Cloudflare Tables

The Cloudflare integration uses the following tables

CloudflareAccountMembers

Stores records of users who are members of a Cloudflare account, including their association to the account for access control and administration.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringMembership identifier tag.
StatusstringA member's status in the account.
EmailstringThe contact email address of the user.
FirstNamestringUser's first name
LastNamestringUser's last name
UserIDstringIdentifier for the user.
TwoFactorAuthenticationEnabledbooleanIndicates whether two-factor authentication is enabled for the user account. Does not apply to API authentication.
AccountIDstringIdentifier for the account.
BatchDatedatetimeThe sync date.

CloudflareAccountPermissionGroups

Defines permission groups that bundle specific capabilities or actions, used to control what account members are allowed to do within Cloudflare.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringIdentifier of the group.
NamestringName of the group.
DescriptionstringDescription of the group.
EditablestringWhether the group is editable or not.
LabelstringLabel of the group.
ScopesstringScopes assigned to the group.
BatchDatedatetimeThe sync date.

CloudflareAccountResourceGroups

Represents collections of Cloudflare resources grouped together to scope access, allowing permissions to be applied to specific subsets of account resources.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringIdentifier of the group.
ScopesstringName of the group.
EditablestringDescription of the group.
NamestringWhether the group is editable or not.
BatchDatedatetimeLabel of the group.

CloudflareAccountRoles

Contains role definitions that combine permission groups and resource scopes, forming the basis of Cloudflare’s role-based access control (RBAC) system.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringRole identifier tag.
DescriptionstringDescription of role's permissions.
NamestringRole name.
PermissionsstringList of read and edit permissions for the role.
BatchDatedatetimeThe sync date.

CloudflareAccounts

Holds metadata for Cloudflare accounts, including ownership, identifiers, and high-level account configuration details.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringIdentifier for the account.
NamestringName of the account.
CreatedOndatetimeTimestamp for the creation of the accounts.
AbuseContactEmailstringSets an abuse contact email to notify for abuse reports.
DefaultNameServersstringSpecifies the default nameservers to be used for new zones added to this account. (i.g. cloudflare.standard for Cloudflare-branded nameservers, custom.account for account custom nameservers, custom.tenant for tenant custom nameservers)
EnforceTwoFactorbooleanIndicates whether membership in this account requires that Two-Factor Authentication is enabled
UseAccountCustomNSByDefaultbooleanIndicates whether new zones should use the account-level custom nameservers by default.
BatchDatedatetimeThe sync date.

CloudflareAuditLogs

Records security and administrative events across the Cloudflare account, providing an audit trail for changes, access, and user actions.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringA string that uniquely identifies the audit log.
ResultbooleanA boolean that indicates if the action attempted was successful.
TypestringA string that uniquely identifies the action type.
AccountIDstringA short string that describes the action that was performed.
InterfacestringThe source of the event.
WhendatetimeA UTC RFC3339 timestamp that specifies when the action being logged occured.
MetadatastringAn object which can lend more context to the action being logged. This is a flexible value and varies between different actions.
OwnerIDstringIdentifier for the owner of the audit log entry.
ActorEmailstringThe email of the user that performed the action.
ActorIDstringThe ID of the actor that performed the action. If a user performed the action, this will be their User ID.
ActorIPstringThe IP address of the request that performed the action.
ActorTypestringThe type of actor, whether a User, Cloudflare Admin, or an Automated System.
ResourceIDstringAn identifier for the resource that was affected by the action.
ResourceTypestringA short string that describes the resource that was affected by the action.
BatchDatedatetimeThe sync date.

CloudflareDNSRecords

Stores DNS record data managed in Cloudflare, representing hostname mappings, record types, and routing information within DNS zones.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringThe identifier for the record.
NamestringDNS record name (or @ for the zone apex) in Punycode.
ContentstringFormatted DS content
ProxiedbooleanWhether the record is receiving the performance and security benefits of Cloudflare.
TypestringRecord type.
CommentstringComments or notes about the DNS record.
CommentModifiedOndatetimeThe datetime from when the record comments were last modified.
CreatedOndatetimeThe datetime from when the record was first created.
MetadatastringComponents of a DNS record.
ModifiedOndatetimeThe datetime from when the records was last modified.
ProxiablebooleanWhether the record can be proxied or not.
TagsstringCustom tags for the DNS record.
TagsModifiedOndatetimeThe datetime from when the record tags were last modified.
BatchDatedatetimeThe sync date.
ZoneIDstringUnique identifier of the Cloudflare DNS zone that the DNS record belongs to.

CloudflareZeroTrustUsers

Contains user identities associated with Cloudflare Zero Trust, used for enforcing identity-based access policies and Zero Trust controls.

