{"enrichment":{"faq":[{"a":"cf-access-wall is an MIT-licensed tool that secures any Cloudflare Workers hostname\u2014including bare *.workers.dev domains\u2014behind a Zero Trust login wall. It uses a JSON specification to declaratively define Access policies, supporting GitHub SSO for developers and emailed one-time codes for non-technical users. The tool runs idempotently, allowing you to adopt or update existing Cloudflare Access configurations without manual steps.","q":"What is cf-access-wall and how does it protect Cloudflare Workers?"},{"a":"Yes. cf-access-wall specifically supports securing bare workers.dev domains without requiring a custom domain purchase. You define your authentication requirements in JSON, and cf-access-wall provisions the Zero Trust Access policies to protect those bare domains with a login wall.","q":"Can cf-access-wall put workers behind authentication on bare workers.dev?"},{"a":"cf-access-wall enables both GitHub SSO and email OTP authentication through its JSON specification. You configure identity providers and authentication methods declaratively, then cf-access-wall provisions the policies. This allows developers to use GitHub login while non-technical team members receive emailed one-time codes for access.","q":"How do I set up GitHub SSO and email OTP for team access control?"},{"a":"cf-access-wall uses JSON to define your Zero Trust Access policies declaratively rather than through manual UI clicks. You specify your authentication rules, identity providers, and access requirements in JSON format, then cf-access-wall provisions these policies idempotently\u2014applying them consistently whether you're setting up new Access or updating existing configurations.","q":"What does declarative access control with cf-access-wall mean?"},{"a":"Yes. cf-access-wall supports provisioning service tokens for CLI and CI client authentication. This allows automated systems and deployment pipelines to authenticate against your protected Workers using service tokens managed through the same JSON specification.","q":"Can cf-access-wall configure service tokens for CLI and CI automation?"},{"a":"cf-access-wall supports email OTP (one-time code) authentication for non-technical users. Users receive emailed codes to verify their identity, providing a simple login experience without requiring GitHub accounts or other developer-focused identity providers.","q":"What authentication methods does cf-access-wall support for non-technical users?"}],"shadow_tags":["identity-verification","sso-integration","access-control","infrastructure-as-code","authentication-gateway","zero-trust-security","api-automation","session-management","oauth-provider"],"summary_rewrite":"cf-access-wall secures any Cloudflare Workers hostname\u2014including bare *.workers.dev\u2014behind a Zero Trust login wall using a JSON specification. It supports both GitHub SSO for developers and emailed one-time codes for non-technical users, handles identity providers and service tokens for CLI/CI automation, and runs idempotently to adopt or update existing Access configurations."},"files":[{"bytes":5215,"path":"plugins/web-forge/skills/cf-access-wall/SKILL.md","sha256":"bf3e526e83073570eb32dcbb5e569459f7c5cf05e983a961f23a2d1dd361920f","url":"https://skillfed.io/files/terrylica/cc-skills/cf-access-wall/2758d8f8/SKILL.md"}],"id":"terrylica/cc-skills/cf-access-wall","links":{"html":"https://skillfed.io/terrylica/cc-skills/cf-access-wall","md":"https://skillfed.io/terrylica/cc-skills/cf-access-wall.md","repo":"https://github.com/terrylica/cc-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":8,"language":"Shell","last_updated":"2026-07-28","license":"MIT","name":"cf-access-wall","publisher":"terrylica","stars":58},"relations":{"similar":[{"id":"terrylica/cc-skills/dashboard-forge"},{"id":"terrylica/cc-skills/cloudflare-workers-publish"},{"id":"secondsky/claude-skills/cloudflare-zero-trust-access"},{"id":"BagelHole/DevOps-Security-Agent-Skills/cloudflare-zero-trust"},{"id":"dawiddutoit/custom-claude/cloudflare-tunnel-setup"},{"id":"popmechanic/VibesOS/cloudflare"},{"id":"NousResearch/hermes-agent/cloudflare-temporary-deploy"},{"id":"dawiddutoit/custom-claude/cloudflare-service-token-setup"},{"id":"cloudflare/skills/cloudflare-one"},{"id":"popmechanic/VibesOS/test"}]},"slug":{"owner":"terrylica","repo":"cc-skills","skill":"cf-access-wall"},"version":"2758d8f8"}