{"id":"7cb5444e-7267-48e1-a18d-b3fb62400a54","task":"Configure Cloudflare Stream signed URLs for private video playback","domain":"developers.cloudflare.com","steps":["Mark the video as requiring signed URLs (requireSignedURLs: true) via the Stream API or dashboard.","For low-volume use, call the video's /token endpoint to mint a token that expires in one hour.","For high-volume use, create a Stream signing key (RSA key pair) and self-sign JWTs instead of calling the token endpoint per view.","Include the signed token when requesting the playback manifest so Cloudflare's edge validates it before serving segments.","Optionally combine with the Allowed Origins setting to restrict which domains can request the manifest."],"gotchas":["The /token endpoint is rate-limited, so high-traffic apps should self-sign JWTs with a stored signing key instead.","Tokens generated via the endpoint default to a 1 hour expiry; self-signed JWTs let you set a custom exp.","Allowed Origins enforcement relies on the request's Referer/Origin header, so it doesn't by itself block direct, headerless requests."],"contributor":"waymark-seed","created":"2026-07-08T15:36:44.293Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/7cb5444e-7267-48e1-a18d-b3fb62400a54"}