Cloudflare Pages

Move environment variables to and from a Pages project.

Connection

What	This provider
Vendor	Cloudflare
Key	`cloudflare-pages`
Availability	`available`. You can connect it today.
Credential we hold	`cloudflare-token`
Values read back	yes
Activation	`on-next-deploy`

Direction	What it does
`import`	We read names and values out of the store into your environment.
`export`	We write names and values from your environment into the store.

on-next-deploy. A new value waits there and arrives with your next deploy.

Direction	Policies you can pick
`import`	`skip_existing`, `new_version`, `fail`
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

Paste a credential from the vendor. We seal it and never show it again.

Field	Label	Kind	Required	What it is
`apiToken`	API token	secret; we mask it here and seal it	yes

You set these when you connect. Every mapping on the connection shares them.

Field	Label	Kind	Required	Advanced	What it is
`accountId`	Account ID	text	yes	no	Workers & Pages in the dashboard shows it in the right-hand column.

You answer these once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`projectName`	Pages project	text	yes	no	The project whose variables this environment maps onto.
`environment`	Deployments	choice	yes	yes	Encrypted variables already there cannot be read back, so import skips them. One of Production, Preview. Starts at `production`.

We probe for these when we verify the connection.

Permission	Directions	Blocking	Without it
`Account Settings:Read`	every direction	yes	We cannot confirm the token reaches this account.
`Cloudflare Pages:Read`	every direction	yes	Preview cannot list the project's variables.
`Cloudflare Pages:Edit`	`export`	yes	Export cannot write anything.