STEP 1
Connect Cloudflare and MISP
Save credentials in WEXTL once. We store them encrypted and reuse the authorization across every workflow [3]. No coding or API skills required.
Cloudflare and MISP Integration
Connect Cloudflare and MISP to automate developer tools workflows. Trigger events from one app, run actions in the other and use AI to make smart decisions. Integrate apps in 3 simple steps - no code required.
3-day trialCancel anytimeUp to 10 minutes quick set up
- GDPR
- Data Encryption
- 2FA
- Local Data Region
Learn about Cloudflare and MISP
Detailed info you need to know about Cloudflare and MISP integrations in WEXTL. Explore which modules apps support and how you connect them.
Cloudflare
Cloudflare edge platform — zones, DNS, caching, Workers, R2, Zero Trust, and account management. [5]
How to connect Cloudflare to MISP
Set up your Cloudflare and MISP integration in 3 simple steps [2] — no coding required. Up to 10 minutes setup.
STEP 2
Build a workflow
Paste selected Cloudflare and MISP nodes onto the canvas [4], or describe what you want and WEXTL wires the flow together with AI Builder.
STEP 3
Map your data
Choose which fields need to sync between Cloudflare and MISP. Use filters or leverage a JS custom code step in between — everything is on the canvas.
How does the integration between Cloudflare and MISP work in WEXTL?
WEXTL exposes actions and triggers for Cloudflare and MISP that help you connect apps and automate repetitive tasks [1]. A trigger is an event that happens, an action — a step that performs when the event has occurred.
Cloudflare triggersMISP actions
Cloudflare modules
- Watch Audit LogsTriggers when a new audit log entry is recorded on the account.
- Account DetailsRetrieves an account's details.
- Create a NamespaceCreates a new Workers KV namespace.
- Create an AccountCreates a new account under a tenant.
- Create An IP Access RuleCreates a new IP Access rule.
- Create BucketCreates a new R2 bucket.
- Create Cloudflare TunnelCreates a new Cloudflare Tunnel.
- Create DNS RecordCreates a new DNS record.
- Create Firewall RulesCreates new firewall rules.
- Create Health CheckCreates a new health check for a zone.
- Create Load BalancerCreates a new load balancer.
- Create MonitorCreates a new load balancer monitor.
- Create PoolCreates a new load balancer pool.
- Create RouteCreates a new Worker route.
- Create SSL ConfigurationUploads a new custom SSL certificate.
- Create Tunnel RouteCreates a new private network route for a tunnel.
- Create ZoneCreates a new zone.
- Create Zone RulesetCreates a new zone ruleset.
- Create Zone Ruleset RuleAdds a rule to a zone ruleset.
- Delete A Firewall RuleDeletes a firewall rule.
- Delete an AccountDeletes an account.
- Delete An IP Access RuleDeletes an IP Access rule.
- Delete BucketDeletes an R2 bucket.
- Delete Cloudflare TunnelDeletes a Cloudflare Tunnel.
- Delete DNS RecordDeletes a DNS record.
- Delete Health CheckDeletes a health check.
- Delete Load BalancerDeletes a load balancer.
- Delete MonitorDeletes a load balancer monitor.
- Delete ObjectDeletes an object from an R2 bucket.
- Delete Objects or Empty BucketDeletes multiple objects or empties a bucket.
- Delete PoolDeletes a load balancer pool.
- Delete RouteDeletes a Worker route.
- Delete SSL ConfigurationDeletes a custom SSL certificate.
- Delete WorkerDeletes a Worker script.
- Delete ZoneDeletes a zone.
- Delete Zone RulesetDeletes a zone ruleset.
- Delete Zone Ruleset RuleRemoves a rule from a zone ruleset.
- DNS Record DetailsRetrieves a DNS record's details.
- Download WorkerDownloads a Worker script's content.
- Edit Multiple Zone SettingsUpdates multiple zone settings at once.
- Edit Universal SSL SettingsUpdates a zone's Universal SSL settings.
- Edit ZoneUpdates a zone's paused state, plan, or type.
- Edit Zone SettingUpdates a single zone setting's value.
- Enable Worker SubdomainEnables a Worker's workers.dev subdomain.
- Get a NamespaceRetrieves a Workers KV namespace's details.
- Get All Zone SettingsRetrieves all settings for a zone.
- Get BucketRetrieves an R2 bucket's details.
- Get Certificate PackRetrieves a certificate pack's details.
- Get Cloudflare TunnelRetrieves details for a Cloudflare Tunnel.
- Get ObjectDownloads an object from an R2 bucket.