NameTypeDescription
ConfigIDintegerThe ID of the configuration within Compyl.
IDstringUUID for the user.
CreatedAtdatetimeThe datetime when the user account was created.
LastSuccessfulLogindatetimeThe time at which the user last successfully logged in.
UpdatedAtdatetimeThe datetime when the user account was last updated.
EmailstringThe email of the user.
NamestringThe name of the user.
SeatUIDstringThe email of the user.
UIDstringThe unique API identifier for the user.
AccessSeatbooleanTrue if the user has authenticated with Cloudflare Access.
GatewaySeatbooleanTrue if the user has logged into the WARP client.
ActiveDeviceCountintegerThe number of active devices registered to the user.
BatchDatedatetimeThe sync date.
AccountIDstringUnique identifier for the Cloudflare Zero Trust account that the user belongs to.

CloudflareZones

Represents DNS zones managed by Cloudflare, typically corresponding to domains, and serves as the container for DNS records, settings, and security features.

NameTypeDescription
IDstringIdentifier of the zone.
AccountIDstringThe identifier for the account that the zone belongs to.
AccountNamestringThe name of the account that the zone belongs to.
ActivatedOndatetimeThe last time proof of ownership was detected and the zone was made active.
CreatedOndatetimeWhen the zone was created.
DevelopmentModeintegerThe interval (in seconds) from when development mode expires (positive integer) or last expired (negative integer) for the domain. If development mode has never been enabled, this value is 0.
ModifiedOndatetimeWhen the zone was last modified.
NamestringThe domain name.
NameServersstringThe name servers Cloudflare assigns to a zone.
OriginalDNSHoststringDNS host at the time of switching to Cloudflare.
OriginalNameServersstringOriginal name servers before moving to Cloudflare.
OriginalRegistrarstringRegistrar for the domain at the time of switching to Cloudflare.

CloudflareMagicTransitRoutes

Stores routing rules for Cloudflare Magic Transit, defining how network traffic is forwarded, prioritized, and scoped across Cloudflare’s global infrastructure.

NameTypeDescription
ConfigIDintegerIdentifier linking this Magic Transit route record to its configuration or ingestion context.
IDstringUnique identifier for the Magic Transit route.
NextHopstringIP address or target to which traffic matching the route prefix is forwarded.
PrefixstringIP prefix (CIDR range) that defines which traffic is matched by this route.
PriorityintegerPriority value used to determine route preference when multiple routes match.
CreatedOndatetimeTimestamp indicating when the route was created in Cloudflare.
DescriptionstringOptional descriptive text explaining the purpose of the route.
ModifiedOndatetimeTimestamp of the most recent update to the route.
ScopeColoNamesstringList of Cloudflare data center names where the route is applied.
ScopeColoRegionsstringList of Cloudflare regions where the route is active.
WeightintegerWeight value used for traffic distribution between routes with the same prefix.
AccountIDstringUnique identifier of the Cloudflare account that owns the route.
BatchDatedatetimeTimestamp indicating when this route record was last ingested or updated.

CloudflareWorkerRoutes

Defines URL routing rules that map incoming requests to Cloudflare Worker scripts within a specific DNS zone.

NameTypeDescription
ConfigIDintegerIdentifier linking this Worker route record to its configuration or ingestion context.
IDstringUnique identifier for the Worker route.
PatternstringURL pattern that determines which requests are routed to the Worker script.
ScriptstringName of the Cloudflare Worker script executed when the route pattern matches.
ZoneIDstringUnique identifier of the Cloudflare DNS zone where the Worker route is applied.
BatchDatedatetimeTimestamp indicating when this Worker route record was last ingested or updated.

CloudflareZeroTrustTunnelRoutes

Stores network routes associated with Cloudflare Zero Trust tunnels, defining which networks are reachable through each tunnel and virtual network.

NameTypeDescription
ConfigIDintegerIdentifier linking this tunnel route record to its configuration or ingestion context.
IDstringUnique identifier for the Zero Trust tunnel route.
CommentstringOptional comment or note describing the purpose of the route.
CreatedAtdatetimeTimestamp when the tunnel route was created.
DeletedAtdatetimeTimestamp when the tunnel route was deleted, if applicable.
NetworkstringNetwork CIDR range that is routed through the Zero Trust tunnel.
TunTypestringType of tunnel routing configuration used (e.g., ip, vnet).
TunnelIDstringUnique identifier of the Cloudflare Zero Trust tunnel.
TunnelNamestringHuman-readable name of the tunnel associated with the route.
VirtualNetworkIDstringIdentifier of the virtual network linked to the tunnel route.
VirtualNetworkNamestringName of the virtual network associated with the route.
AccountIDstringUnique identifier of the Cloudflare account that owns the tunnel route.
BatchDatedatetimeTimestamp indicating when this tunnel route record was last ingested or updated.

