Skip to content
NewSee how

Apply email DNS to Cloudflare in one click

If your domain is on Cloudflare, FirstSales can add your SPF, DKIM and DMARC records for you with a scoped API token. No copy-pasting into your DNS panel.

Tutorials
Deliverability
min read
6 min
steps
7 · Intermediate

  1. Open the mailbox → Technical tab

    In Connectors, open a sending mailbox and go to the Technical tab to see SPF, DKIM, and DMARC status.

  2. Look for “This domain is on Cloudflare”

    If your nameservers point to Cloudflare, FirstSales detects it and shows an Add to Cloudflare panel. If you don't see it, your domain isn't on Cloudflare: add the records manually instead.

    Look for “This domain is on Cloudflare”

  3. Create a scoped Cloudflare API token

    In Cloudflare, go to My Profile → API Tokens → Create Token and give it Zone → DNS → Edit permission on the specific zone. Copy the token.

  4. Open Add Records to Cloudflare

    Click Add to Cloudflare. The modal lists the exact records it will create: only the ones still missing.

  5. Paste the token and Apply

    Paste your scoped token (the field is masked and never stored) and click Apply Records. FirstSales writes the records to your Cloudflare zone.

  6. Handle “zone not found”

    If you get a zone-not-found error, the token doesn't cover that domain. Recheck the zone scope and confirm the domain lives on this Cloudflare account.

  7. Verify

    The modal closes and FirstSales re-checks DNS; the SPF/DKIM/DMARC rows move toward OK and your auth score climbs. You can delete the token in Cloudflare afterward: FirstSales doesn't keep it.

Pro tips

  • Scope the token tightly

    Zone → DNS → Edit on just the one zone is all it needs. Don't use a Global API Key: a narrowly scoped token is safer and does the whole job.

  • The token is never stored

    FirstSales uses it for the single apply request and drops it: the field is masked and cleared. You can revoke it in Cloudflare right after.

  • Only missing records are added

    The modal shows exactly what it will create, so it won't clobber records you already have: review the list before applying.

  • Pair it with Managed DKIM

    Enable Managed DKIM first; then this flow can publish the DKIM record along with SPF and DMARC in one pass.

Frequently asked questions

What does the Cloudflare one-click do?

It writes your SPF, DKIM, and DMARC records directly into your Cloudflare zone so you don't paste them by hand.

How does FirstSales get access?

You paste a Cloudflare API token scoped to Zone → DNS → Edit; it's used for the one request only.

Is my token stored?

No: the field is masked, and the token is never stored, logged, or echoed; it's cleared after the request completes.

What permissions does the token need?

Zone → DNS → Edit on the domain's zone. Nothing broader.

I got “zone not found”: what's wrong?

The token doesn't cover that domain. Confirm the zone scope and that the domain is on this Cloudflare account.

Will it overwrite my existing DNS?

It only adds the missing SPF/DKIM/DMARC records shown in the modal; review the list first.

My domain isn't on Cloudflare: can I still use this?

No: this flow is Cloudflare-only. Add the records manually at your DNS host instead.

Should I delete the token after?

You can revoke it in Cloudflare once records are applied; FirstSales doesn't retain it.

Deliverability

Outreach that keeps going after you log off.Leads, emails, follow-ups and replies, handled.

Connect unlimited mailboxes and let AI agents find leads, write each email and follow up. Or send your own templates in manual mode. From $29/mo.

Start your $1 trial See pricing

$1 for 3 days · Cancel anytime · No contract

Install with AI

Your coding agent sets up the FirstSales CLI and skills for you.

Prompt for Claude Code

I'm setting up FirstSales (https://firstsales.io), an AI outbound sales platform: campaigns, contacts, a reply inbox, deliverability and lead signals. Help me get my workspace sending real, good emails end to end, from Claude Code.

Read these first so you know how FirstSales works:
- Developer docs and API: https://developer.firstsales.io
- CLI: https://www.npmjs.com/package/@firstsales.io/cli
- Skills for coding agents: https://github.com/firstsalesio/firstsales-skills (read README.md and GUIDE.md)

Setup
1. Install the CLI: npm install -g @firstsales.io/cli
2. Install the FirstSales skills:
   claude plugin marketplace add firstsalesio/firstsales-skills
   claude plugin install firstsales@firstsales
3. Ask me if I already have a FirstSales account. If not, send me to https://app.firstsales.io to sign up.
4. Ask me to create an API key under Settings → API → API Keys, with only the scopes we need.
   Never ask me to paste the key into this chat. Tell me to run this in my own terminal, so the key stays hidden:
   read -rs FS_KEY && firstsales auth login --api-key "$FS_KEY"; unset FS_KEY
5. Run `firstsales whoami` and tell me which workspace and organisation we are connected to.

Then ask me about my business: what I sell, who I sell to (roles, company size, countries), my best customers, and what I use today for outbound (tools, lists, mailboxes). Walk me through:
1. Teaching FirstSales my business: website, offer, proof points and case studies in the knowledge base, so the AI writes like someone who knows the product.
2. Connecting my sending mailboxes and checking my sending domain: SPF, DKIM, DMARC and warm-up. If anything is unhealthy, tell me the exact DNS record to add.
3. Bringing in contacts: import my CSV or CRM export into a clean list, remove duplicates and bad emails, and block domains I must never email (customers, competitors, my own).
4. Building my first campaign: the right list, senders, steps and timing. Write the sequence with me, show me the drafts, and do not launch until I say yes.
5. Setting up Signals if it fits: find people engaging with LinkedIn posts about topics my buyers care about, and turn them into leads.
6. Inviting my team and giving each person the right access.

Once campaigns run, show me how to work the reply inbox from here: which replies need an answer, draft responses in my voice, and move good conversations into deals. If I use Cal.com, connect it so follow-ups can offer my booking link (not the first email).

Throughout, as you learn about my business, proactively suggest and help create:
- Reply templates for the questions and objections my prospects are likely to raise, based on my product, site and codebase if you can see them.
- Campaign ideas and segments worth testing, with the reason for each.

Safety rules:
- Show every change as a dry run (--dry-run) first and wait for my yes. Never send emails, launch campaigns or delete anything without my yes.
- Tell me before anything that spends credits, and how many.

Be opinionated. If the docs give a sensible default, just use it. Don't make me choose between five options.
Developer docs ↗npm: @firstsales.io/cli ↗GitHub: firstsales-skills ↗