MISP modules
- Add a CollectionAdds a collection.
- Add a FeedAdds a feed.
- Add a Server to a Sharing GroupAdds a server to a sharing group.
- Add a Sharing GroupAdds a sharing group.
- Add an AttributeAdds an attribute.
- Add an Object to an EventAdds an object to an event.
- Add an Organisation to a Sharing GroupAdds an organisation to a sharing group.
- Add Analyst DataAdds analyst data.
- Add EventAdds event.
- Add Event ReportAdds event report.
- Add Event TagAdds event tag.
- Add Galaxy ClusterAdds galaxy cluster.
- Add OrganisationAdds organisation.
- Add ServerAdds server.
- Add Sighting of an AttributeAdds sighting of an attribute.
- Add Sightings of a List of ValuesAdds sightings of a list of values.
- Add TagAdds tag.
- Add Tag(s) to Attribute(s)Adds tag(s) to attribute(s).
- Add UserAdds user.
- Attach the Galaxy Cluster Tag a Given EntityAttaches the galaxy cluster tag a given entity.
- Cache FeedsCaches feeds.
- Check If a List of Values Matches Any WarninglistsRetrieves check if a list of values matches any warninglists.
- Delete a CollectionDeletes a collection.
- Delete a GalaxyDeletes a galaxy.
- Delete a Server from a Sharing GroupDeletes a server from a sharing group.
- Delete a Sharing GroupDeletes a sharing group.
- Delete a Tag from an AttributeDeletes a tag from an attribute.
- Delete an AttributeDeletes an attribute.
- Delete an Organisation from a Sharing GroupDeletes an organisation from a sharing group.
- Delete Analyst DataDeletes analyst data.
- Delete EventDeletes event.
- Delete Event ReportDeletes event report.
- Delete Event Report PermanentlyDeletes event report permanently.
- Delete Event TagDeletes event tag.
- Delete Galaxy ClusterDeletes galaxy cluster.
- Delete ObjectDeletes object.
- Delete OrganisationDeletes organisation.
- Delete ServerDeletes server.
- Delete SightingDeletes sighting.
- Delete TagDeletes tag.
- Delete UserDeletes user.
- Delete User Setting by IdDeletes user setting by id.
- Disable FeedDisables feed.
- Disable TaxonomyDisables taxonomy.
- Edit a CollectionEdits a collection.
- Edit a FeedEdits a feed.
- Edit a Sharing GroupEdits a sharing group.
- Edit an AttributeEdits an attribute.
- Edit Analyst DataEdits analyst data.
- Edit EventEdits event.
Explore alternative integrations
There are other apps [9] supported by WEXTL that can be paired with Cloudflare and MISP integrations. Pick any from the list below if the current combination isn't the one you need.
Frequently asked questions
Common questions about connecting Cloudflare and MISP.
Connect your Cloudflare and MISP accounts once, pick a trigger in one app and an action in the other, then map the fields so data flows automatically between them. [3]
Example: when Cloudflare's "Watch Audit Logs" fires, WEXTL can "Add a Collection" in MISP. Cloudflare has 1 trigger (including Watch Audit Logs); MISP has 138 actions (including Add a Collection, Add a Feed, and Add a Server to a Sharing Group). Add filters and transforms between steps when you need them. [1]
Yes — the integration works in both directions. Use each app's triggers to start a workflow and the other app's actions to update it. [2]
No. Cloudflare-to-MISP automations are built visually on the canvas. You can optionally add custom JavaScript with Functions when you need advanced logic. [4]
Yes. Trigger-based automations start the moment Cloudflare (or MISP) fires a new event — webhook-backed apps run within seconds, and polling-only apps re-check on a schedule you control. [7]
A first automation typically takes 5–10 minutes: connect each app's credential once, drop a trigger + action onto the canvas, map the fields, and turn the workflow on.
You can build your Cloudflare + MISP automation on a 3-day trial with every feature unlocked. Cancel anytime. For your protection, a small deposit is charged to your card when your trial starts. It counts toward your first payment and is non-refundable. [8]
References
List of sources used to gather information about the Cloudflare and MISP integration.
- Cloudflare and MISP integration source code, module specs and credentials implementation.
- Our Cloudflare and MISP integration documentation, structured input and output parameters, scopes, and authentication methods.
- Official vendor API documentation for Cloudflare and MISP — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
- WEXTL® visual workflow builder, anonymized data from our technical support team.
- Cloudflare integration information
- MISP integration information
- WEXTL® Scheduling
- WEXTL® Pricing and Trial
- WEXTL® Apps Library