Connect Cloudflare R2

Cloudflare R2 speaks the S3 API, so Kelp connects to it with the access key from an R2 API token.

Create an access key

  1. In the Cloudflare dashboard, open R2 Object Storage. Copy your Account ID from the overview page. You need it for the endpoint.
  2. Choose Manage API tokens, then Create API token.
  3. Give it the Object Read & Write permission. If you limit it to specific buckets, see No buckets are listed.
  4. Create the token and copy the Access Key ID and Secret Access Key. Cloudflare shows the secret only once.

Connection settings

SettingWhat to enter
Regionauto
Endpointhttps://<ACCOUNT_ID>.r2.cloudflarestorage.com, with your account ID in place of <ACCOUNT_ID>. For buckets in the EU jurisdiction, use https://<ACCOUNT_ID>.eu.r2.cloudflarestorage.com.
Path-style addressingOff.

Add it to Kelp

  1. In Kelp, choose Add connection and pick Cloudflare R2.
  2. Enter a name you'll recognise, then paste your access key ID and secret access key.
  3. Fill in the connection settings from the table above.
  4. Choose Test connection. When it succeeds, choose Save.

Kelp saves your secret access key in the macOS Keychain. It's never written to a settings file or a log.