Cloudflare DNS AI Skill Guide (Claude)

Overview & Engine Architecture

Cloudflare DNS is authoritative for a zone. Proxied (orange cloud) A/AAAA/CNAME records send HTTP(S) through Cloudflare’s edge (anycast IPs to clients; origin hidden). DNS-only (grey cloud) returns origin addresses. Only A / AAAA / CNAME can be proxied; MX/TXT/etc. are always DNS-only. Proxied records use Auto TTL (~300s, not editable). Agents inventory/export before edits, choose proxy mode by traffic type, lower TTL ahead of grey-record migrations, and use zone-scoped API tokens—never Global API keys in automation.