Connect Cloudflare

If your sending domain’s DNS is on Cloudflare, you can skip copy-pasting records and let SushiSend publish them for you.

Create a scoped API token

1. Open Cloudflare dashboard → My Profile → API Tokens → Create Token → Custom Token.
2. Permissions: Zone → DNS → Edit on the zone that matches your sending domain.
3. Zone Resources: Include → Specific zone → pick the zone.
4. Click Create Token and copy the value.

Paste it into SushiSend

Dashboard → Domains → your domain → Connect Cloudflare. Paste the token. We verify the scope and encrypt the token at rest.

What we write

For each domain you verify we publish:

• Three DKIM CNAMEs (<selector>._domainkey.yourdomain.com)
• An MX record for mail.yourdomain.com (the MAIL FROM subdomain)
• An SPF TXT for mail.yourdomain.com

That’s it — no other records are touched. You can revoke the token in Cloudflare any time; SushiSend re-prompts for a new one the next time you connect a domain.

Revoke

Dashboard → Domains → your domain → Disconnect Cloudflare. We delete the token from our storage and stop trying to write records to your zone.