You can now sync a project's keys to Cloudflare Workers.

To get started:

Open your project's Integrations page and connect Cloudflare.
Approve one or more Cloudflare accounts.
Map each ApiVault environment to a Worker's Production secrets, Previews secrets, or Workers Builds variables.

Syncs run automatically when keys change, on the retry sweep, and from Sync now, which shows a full diff preview. Production secret changes are batched into a single new Worker version deployment.

#What ApiVault changes

ApiVault only modifies or deletes the secrets it created on each target. Existing secrets or bindings with the same name are reported as conflicts, and values over 5 KiB are skipped.

Connecting more accounts under the same login adds them alongside existing connections without revoking access to linked Workers, and unused OAuth grants are revoked immediately.

Audit logs and exports record the Cloudflare account, Worker, and deployed version count, and you can filter them with ?integration=cloudflare.

Learn more in the Cloudflare integration guide.