diff --git a/go.mod b/go.mod
index 8917569..537c601 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/channinghe/labelgate
 go 1.26.0
 
 require (
-	github.com/cloudflare/cloudflare-go/v6 v6.10.0
+	github.com/cloudflare/cloudflare-go/v7 v7.13.0
 	github.com/docker/docker v28.5.2+incompatible
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/websocket v1.5.3
diff --git a/go.sum b/go.sum
index 293416c..99a7032 100644
--- a/go.sum
+++ b/go.sum
@@ -6,8 +6,8 @@ github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1x
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
-github.com/cloudflare/cloudflare-go/v6 v6.10.0 h1:tm+YwMDAdxxy2eIAlLH9Wu8JWSMg6fE3j3ydZbMG6co=
-github.com/cloudflare/cloudflare-go/v6 v6.10.0/go.mod h1:Lj3MUqjvKctXRpdRhLQxZYRrNZHuRs0XYuH8JtQGyoI=
+github.com/cloudflare/cloudflare-go/v7 v7.13.0 h1:AKD9hFlKVOEjObO/kny/gM+wbk+abE1AvIYhp+tV/eg=
+github.com/cloudflare/cloudflare-go/v7 v7.13.0/go.mod h1:9zcoIAtu6cmcoPszCNISvqYMXs8wObtVGXE1qGFMrNU=
 github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
 github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
 github.com/containerd/errdefs/pkg v0.3.0 h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE=
diff --git a/internal/cloudflare/access.go b/internal/cloudflare/access.go
index a69e0b4..9adea45 100644
--- a/internal/cloudflare/access.go
+++ b/internal/cloudflare/access.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"fmt"
 
-	cf "github.com/cloudflare/cloudflare-go/v6"
-	"github.com/cloudflare/cloudflare-go/v6/zero_trust"
+	cf "github.com/cloudflare/cloudflare-go/v7"
+	"github.com/cloudflare/cloudflare-go/v7/zero_trust"
 	"github.com/rs/zerolog/log"
 
 	"github.com/channinghe/labelgate/internal/types"
diff --git a/internal/cloudflare/client.go b/internal/cloudflare/client.go
index 0032351..5eaca04 100644
--- a/internal/cloudflare/client.go
+++ b/internal/cloudflare/client.go
@@ -7,9 +7,9 @@ import (
 	"strings"
 	"sync"
 
-	cf "github.com/cloudflare/cloudflare-go/v6"
-	"github.com/cloudflare/cloudflare-go/v6/option"
-	"github.com/cloudflare/cloudflare-go/v6/zones"
+	cf "github.com/cloudflare/cloudflare-go/v7"
+	"github.com/cloudflare/cloudflare-go/v7/option"
+	"github.com/cloudflare/cloudflare-go/v7/zones"
 	"github.com/rs/zerolog/log"
 )
 
diff --git a/internal/cloudflare/dns.go b/internal/cloudflare/dns.go
index 41f08eb..f9cb770 100644
--- a/internal/cloudflare/dns.go
+++ b/internal/cloudflare/dns.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"fmt"
 
-	cf "github.com/cloudflare/cloudflare-go/v6"
-	"github.com/cloudflare/cloudflare-go/v6/dns"
+	cf "github.com/cloudflare/cloudflare-go/v7"
+	"github.com/cloudflare/cloudflare-go/v7/dns"
 	"github.com/rs/zerolog/log"
 
 	"github.com/channinghe/labelgate/internal/types"
diff --git a/internal/cloudflare/tunnel.go b/internal/cloudflare/tunnel.go
index 4956d99..4c7b204 100644
--- a/internal/cloudflare/tunnel.go
+++ b/internal/cloudflare/tunnel.go
@@ -7,8 +7,8 @@ import (
 	"strings"
 	"time"
 
-	cf "github.com/cloudflare/cloudflare-go/v6"
-	"github.com/cloudflare/cloudflare-go/v6/zero_trust"
+	cf "github.com/cloudflare/cloudflare-go/v7"
+	"github.com/cloudflare/cloudflare-go/v7/zero_trust"
 	"github.com/rs/zerolog/log"
 
 	"github.com/channinghe/labelgate/internal/types"