Skip to content
Notis

Start a Cloudflare firewall review with a Slack reaction

A simple reaction can mark a firewall review request as ready. Notis can retrieve the current rules for the zone named in the Slack message.

Trigger

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

Action

List Firewall Rules

Tool to list firewall rules for a specific zone. use after confirming the zone id to retrieve and audit current firewall rules.

Why this helps

Review tasks can remain informal and easy to miss when the team has no clear signal that someone should pick them up.

  • Give the team a lightweight way to mark a review as ready.
  • Reduce follow-up messages about whether someone has started.
  • Retrieve the current rules for the requested zone.

Setup

Build it in a few focused steps.

  • 1Connect Slack and Cloudflare to Notis once through the portal.
  • 2Create an automation in the portal, or ask Notis to retrieve firewall rules for a Slack review message with the agreed reaction.
  • 3In one instruction, specify the reaction and require a clearly identified zone and review request.
  • 4Select the Slack reaction-added trigger, optionally narrowed to the agreed emoji or channel, and choose a run-report channel.
  • 5Test by reacting to one real review request for a known zone.

Questions about this workflow

Does adding the reaction change firewall rules?

No. It retrieves the rules for a review.

What should the message include?

Use a clear audit request and enough context to identify the Cloudflare zone.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to Cloudflare. A trigger fires from one place; an action lands in another.

Slack triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create WAF List

Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

Create Zone

Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

Delete DNS Record

Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

Delete WAF List

Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")

ActionInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Delete Zone

Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")

ActionInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

List WAF Lists

Tool to fetch all waf lists (no items) for an account. use after confirming account id.

ActionInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

List Account Members

Tool to list members of a given cloudflare account. use after confirming the account id.

ActionInstant

Connect any two apps with Notis in the middle.

Slack and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.