Registrars / Cloudflare
Track your Cloudflare domains.
nmspc reads your Cloudflare Registrar domains and DNS zones with an API token and reminds you before anything expires. It never changes them.
nmspc reads your Cloudflare Registrar domains with an API token you create from a pre-filled form: when each one expires, whether auto-renew is on, whether it's locked or in redemption. It also finds domains that only use Cloudflare DNS. nmspc lists what it finds and you choose which domains to track; nothing is added by itself. On Free it syncs when you press Sync now, on Pro every day.
Connect Cloudflare
Steps
- Create a token from Cloudflare's pre-filled form, which only asks for read permissions. Add the permission Registrar · Domains · Read, then press Create. Zone · Read is already ticked: it brings in domains that use Cloudflare DNS but are registered elsewhere.
- Paste the token in nmspc under Settings › Integrations › Cloudflare. Checked with Cloudflare, stored encrypted, never shown again. Your domains import right away.
What nmspc reads
- The domains registered in your Cloudflare account.
- Each domain's expiry and registration dates, auto-renew setting, transfer lock and status (redemption, pending delete, suspended).
- Domains that only use Cloudflare DNS, with their nameservers, and DNS records when the token may read them.
What nmspc never does
- Renew, transfer, register or delete a domain.
- Change DNS records, nameservers, contacts or auto-renew.
- Buy anything or touch your payment details.
Can the key change your account?
nmspc can't see what a pasted Cloudflare token is allowed to do. If it can change your Cloudflare account, nmspc still only ever reads with it.
Before nmspc stores it, the workspace owner ticks “I allow nmspc to store a key that can change my Cloudflare account”.
If it doesn't connect
- A Global API Key is refused: it can change everything in your account. Create a token from the pre-filled form instead.
- An account token is refused: Cloudflare only allows Registrar on personal tokens.
- If the token works but can't read Registrar, edit it in Cloudflare and add Registrar · Domains · Read.
About Cloudflare
- IANA registrar ID
- 1910 (Cloudflare, Inc.)
- RDAP base URL
- https://rdap.cloudflare.com/rdap/v1/
- Price
- Cloudflare says it only charges what the registry charges, with no markup.
- Nameservers
- Every domain on Cloudflare Registrar uses Cloudflare's nameservers.
Try it free
Check any domain now, no account needed: when it expires and who it's registered with.
More Cloudflare domains than projects? You're among friends. The Domain Support Group has a chair for you.
Moving a domain away from Cloudflare
- A domain can't move within 60 days of being registered or transferred, or within 60 days of a change to its registrant details.
- In the Cloudflare dashboard, open Manage Domains, find the domain and select Manage. Under Configuration, select Unlock, confirm, and copy the auth code Cloudflare shows.
- Give the code to the new registrar (it may call it the EPP code). You can approve the transfer at Cloudflare to start it at once; otherwise it is approved automatically on the fifth day.
- Cloudflare doesn't allow transfers while a domain is in its 30-day redemption period.
How do I create a Cloudflare API token for nmspc?
nmspc's Settings opens Cloudflare's token form already filled in, asking only for read permissions. Add the permission Registrar · Domains · Read, press Create and paste the token into nmspc. It has to be a token on your user profile: Cloudflare only allows Registrar on those, not on account tokens.
Can the Cloudflare token change my account?
nmspc can't see what a pasted Cloudflare token is allowed to do. If it can change your Cloudflare account, nmspc still only ever reads with it.
So the owner of the nmspc workspace ticks a box to allow storing it. nmspc only sends GET requests to Cloudflare's API with it, and stores it encrypted.
Does Cloudflare send renewal reminders?
Yes. Cloudflare emails the account's Super Admin once a month with the domains that renew automatically in the next 45 days, and emails the registrant contact every day with the domains that expire within seven days.
nmspc adds its own reminders 60, 30, 14, 7, 1 days before.
When does Cloudflare auto-renew a domain?
Auto-renew is on by default. Cloudflare tries to renew 30 days before the expiry date, makes its last attempt the day before, and retries three more times if a renewal fails. To stop a renewal, turn auto-renew off at least 30 days before expiry.
A domain that isn't renewed enters a 30-day redemption period. It isn't deleted yet and can be restored, possibly for a fee, but it can't be transferred.
Can a Cloudflare Registrar domain use other nameservers?
No. Every domain on Cloudflare Registrar uses Cloudflare's nameservers. You can delegate a subdomain to another provider.
How do I transfer a domain away from Cloudflare?
Open the domain under Manage Domains, select Unlock under Configuration and copy the auth code. Give it to the new registrar. It can't move within 60 days of registration, a transfer or a registrant change, or during redemption.
Does nmspc see domains that only use Cloudflare DNS?
Yes. The pre-filled token includes Zone · Read, so nmspc also finds zones whose domain is registered elsewhere. They show up unticked in the list you choose from, and you can turn DNS reading off in Settings.
Sources
- Cloudflare Docs: Registrar
- Cloudflare Docs: Renew your domain
- Cloudflare Docs: Transfer out from Cloudflare
- Cloudflare Docs: Registrar FAQ
- Cloudflare API: Registrar
- IANA: Registrar IDs (with RDAP base URLs)
Checked against these pages on 28 October 2026. Cloudflare changes its pages now and then; the source wins if it disagrees.
nmspc is independent and not affiliated with Cloudflare.