Skip to content
Notis

Create a WAF list for a staffing incident

Prepare the security object your incident response playbook expects.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Create WAF List

Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")

Why this helps

Incident response slows down when the required WAF list must be created manually during a busy shift.

  • Speeds up approved incident preparation
  • Uses a consistent naming convention
  • Leaves a clear report of the created list

Setup

Build it in a few focused steps.

  • 1Connect 7shifts and Cloudflare in Notis once.
  • 2Create an automation named Staffing incident WAF list.
  • 3Tell Notis to create an empty IP WAF list only when the webhook includes an approved incident and account id.
  • 4Pick the Notis webhook trigger.
  • 5Choose a report channel and test with a safe sample incident.

Questions about this workflow

Does this add IP items?

No. It creates an empty WAF list; item management is outside this action.

What prevents accidental creation?

Include an explicit approval phrase and account id requirement in the automation prompt.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 7shifts to Cloudflare. A trigger fires from one place; an action lands in another.

7shifts triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create WAF List

Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")

ActionInstant

Create Zone

Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.

ActionInstant

Delete DNS Record

Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."

ActionInstant

Delete WAF List

Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")

ActionInstant

Delete Zone

Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")

ActionInstant

List WAF Lists

Tool to fetch all waf lists (no items) for an account. use after confirming account id.

ActionInstant

List Account Members

Tool to list members of a given cloudflare account. use after confirming the account id.

ActionInstant

Connect any two apps with Notis in the middle.

7shifts and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.