Unclassified

CF Wire Status Report

Generated: 2026-05-09

Account: a1bbbb12a32cdbb68dd170b09fe8b5f3
Email: connect@integratewise.ai
Wrangler: 4.90.0


1. Wrangler Auth Status

STATUS: NOT AUTHENTICATED via OAuth

  • wrangler whoami returns: "You are not authenticated. Please run wrangler login."
  • No ~/.wrangler/config/default.toml found (only cache/logs/metrics.json in ~/.wrangler/)
  • CLOUDFLARE_API_TOKEN is BLANK in both ~/.iw/secrets.env and .env (commented out placeholder)
  • CLOUDFLARE_ACCOUNT_ID is SET: a1bbbb12a32cdbb68dd170b09fe8b5f3

ACTION REQUIRED: Run wrangler login in a browser-capable terminal OR create an API token at
https://dash.cloudflare.com → My Profile → API Tokens → Create Token (Edit Cloudflare Workers template)
Then set: CLOUDFLAREAPI_TOKEN="cfat..." in ~/.iw/secrets.env


2. Worker Health Checks

All workers tested via HTTPS /health endpoint against connect-a1b.workers.dev subdomain.

ServiceWorker NameHealth URLHTTP StatusNotes
mcp-connectorintegratewise-mcp-connectorhttps://integratewise-mcp-connector.connect-a1b.workers.dev/health200 HEALTHYversion 2.0.0-semantic, 12 tools
actintegratewise-acthttps://integratewise-act.connect-a1b.workers.dev/health200 HEALTHY
connectorintegratewise-connectorhttps://integratewise-connector.connect-a1b.workers.dev/health200 HEALTHY
gatewayintegratewise-gatewayhttps://integratewise-gateway.connect-a1b.workers.dev/health200 HEALTHY
thinkintegratewise-thinkhttps://integratewise-think.connect-a1b.workers.dev/health200 HEALTHY
knowledgeintegratewise-knowledgehttps://integratewise-knowledge.connect-a1b.workers.dev/health200 HEALTHY
normalizerintegratewise-normalizerhttps://integratewise-normalizer.connect-a1b.workers.dev/health200 HEALTHY
billingintegratewise-billinghttps://integratewise-billing.connect-a1b.workers.dev/health200 HEALTHY
loaderintegratewise-loaderhttps://integratewise-loader.connect-a1b.workers.dev/health404 WARN/health not found; may use /
workflowintegratewise-bffhttps://integratewise-bff.connect-a1b.workers.dev/health200 HEALTHY
governintegratewise-governhttps://integratewise-govern.connect-a1b.workers.dev/health200 HEALTHY
pipelineintegratewise-pipelinehttps://integratewise-pipeline.connect-a1b.workers.dev/health200 HEALTHY

Custom Domain

  • https://gateway.integratewise.ai/health — DNS RESOLUTION FAILED (exit_code 6: Could not resolve host)
    ACTION: Verify DNS CNAME for gateway.integratewise.ai points to integratewise-gateway.connect-a1b.workers.dev
    or check Cloudflare DNS dashboard for the zone integratewise.ai

MCP Connector Full Health Response

{
  "status": "ok",
  "worker": "integratewise-mcp-tool-server",
  "version": "2.0.0-semantic",
  "timestamp": "2026-05-09T01:37:30.842Z",
  "features": ["session-capture", "auto-embedding", "entity-linking", "correlation-tracing"],
  "tools": {
    "count": 12,
    "names": [
      "kb.write_session_summary",
      "kb.write_article",
      "kb.get_artifact",
      "kb.list_recent",
      "kb.search",
      "kb.topic_upsert",
      "kb.topic_list",
      "figma.get_file",
      "figma.get_components",
      "figma.get_node",
      "figma.export_image",
      "figma.get_comments"
    ]
  }
}

3. Secrets Store

All services use Cloudflare Secrets Store ID: 1fd83fc5881e4cd296ae3c2fbe80693c
(see docs/SECRETS_STORE_SETUP.md for setup instructions)

NOTE: wrangler secret list could NOT be run — no CLOUDFLARE_API_TOKEN set.
The tables below reflect secrets DECLARED in wrangler.toml [[secrets_store_secrets]] bindings.
Actual population status in the Cloudflare Secrets Store is UNKNOWN until API token is provided.

Cross-reference: secrets.env LIVE values (confirmed populated):
SPINE_URL, SPINE_ANON_KEY,
CLOUDFLARE_ACCOUNT_ID, GCP_PROJECT_ID, FIREBASE_PROJECT_ID, GCS_STAGING_BUCKET,
GCS_FINAL_BUCKET, REDIS_URL, GITHUB_CLIENT_ID, POSTHOG_HOST, MCP_SERVER_URL,
FIGMA_CLIENT_ID, CODA_API_TOKEN

secrets.env BLANK values (need filling):
CLOUDFLAREAPI_TOKEN, DATABASE_URL, SPINE_ACCESS_TOKEN, GCP_SERVICE_ACCOUNT_KEY_PATH,
OPENROUTER_API_KEY, TOKEN_ENCRYPTION_KEY, GITHUB_WEBHOOK_SECRET, GITHUB_CLIENT_SECRET,
FIGMA_ACCESS_TOKEN, SLACK
_, STRIPE_, RAZORPAY**, HUBSPOT*, SALESFORCE_, ZOHO**,
LINEAR*
, NOTION_, JIRA**, ASANA*, ZENDESK_, INTERCOM**, GOOGLE_CLIENT_SECRET,
META*
, LINKEDIN_, TWITTER**, CALENDLY*, N8N__, SENTRY_DSN

