It always happens at the worst time: a site is under attack, or DNS needs a quick fix, and I'm nowhere near a laptop. Cloudflare's dashboard on mobile Safari is... an experience. So I built CFMobile — a full Cloudflare management app for Android.

GitHub: imtaqin/CFMobile · Google Play

CFMobile is an independent, unofficial client. It talks to the official Cloudflare API with your own API token.

What it does

  • Zones & DNS — search, filter and edit records, toggle the orange cloud with one tap, DNS templates, BIND import/export, global search across all zones.
  • Security — Under Attack Mode, Development Mode and Pause Zone sit on top of every zone. WAF custom rules, IP access rules, SSL/TLS mode, Always Use HTTPS.
  • Analytics — requests, cached vs uncached, bandwidth, threats and cache hit rate over 1/7/30-day ranges.
  • Developer platform — Workers with live tail logs, browsers for KV, R2 and D1, Pages projects and deployments.
  • AI assistant — ask for a change in plain language ("block all traffic from this ASN"), and get an AI security audit with a score and concrete fixes. Every action is shown first; nothing runs until you approve it.

Plus Email Routing, cache purge, page rules, audit logs, multiple accounts, light/dark themes and 12 languages.

Security model

Your API token never leaves the device except to hit api.cloudflare.com. Tokens are encrypted with the Android Keystore, and the app supports biometric lock. You can scope the token down to exactly the permissions you need — the README documents the minimal set.

Stack

TypeScript (strict), React Native 0.81 + Expo SDK 54. The whole thing is MIT-licensed, currently at 36 stars, and the roadmap in docs/ROADMAP.md tracks which Cloudflare products are editable vs still read-only.

If you run anything behind Cloudflare, this turns incident response into something you can do from a parking lot.