Signing in
No API token, and nowhere for one to leak.
Pilvi signs in through Cloudflare's own OAuth consent screen. It never sees your password, and it asks only for read permission until the first time you change something — so deciding whether the app is worth buying costs you no permission to edit your DNS.
Nothing passes through us
Your authorization lives in the keychain on your device and talks to Cloudflare directly. There is no server of ours for it to pass through, because there is no server of ours.
Nothing is collected
No analytics, no crash reporting, no advertising identifier, no third-party code in the binary. There is no account to make.
You can see what it may read
A permissions screen lists what your Cloudflare authorization actually covers, product by product.
What it shows
The whole account, not the three parts that fit in a free tier.
Traffic and where it came from. Domains, DNS records, certificates and the proxied hostnames a certificate does not cover. Email routing. Security events, and what each rule actually stopped. Workers with their errors and their bindings. Pages, Queues, D1, R2, KV. Tunnels, their connectors and what they reach.
It says when it does not know
Cloudflare answers a permission you did not grant with an empty list rather than an error, which looks exactly like an account with nothing in it. Pilvi tells those two apart everywhere.
It says what a number is not
Sampled data is labelled as sampled. A tunnel's status covers the link to Cloudflare, not whether your services are up — and the screen says so, because the difference has fooled people.
It changes only what a phone is good at
The orange cloud on a DNS record, its TTL, and turning an email rule off. One tap, immediately visible, undone the same way. No seven-field forms.
The price
One payment, and no badge on anything.
Two weeks of the whole app, then a single purchase for all of it, on every device on your Apple Account. Not a subscription. There is no PRO badge on any screen and no feature sold separately — the trial is time-limited rather than a permanently thinner app.
Suggestions
Tell me what is missing.
Pilvi is made by one person, and most of what it shows got there because somebody said what they went looking for and did not find. Suggestions and bug reports are read.
On iPad
Two columns in landscape, not a stretched phone.