Cloudflare zones

Lists every Cloudflare zone the API token can see, across all accounts the token is scoped to. The zone id returned here is the key for every per-zone follow-up: analytics, DNS records, rulesets and settings all take it.

Query

SELECT id, name, status, paused
FROM cloudflare.zones.zones;

Notes

No parameters: scoping comes entirely from the token, so a token restricted to one zone returns one row and an account-wide token returns them all. A zone with status active but paused = true is resolving through Cloudflare DNS only, with proxying and all edge features bypassed - a common cause of "security settings are configured but not taking effect". Statuses other than active mean the zone is not yet serving: pending is awaiting nameserver delegation and initializing is provisioning. Cloudflare API tokens are scoped per permission group, so a token that lists zones successfully may still fail with an authentication error on DNS records or analytics; grant each surface explicitly rather than assuming zone access implies the rest.