Token permissions needed: Account Settings:Read · Cloudflare Pages:Read · Workers Scripts:Read. Stored only in this browser; calls go to api.cloudflare.com and nowhere else.