CloudflareFirewallAccessRules

Stores access control rules and related origin configuration metadata used by Cloudflare to allow, block, or challenge traffic based on IPs, networks, and request context.

NameTypeDescription
ConfigIDintegerIdentifier linking this firewall access rule record to its configuration or ingestion context.
IDstringUnique identifier for the firewall access rule.
AllowedModesstringList of enforcement modes that can be applied to the rule (e.g., block, challenge, allow).
ConfigurationTargetstringType of target the rule evaluates, such as an IP address, IP range, ASN, or country.
ConfigurationValuestringSpecific value matched by the rule, corresponding to the target type.
ModestringAction Cloudflare takes when traffic matches the rule (e.g., block, challenge, whitelist).
CreatedOndatetimeTimestamp indicating when the firewall access rule was created.
ModifiedOndatetimeTimestamp indicating when the firewall access rule was last updated.
NotesstringOptional notes describing the purpose or context of the rule.
ScopeIDstringIdentifier of the scope (account or zone) where the rule is applied.
ScopeEmailstringEmail address associated with the rule’s scope, if applicable.
ScopeTypestringScope level where the rule applies (e.g., account, zone).
AccountIDstringUnique identifier of the Cloudflare account that owns the access rule.
BatchDatedatetimeTimestamp indicating when this access rule record was last ingested or updated.

CloudflareHyperdriveDatabases

Stores configuration details for Cloudflare Hyperdrive databases, defining how Cloudflare securely connects to, authenticates with, and optimizes access to origin database backends.

NameTypeDescription
ConfigIDintegerIdentifier linking this Hyperdrive database record to its configuration or ingestion context.
IDstringUnique identifier for the Hyperdrive database configuration.
NamestringHuman-readable name assigned to the Hyperdrive database.
OriginDatabasestringName of the underlying origin database that Hyperdrive connects to.
OriginHoststringHostname or IP address of the origin database server.
OriginPortintegerNetwork port used to connect to the origin database.
OriginSchemestringConnection scheme or protocol used to access the origin database (e.g., postgres, mysql).
OriginUserstringUsername used by Hyperdrive when authenticating to the origin database.
CachingDisabledbooleanIndicates whether query caching is disabled for this Hyperdrive database.
CreatedOndatetimeTimestamp indicating when the Hyperdrive database configuration was created.
ModifiedOndatetimeTimestamp indicating when the configuration was last updated.
MtlsCaCertificateIdstringIdentifier of the CA certificate used for mutual TLS authentication.
MtlsCertificateIdstringIdentifier of the client certificate used for mutual TLS connections.
MtlsSslModestringSSL/TLS mode applied when connecting to the origin database using mutual TLS.
OriginConnectionLimitintegerMaximum number of concurrent connections allowed to the origin database.
AccountIDstringUnique identifier of the Cloudflare account that owns the Hyperdrive database.
BatchDatedatetimeTimestamp indicating when this Hyperdrive database record was last ingested or updated.

CloudflareD1Databases

Represents Cloudflare D1 databases, storing metadata about serverless SQLite databases managed and accessed through Cloudflare’s platform.

NameTypeDescription
ConfigIDintegerIdentifier linking this D1 database record to its configuration or ingestion context.
UUIDstringUnique identifier assigned to the D1 database.
NamestringHuman-readable name of the D1 database.
CreatedAtdatetimeTimestamp indicating when the D1 database was created.
VersionstringCurrent version or schema version of the D1 database.
AccountIDstringUnique identifier of the Cloudflare account that owns the D1 database.
BatchDatedatetimeTimestamp indicating when this D1 database record was last ingested or updated.

Bridge Tables

CloudflareAccountMembers_CloudflareAccountPermissionGroups

Represents the association between Cloudflare account members and their assigned permission groups, defining what actions and resources each member can access within an account.

NameTypeDescription
MembershipIDstringUnique identifier for the account membership that links a user to a Cloudflare account.
PermissionGroupIDstringUnique identifier of the permission group assigned to the account member.
ConfigIDintegerThe ID of the configuration within Compyl.

CloudflareAccountMembers_CloudflareAccountResourceGroups

Represents the relationship between Cloudflare account members and resource groups, defining which specific account resources each member is permitted to access.

NameTypeDescription
MembershipIDstringUnique identifier for the account membership that links a user to a Cloudflare account.
ResourceGroupIDstringUnique identifier of the resource group assigned to the account member.
ConfigIDintegerThe ID of the configuration within Compyl.

CloudflareAccountMembers_CloudflareAccountRoles

Represents role assignments for Cloudflare account members, defining each member’s permissions and access level within the account.

NameTypeDescription
MembershipIDstringUnique identifier for the account membership that links a user to a Cloudflare account.
RoleIDstringUnique identifier of the role assigned to the account member.
ConfigIDintegerThe ID of the configuration within Compyl.


Did this page help you?