create a new one).
2. Add the Zone > Zone > Read permission, then save the token.
3. Back in the plugin, re-enter the token and click Connect to Cloudflare, then reload the settings page.

For more recovery steps, see Troubleshooting: Cloudflare zone dropdown is blank or frozen.

API Key

The Global API Key provides full account access and is less secure:

1. Log into your Cloudflare dashboard
2. Navigate to My Profile > API Tokens
3. Scroll down to API Keys section
4. Click View next to Global API Key
5. Copy the API Key
6. In plugin settings:
   • Select "API Key" authentication mode
   • Enter your Cloudflare account email
   • Paste your Global API Key

Note: API Token is the recommended authentication method as it follows security best practices by limiting access to only required permissions.