Cloudflare R2
Connect Cloudflare R2 buckets to BucketMate Web with an S3 API token
BucketMate Web connects to Cloudflare R2 through the S3-compatible API endpoint for your account. Make sure the companion browser extension is connected before testing the connection.
Prerequisites
- Cloudflare account
- R2 bucket
- Account ID
- R2 API token with access key ID and secret access key
- BucketMate browser extension
Endpoint and region
Use your account-specific endpoint:
https://<account-id>.r2.cloudflarestorage.com
Set region to:
auto
Permissions
Give the token access to the buckets you want to manage. BucketMate Web may need permission to list buckets, list objects, read objects, write objects, and delete objects depending on the actions you use.
If the token is scoped to specific buckets and cannot list all buckets, add bucket names in Explicit Buckets.
Connection steps
- Open the Cloudflare dashboard.
- Go to R2 and create or select an API token for S3 access.
- Copy the account ID, access key ID, and secret access key.
- Open BucketMate Web.
- Confirm the extension bridge is connected.
- Choose Add Connection.
- Select Cloudflare R2.
- Enter the endpoint
https://<account-id>.r2.cloudflarestorage.com. - Enter region
auto. - Enter the access key ID and secret access key.
- Use Test Connection.
- Save the connection.
Common issues and fixes
Region must be auto
R2 expects auto. Fix by setting the region to auto.
ACL headers are not supported
Requests using x-amz-acl will fail. Fix by removing ACL headers and using R2 access controls instead of S3 ACL calls.
Object Lock is not supported
Object Lock headers are not implemented. Fix by removing Object Lock headers and using provider-native retention controls if required.
Direct object URLs do not open
R2 buckets are private by default. Use BucketMate Web's presigned share links for private objects, or configure public access if you want copied direct URLs to work in a browser.
BucketMate Web tips
- Use presigned links for private one-off sharing.
- Use explicit bucket names for restricted R2 tokens.
- Store credentials as encrypted values when using a shared browser profile.