diff --git a/jobs/cf_estate_sync.py b/jobs/cf_estate_sync.py
index aa33cf4..3616af9 100644
--- a/jobs/cf_estate_sync.py
+++ b/jobs/cf_estate_sync.py
@@ -60,6 +60,10 @@ class CFEstateSync(Job):
         name = "CF Estate Sync"
         description = "Cloudflare-Estate (Tunnel/Worker/Access/Hyperdrive/VPC) nach Nautobot syncen (Doku-SSoT)."
         grouping = "TP44 / Cloudflare"
+        # Nur ein Boolean (dryrun) als Eingabe; das CF-Token kommt aus dem Nautobot-Secret,
+        # nicht aus einer Job-Variable. Ohne diese Zeile (Default True) verweigert Nautobot
+        # das Scheduling: "Job may have sensitive input variables".
+        has_sensitive_variables = False
 
     # ---------------------------------------------------------------- CF-Pull
     def _cf_get(self, path):