New scan
Verified live in this session. Go to dash.cloudflare.com → click your profile icon (top right) → My Profile → API Tokens tab → Create Token → Create Custom Token. Under permissions choose Zone / DNS / Read, scoped to the single domain you're auditing. Click Continue → Create Token, then copy the value immediately — it's shown only once.