Cloudflare Flagship | Hacker News

Hacker News users flagged a Cloudflare Flagship warning that its client SDK API token can evaluate flags across all apps in an account.

The discussion focused on whether that design is safe for browser-side use in public-facing applications.

Commenters questioned how user targeting works and whether the token could expose broader account-level access than expected.

The debate also compared Cloudflare’s feature-flag approach with Vercel and other platforms, highlighting access-control concerns.