IndicatorFeedPermission

Source: src/Cloudflare/Intel/IndicatorFeedPermission.ts

A permission grant on a Cloudflare custom Indicator Feed, giving another Cloudflare account access to consume the feed.

This is an existence-only resource: it has no mutable aspects beyond its identity (feed + consumer account tag), so changing either property triggers a replacement. Cloudflare’s add/remove endpoints are idempotent PUTs, so reconcile and delete are simple ensure/remove calls.

Cloudflare exposes no API to list the grantees of a feed from the provider side (the permissions “view” endpoint lists feeds the calling account can consume), so read reports the last known state.

Granting Access

const feed = yield* Cloudflare.IndicatorFeed("threat-feed", {
  description: "Indicators observed by our honeypots",
});

yield* Cloudflare.IndicatorFeedPermission("partner-access", {
  feedId: feed.feedId,
  accountTag: "023e105f4ecef8ad9ca31a8372d0c353",
});