---
title: "Apply email DNS to Cloudflare in one click | FirstSales"
description: "If your domain is on Cloudflare, FirstSales can add your SPF, DKIM and DMARC records for you with a scoped API token — no copy-pasting into your DNS panel."
canonical: "https://firstsales.io/tutorial/cloudflare-one-click-dns/"
---

[Home](/)/[Tutorials](/tutorial/)/Apply email DNS to Cloudflare in one click

Deliverability

# Apply email DNS to Cloudflare in one click

If your domain is on Cloudflare, FirstSales can add your SPF, DKIM and DMARC records for you with a scoped API token — no copy-pasting into your DNS panel.

6 min read·Intermediate·7 steps

1. 1  
## Open the mailbox → Technical tab  
In **Connectors**, open a sending mailbox and go to the **Technical** tab to see SPF, DKIM, and DMARC status.
2. 2  
## Look for “This domain is on Cloudflare”  
If your nameservers point to Cloudflare, FirstSales detects it and shows an **Add to Cloudflare** panel. If you don't see it, your domain isn't on Cloudflare — add the records manually instead.  
![Look for “This domain is on Cloudflare”](/tutorials/cloudflare-01-add-to-cloudflare.webp)
3. 3  
## Create a scoped Cloudflare API token  
In Cloudflare, go to **My Profile → API Tokens → Create Token** and give it **Zone → DNS → Edit** permission on the specific zone. Copy the token.
4. 4  
## Open Add Records to Cloudflare  
Click **Add to Cloudflare**. The modal lists the exact records it will create — only the ones still missing.
5. 5  
## Paste the token and Apply  
Paste your scoped token — the field is masked and never stored — and click **Apply Records**. FirstSales writes the records to your Cloudflare zone.
6. 6  
## Handle “zone not found”  
If you get a zone-not-found error, the token doesn't cover that domain. Recheck the zone scope and confirm the domain lives on this Cloudflare account.
7. 7  
## Verify  
The modal closes and FirstSales re-checks DNS; the SPF/DKIM/DMARC rows move toward OK and your auth score climbs. You can delete the token in Cloudflare afterward — FirstSales doesn't keep it.

## Pro tips

Hard-won shortcuts that keep warm-up on track.

1

### Scope the token tightly

Zone → DNS → Edit on just the one zone is all it needs. Don't use a Global API Key — a narrowly scoped token is safer and does the whole job.

2

### The token is never stored

FirstSales uses it for the single apply request and drops it — the field is masked and cleared. You can revoke it in Cloudflare right after.

3

### Only missing records are added

The modal shows exactly what it will create, so it won't clobber records you already have — review the list before applying.

4

### Pair it with Managed DKIM

Enable Managed DKIM first; then this flow can publish the DKIM record along with SPF and DMARC in one pass.

## Frequently asked questions

What does the Cloudflare one-click do?

It writes your **SPF**, **DKIM**, and **DMARC** records directly into your Cloudflare zone so you don't paste them by hand.

How does FirstSales get access?

You paste a Cloudflare API token scoped to **Zone → DNS → Edit**; it's used for the one request only.

Is my token stored?

No — the field is masked, and the token is never stored, logged, or echoed; it's cleared after the request completes.

What permissions does the token need?

**Zone → DNS → Edit** on the domain's zone. Nothing broader.

I got “zone not found” — what's wrong?

The token doesn't cover that domain. Confirm the zone scope and that the domain is on this Cloudflare account.

Will it overwrite my existing DNS?

It only adds the missing SPF/DKIM/DMARC records shown in the modal; review the list first.

My domain isn't on Cloudflare — can I still use this?

No — this flow is Cloudflare-only. Add the records manually at your DNS host instead.

Should I delete the token after?

You can revoke it in Cloudflare once records are applied; FirstSales doesn't retain it.

## Ready to put this into practice?

Start your FirstSales trial and launch a warmed, authenticated mailbox in minutes.

[Start for $1](https://app.firstsales.io)

[All tutorials](/tutorial/)