> Yes, there is? That's why I want to check CF-Worker (and enforce 2a06:98c0:3600::103 as the source

Yes, there is? That's why I want to check CF-Worker (and enforce 2a06:98c0:3600::103 as the source IP).
I can make 20 free Cloudflare accounts and abuse the API while looking legitimate. Even if I have to buy a domain for each, that's what, $4/yr/ea?

As for the API key, it's going to be needed for the paid plan, so they might as well look to implement it in some way. Ask for email, provide key in response. KISS principle.
Was this page helpful?