I built an open-source Cloudflare manager for Android with React Native

说明与用途

CloudFlare Mobile 是一款开源 Android 应用，允许用户通过 API 令牌管理 Cloudflare，支持 12 种语言、AI 助手和完整的区域、DNS、安全、分析、开发者工具功能。

问题

Managing Cloudflare settings on a phone is difficult with the official dashboard.

结果

The project delivers a fully functional, secure, and multilingual Cloudflare management app for Android, enabling users to perform most dashboard tasks directly from their phone.

工作流

• 1. User installs the app from Google Play or builds from source.
• 2. User authenticates with a Cloudflare API token stored in Expo Secure Store.
• 3. The app fetches zone data, DNS records, security settings, analytics, and developer platform resources via typed API calls generated from the OpenAPI schema.
• 4. The UI displays zones and allows editing of DNS records, toggling proxy, and importing/exporting BIND files.
• 5. Security features such as Under Attack Mode, Development Mode, WAF rules, and SSL/TLS settings are accessible from the top of each zone screen.
• 6. Analytics views show requests, cache hit rate, bandwidth, and threats over selectable periods.
• 7. Developers can manage Workers, KV, R2, D1, and Pages projects with live logs.
• 8. An AI assistant offers security audits and chat-based DNS changes, requiring user approval before sending requests to Cloudflare.
• 9. The app supports 12 languages via automated translation scripts and protects brand names and placeholders.
• 10. Demo mode provides realistic screenshots without exposing real data.
• 11. Users can contribute via GitHub issues and pull requests.

证据

The Cloudflare dashboard is great on a laptop and painful on a phone. So I built CloudFlare Mobile: an unofficial, open-source Android client that talks straight to the Cloudflare API with your own API token.

来源

React Native 0.81, Expo SDK 54, Expo Router and strict TypeScript. Credentials live in Expo Secure Store, which is backed by the Android Keystore, and are sent only to api.cloudflare.com.

来源

Cloudflare's API is huge. Guessing a field name gives you a screen that looks fine and fails on save. So the repo carries a generated reference: a script reads the official OpenAPI schema and writes one markdown file per product into docs/cf-api/

来源

A scoped token should hide a section, not break the screen. Most people use API tokens with narrow permissions, which means a 403 is normal, not an error.

来源

The AI features use a small hosted backend. The app sends it the zone configuration needed to answer, and never the API token.

来源

Each feature adds its English strings to one small JSON file. A script translates them into the other 11 locales and merges the result, then checks that every locale has exactly the same keys.

来源

Store screenshots should not show real domains or IP addresses. In development builds there is a demo switch that swaps the Axios adapter for one that serves fixtures: a fake account, a handful of zones on documentation IP ranges, analytics from a generator.

来源