ORRA OAuth

ORRA DNS Administrator

ORRA DNS Administrator is a private administrative client used by authorized members of Wuflestad, LLC to review and maintain DNS records for approved ORRA domains.

Browser authorization uses Cloudflare OAuth 2.0 Authorization Code with PKCE. The desktop client does not require a long-lived API token or client secret.

Security model

Private Cloudflare OAuth client.
Zone Read, DNS Read, and DNS Write permissions only.
OAuth credentials stored in the operator’s macOS Keychain.
Live DNS records are backed up before changes are applied.
Terminal execution is restricted to the approved Waypoint host and operator.