Cloudflare's "Ask AI" created an API token with read access to my entire account
Last week, auditing my Cloudflare API tokens, I found one I never created: “Cloudflare Agent Token - 2026-04-28”, created by the dashboard’s AI assistant (“Ask AI”). Cloudflare’s tooltip says it exists so the AI can “understand your environment and take actions on your behalf.” Its actual grant, from the token’s own summary page: read access scoped to All accounts, All zones, and All users — more than 160 permissions. Every one is :Read: it cannot change anything. But “read-only” undersells it. The list includes Secrets Store:Read, Access: Keys:Read, Access: Service Tokens:Read, Zero Trust: PII:Read, Logs:Read, Account Audit Logs:Read, Billing:Read, API Tokens:Read, and every DNS, Access and identity-provider config you have. ...