If you created scoped API credentials in Cloudflare, then you need to use dns_cloudflare_api_token rather than dns_cloudflare_email+dns_cloudflare_api_key.
The error message you see is usually caused by mixing these configuration parameters up.
I'm not sure how Portainer exposes these credentials to you, but documentation for the plugin is here.