
Walrus Tusk setup
Step 2 of 3: connect your own Cloudflare (and GitHub, if you want).
Your tokens are encrypted and only ever used for your own accounts. You can delete them any time.
Cloudflare token
- Open Cloudflare → API Tokens → Create Token → Custom token.
- Permissions: Account → Cloudflare Pages → Edit. Optional: Zone → Analytics → Read.
- Account resources: your account. Create, then copy the token.
GitHub token (optional)
- Open GitHub → Fine-grained token.
- Repository access: the repos you want your AI to edit.
- Permissions: Contents, Pull requests → Read and write. For sites with server code also Secrets, Workflows, Actions → Read and write (used once, by auto-deploy setup).
Your AI can then commit to grok/… or agent/… branches and open/merge PRs. It can't force-push, delete branches, or touch .github/.