Secrets per Service (declared in wrangler.toml)

act (integratewise-act)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE

connector (integratewise-connector)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
DATABASE_URLBLANK
TOKEN_ENCRYPTION_KEYBLANK

gateway (integratewise-gateway)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
DATABASE_URLBLANK
TOKEN_ENCRYPTION_KEYBLANK
GITHUB_WEBHOOK_SECRETBLANK
HUBSPOT_WEBHOOK_SECRETBLANK
SALESFORCE_WEBHOOK_SECRETBLANK
STRIPE_WEBHOOK_SECRETBLANK
RAZORPAY_WEBHOOK_SECRETBLANK
SLACK_SIGNING_SECRETBLANK
HUBSPOT_CLIENT_IDBLANK
HUBSPOT_CLIENT_SECRETBLANK
SALESFORCE_CLIENT_IDBLANK
SALESFORCE_CLIENT_SECRETBLANK
GOOGLE_CLIENT_IDLIVE
GOOGLE_CLIENT_SECRETBLANK
SLACK_CLIENT_IDBLANK
SLACK_CLIENT_SECRETBLANK
GITHUB_CLIENT_IDLIVE
GITHUB_CLIENT_SECRETBLANK
NOTION_CLIENT_IDBLANK
NOTION_CLIENT_SECRETBLANK
ASANA_CLIENT_IDBLANK
ASANA_CLIENT_SECRETBLANK
LINEAR_CLIENT_IDBLANK
LINEAR_CLIENT_SECRETBLANK
JIRA_CLIENT_IDBLANK
JIRA_CLIENT_SECRETBLANK
STRIPE_CLIENT_IDBLANK
STRIPE_CLIENT_SECRETBLANK
ZENDESK_CLIENT_IDBLANK
ZENDESK_CLIENT_SECRETBLANK
INTERCOM_CLIENT_IDBLANK
INTERCOM_CLIENT_SECRETBLANK
ZOHO_CRM_CLIENT_IDBLANK
ZOHO_CRM_CLIENT_SECRETBLANK

think (integratewise-think)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
OPENROUTER_API_KEYBLANK

knowledge (integratewise-knowledge)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
DATABASE_URLBLANK
OPENROUTER_API_KEYBLANK

mcp-connector (integratewise-mcp-connector)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
GITHUB_WEBHOOK_SECRETBLANK
FIGMA_ACCESS_TOKENBLANK (optional)

normalizer (integratewise-normalizer)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE

billing (integratewise-billing)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE

loader (integratewise-loader)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE

workflow / bff (integratewise-bff)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE

govern (integratewise-govern)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
DATABASE_URLBLANK

pipeline (integratewise-pipeline)

SecretIn secrets.env
SPINE_URLLIVE
SPINE_ANON_KEYLIVE
OPENROUTER_API_KEYBLANK

4. Critical Action Items

BLOCKER: No Cloudflare API Token

  • Cannot run wrangler secret list, wrangler secret put, or any CF API operations
  • Fix: Create token at https://dash.cloudflare.com/profile/api-tokens
    Template: "Edit Cloudflare Workers" (includes Workers Scripts:Edit, Workers KV:Edit, Account Settings:Read)
    Then: echo 'CLOUDFLARE_API_TOKEN="cfat_YOURTOKEN"' >> ~/.iw/secrets.env

WARN: gateway.integratewise.ai DNS not resolving

  • Custom domain returns DNS resolution failure
  • Check: Cloudflare DNS zone for integratewise.ai → should have CNAME or Workers Route pointing to integratewise-gateway

WARN: loader /health returns 404

  • integratewise-loader worker is deployed but /health route not found
  • May serve on / instead — check loader source or wrangler.toml routes

BLANK secrets that block live connector integrations (gateway)

Priority order to fill for MVP:

  1. TOKEN_ENCRYPTION_KEY — needed by connector + gateway (generate random 32-byte hex)
  2. DATABASE_URL — needed by connector, gateway, knowledge, govern
  3. OPENROUTER_API_KEY — needed by think, knowledge, pipeline
  4. GITHUB_WEBHOOK_SECRET — needed by gateway, mcp-connector
  5. GOOGLE_CLIENT_SECRET — needed by gateway OAuth
  6. STRIPE_* — needed for billing integrations

Secrets Store ID

All services reference store_id = "1fd83fc5881e4cd296ae3c2fbe80693c"
Once API token is set, verify store exists:
wrangler secrets-store store list --account-id a1bbbb12a32cdbb68dd170b09fe8b5f3


5. Summary Scorecard

CategoryStatus
Wrangler OAuth loginNOT AUTH
CLOUDFLARE_API_TOKENBLANK
CLOUDFLARE_ACCOUNT_IDSET (LIVE)
Workers deployed (11/12)HEALTHY
Workers with /health issues1 (loader 404)
Custom domain DNSBROKEN
Core Spine secretsLIVE in store
OAuth/webhook secretsMOSTLY BLANK
AI keys (OpenRouter)BLANK
Secrets Store ID wiredYES (all svcs)

Report saved by Hermes Agent | /Users/nirmal/Github/integratewise-live/docs/operations/CF_WIRE_STATUS.md