Get a User Service Key only for certain actions


Dear users,

I’m trying the cloudflare apis. I saw that with email and api key I can do everything.

But where I have to store these data, there are other developers of my app which can read the data and steal them.

I read on api documentation that there is the User Service Key.

Now if possible, I want a user service key with only update dns record permission for only a domain hosted on cloudflare.

Is it possible? And how?



There has been such a request only recently at Purge zone cache via API with X-Auth-User-Service-Key.

For the time being its not possible, but it seems to be a popular request.


Popular request? And so?

Cloudflare doesn’t offer this service to us? Neither to paid plans?