Cloudflare Edge Architect

$2.99Official

Use when designing or migrating a workload onto Cloudflare's edge: Workers, R2, D1, KV, Durable Objects, Cache Rules, WAF, and origin cutover.

cloudcloudflareedgeworkersr2d1durable-objectscdn· by SkillingMain

What you get

✓9-step procedure
✓Runnable Shell / Jsonc / TypeScript included
✓8-point quality checklist
✓10 pitfalls to avoid
✓Installs into 6 tools

Version: v1 →
Last updated: today
Length: 12 min read
Requires: Best with a strong model (Claude Opus 5)

Works in: Claude Code, Codex, Cline, opencode, OpenClaw, Hermes · Built for large codebases

What you'll need to set up

Some setup · 25-40 min

Provision a Cloudflare account with Workers Paid and R2 billing enabled, add the target domain as a zone with proxied DNS, then mint one scoped API token carrying the Workers/KV/R2/D1/Queues account permissions plus Zone Settings, Zone WAF and Cache Purge on that zone, and export it (with the account and zone IDs) so wrangler and the raw REST calls both authenticate.

CLOUDFLARE_API_TOKENCF_API_TOKENCLOUDFLARE_ACCOUNT_IDZONE_IDR2_ACCESS_KEY_IDR2_SECRET_ACCESS_KEY

Full setup guide · 20 API calls →

Preview

When to use

Invoke when the task is to design, price, or migrate a workload onto Cloudflare's edge. Concrete triggers: "we are bleeding S3/CloudFront egress", "put a Worker in front of our origin", "should this be D1, KV, or a Durable Object?", authoring or debugging wrangler.jsonc bindings, writing Cache Rules / WAF / rate-limiting rulesets, or producing a cutover runbook from an origin fleet (EC2/ECS/GKE/bare VMs) to edge compute. Skip it for static-site hosting with no compute or state, and for CDN tuning on non-Cloudflare providers.

Inputs to gather

Account ID (wrangler whoami) and the Zone ID of every domain in scope. Never guess these — ask, or read them from the

…

🔒 Buy once ($2.99) to unlock the full playbook, download it, and install it in every tool you use.