Connect Hermes Agent Using Cloudflare CLI cf OAuth

Preface

A few months ago, I wrote Configuring a Cloudflare API Token for Your Hermes Agent

Although the overall process is already streamlined, it still isn't particularly seamless.

Either you have to follow the tutorial and operate the website step by step yourself, or your Agent needs strong browser automation capabilities.

But now, Cloudflare is enthusiastically embracing AI and has introduced the Cloudflare CLI cf tool

Let's take a look at the entire OAuth process


Putting the Agent to Work

Hermes is integrated with stealth/space-bunny-alpha, the free model officially provided by Nous Portal 
https://zelikk.blogspot.com/2026/04/free-mimimo-v2-pro-omni-hermes-stripe.html


The blockquotes below are all the natural-language prompts I sent to the Agent


Learn  how to use the Cloudflare CLI cf  tool
 https://developers.cloudflare.com/cf/
Study every piece of information in it carefully
 Start  cf auth login to authenticate 

 The Agent will provide a URL and a verification code

Terminal output after Hermes runs cf auth login: the login process has started and displays the authorization URL https://dash.cloudflare.com/oauth2/device/verify along with a prompt to enter the verification code; the verification code box shows copy so the code can be copied

Open this URL in your own browser, enter the verification code, and confirm. If necessary, you will be prompted to sign in to your Cloudflare account.

Hermes authorization reply containing a masked verification code, shown beside the Cloudflare Authorize your device page open in Chrome; an orange arrow points to the blue Continue button

You will see a success page like this

Cloudflare authorization success page showing You're signed in and prompting you to return to the terminal; the CLI completes login automatically after a few seconds, while if it is not completed within 5 minutes, the login process must be started again from the terminal

In some cases, the Agent has a background process that continuously checks whether authorization has succeeded. Your Agent will then proactively send a message: "Authorization successful."

If your Agent does not respond proactively within a few seconds, tell the Agent yourself

I've completed the authorization.


Done

Done—your Agent now has permission to manage your Cloudflare account. You can try giving it natural-language instructions, for example:

Check which domains this cloudflare account already has  worker page kv d1 r2


Comments