verapli
Sign inJoin free
Menu

Guides · storage · Everyday developer services

Cloudflare R2 object storage

Add the R2 subscription to a Cloudflare account, create a bucket, and create an R2 API token that gives S3-compatible access keys.

Researched · not yet run liveLast researched 25 October 2026 · Cloudflare · provider site

Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.
Do this with verapliJSON for agents

Have ready

  • A payment method for the R2 checkout flow. · R2 must be purchased (subscription added through checkout) before any API token can be made, even to stay on the free tier. [2]Needed for: Add the R2 subscription

Steps

Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.

  1. Add the R2 subscription

    In the dashboard go to Storage & databases, R2, Overview and complete the checkout flow to add R2 to the account.

    • Guided by hand
    • Human step: You add payment details

    Where: https://dash.cloudflare.com/

  2. Create a bucket

    Create the bucket in the dashboard or with Wrangler. If a jurisdiction (for example EU) is chosen, the bucket needs the jurisdiction-specific S3 endpoint.

    • Guided by hand
    • Human step: You press submit
    • After: Add the R2 subscription

  3. Create an R2 API token

    In R2 Overview, Account Details, choose Manage next to API Tokens, create an account or user token, pick the least permission (Object Read & Write scoped to the bucket is usual for an app), and create it. verapli captures the Access Key ID and the Secret Access Key, which is shown once.

    • verapli co-pilot
    • Human step: You press submit
    • After: Create a bucket

    verapli captures R2_SECRET_ACCESS_KEY here by plain code: encrypted in your browser, never shown to AI.

    Where: https://dash.cloudflare.com/

Terms and gotchas

Plain-English summary, not legal advice. Each card links its source.

Can cost moneyThe rules say

R2 has to be purchased through the checkout flow before tokens can be made; usage beyond the free tier is billed monthly. [1]

What you end up with

Env varSecretFormatWhat it is
R2_ACCESS_KEY_IDnot secretS3-compatible Access Key ID of the R2 token. Name chosen by verapli; Cloudflare docs do not fix an env var name.
R2_SECRET_ACCESS_KEYsecretS3-compatible Secret Access Key of the R2 token, shown once. Name chosen by verapli.
R2_ENDPOINTnot secrethttps://<ACCOUNT_ID>.r2.cloudflarestorage.comS3 endpoint, https://<ACCOUNT_ID>.r2.cloudflarestorage.com (jurisdiction buckets use .eu., .fedramp. or .us. before r2). Name chosen by verapli.

Pricing

  • Free tier: 10 GB-month storage, 1 million Class A and 10 million Class B operations per month; egress is free.

Source [3]

For agents

The same entry as JSON: /api/v1/entries/cloudflare/r2 · requirements /api/v1/requirements/cloudflare/r2 · terms /api/v1/terms/cloudflare/r2.

Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp

> "What do I need for Cloudflare R2 object storage, and how long will it take?"
  → tools/call requirements { "provider_id": "cloudflare/r2" }

Sources

  1. R2 get started R2 subscription is added via Storage & databases, R2, Overview checkout flow; free tier then monthly billing for usage beyond it. · accessed 25 October 2026 · official
  2. R2 authentication (API tokens) Must purchase R2 before generating a token; R2 Overview, Account Details, Manage API Tokens; account or user token; Admin Read & Write / Admin Read only / Object Read & Write / Object Read only with optional bucket scope; Access Key ID and Secret Access Key, secret shown once; endpoint https://<ACCOUNT_ID>.r2.cloudflarestorage.com with jurisdiction-specific variants (.eu., .fedramp., .us.). · accessed 25 October 2026 · official
  3. Workers pricing (R2 section) R2 free tier 10 GB-month storage, 1 million Class A and 10 million Class B operations per month, free egress. · accessed 25 October 2026 · official
  4. Stripe Projects provider catalogue Cloudflare is listed (Storage among its categories) as the single service slug cloudflare/worker; R2 is not broken out as a separate catalogue service. · accessed 25 October 2026 · official

Provider rules change. This page is generated from verapli registry version 2026.1025.316; spotted something out of date? Tell us. Cloudflare is not affiliated with verapli.