Two more free tools for Cloudflare logging

We use Cloudflare a lot. We're turning useful pieces of that work into small tools you can download and use in your own projects.

Two more are ready: OAuth Log Redactor and CF OTel Policy. Both are free, MIT-licensed v0.1.0 betas. Their command-line tools run locally with Node.js 22.13 or newer. No sign-up, Cloudflare token or payment required.

OAuth Log Redactor

Keep a small set of useful audit fields without carrying the whole log event into your output.

OAuth Log Redactor reads a saved JSON array and keeps five typed fields: event, method, status, outcome and durationMs. Everything else is dropped. Its fixture checker lets you test what gets retained without printing the original payload when a case fails.

Unzip the download, open its folder and try the included examples:

node oauth-log-redactor.mjs redact examples/events.json
node oauth-log-redactor.mjs check examples/fixtures.json

The input file stays unchanged. This is a strict field filter, not a universal secret detector. Even retained event types, counts and numbers can reveal activity, so review the output before sharing it.

Download OAuth Log Redactor ZIP · Source and setup · SHA-256 checksum

CF OTel Policy

Decide what your Worker logger should emit before wiring it into your application.

CF OTel Policy generates a structured-log policy, previews synthetic events and produces a Wrangler logging fragment for review. Its Worker adapter limits emitted fields and the number of events per logger instance. A volume estimate shows the effect of your invocation, sampling and event-count assumptions.

Unzip the download, open its folder and try:

node cf-otel-policy.mjs generate examples/spec.json
node cf-otel-policy.mjs preview examples/policy.json examples/events.json
node cf-otel-policy.mjs budget examples/policy.json

Despite the name, this first version is not an OpenTelemetry exporter or collector. It doesn't apply configuration or deploy anything. Its volume estimate is not a spending limit, and its logger doesn't filter unrelated console calls. Review the generated configuration: it disables automatic invocation logs and traces.

Download CF OTel Policy ZIP · Source and setup · SHA-256 checksum

Start with the examples

These are small first versions, not hosted services. Neither has an MCP wrapper in v0.1.0, and Windows execution is untested. Start with the included synthetic examples and read the limits before using your own data.

Independent Valen Systems projects; not affiliated with Cloudflare.

Browse the free tools↗ Back to Field Notes↗

Written with AI assistance; release links and package checksums verified by Valen Systems’ publishing workflow.