← Back to directory
C

Cloudflare MCP Server

Official
Manage your Cloudflare account in natural language via remote MCP servers
GitHub source repository ↗
★ 4.0k Stars Category · Dev Tools Very popular
59FMRS · C
Reliability
8/20
Security and permissions
11/20
Maintenance
14/20
Documentation
13/20
Setup experience
13/20

An official Cloudflare collection of remote MCP servers split by product domain, each served over Streamable HTTP with OAuth or API-token authentication — well suited to teams already on Cloudflare who want natural-language account management, provided API tokens are scoped with least privilege given the real account-level permissions involved.

Read the FMRS scoring method →

An official Cloudflare-maintained repository providing a set of domain-specific remote MCP servers (Documentation, Workers Bindings, Workers Builds, Observability, sandbox Containers, Browser Rendering, Logpush, AI Gateway, AutoRAG, Audit Logs, DNS Analytics, DEX, CASB, Radar, Blog, Demo Day, and more). Each server exposes the same stateless request handler over Streamable HTTP at its own *.mcp.cloudflare.com/mcp subdomain; the /sse path remains only as a URL compatibility alias and does not use the deprecated HTTP+SSE transport. Any MCP client with remote-server support (e.g. Cursor, Claude, Cloudflare AI Playground) can connect directly to these URLs to read account configuration, process information, and make suggested changes across Cloudflare's application, security, and performance products.

Tools

The tool list has not been reviewed yet.

Setup

In an MCP client that supports remote servers (e.g. Cursor, Claude Desktop, or Cloudflare AI Playground), add the URL for the desired product-domain server (e.g. https://docs.mcp.cloudflare.com/mcp, https://bindings.mcp.cloudflare.com/mcp) — no local installation is required. Most servers support OAuth login; alternatively, supply a Cloudflare API key (user- or account-owned token) as a Bearer token in the Authorization header. To use a server via the OpenAI Responses API, create a Cloudflare API token scoped with the permissions that specific server requires.

Fit and risk

Best for

  • Teams already using Cloudflare products who want to manage their account via natural language
  • Workflows that benefit from curated, typed tools scoped to a single Cloudflare product area (observability, DNS, bindings, etc.)
  • Users who want a remotely hosted MCP integration rather than a self-hosted/local server

Not for

  • Workflows needing broad API coverage across many Cloudflare products via code execution (use Cloudflare's Code Mode server, cloudflare/mcp, instead)
  • Users without a Cloudflare account, or who don't want to grant a third-party MCP client access to their account
  • Scenarios requiring a fully offline or locally-run MCP server, since all listed servers are remotely hosted

Required permissions

  • Optional Cloudflare API key passed as a Bearer token in the Authorization header, used when not authenticating via OAuth; supports user- or account-owned tokens
  • OAuth authorization flow supported for connecting an account
  • The Documentation server (docs.mcp.cloudflare.com) requires no auth header, serving public documentation lookups

Risks and side effects

  • Each server maps to a different Cloudflare product domain; an overly broad API token scope could grant an MCP client more account access than a given task actually needs
  • Some tools can make real changes to account configuration on the user's behalf, so misinterpreted natural-language instructions could cause unintended production changes
  • Account credentials (API tokens) are transmitted as Bearer headers between the client and the remote service, so the client environment must be kept secure
  • Some features may require a paid Cloudflare Workers plan

Troubleshooting

  1. If you see "Claude's response was interrupted," the client likely hit its context-length limit from many chained tool calls (most common on the observability server) — break requests into smaller, more specific tool calls
  2. Confirm the connected server URL matches the intended product domain (each domain has its own subdomain)
  3. Verify the Cloudflare API token's scopes match what the target server requires
  4. Check whether the account has the paid Cloudflare Workers plan required for the feature in question

Use cases

Look up current Cloudflare product documentation
Build and inspect Workers storage, AI, and compute bindings
Check the status and health of Workers Builds
Debug application logs and observability analytics
Fetch web pages, convert them to markdown, or take screenshots
Summarize Logpush job health and search AI Gateway logs
Query audit logs and generate compliance reports
Analyze DNS performance and SaaS security misconfigurations (CASB)

Supported clients

ClaudeFull support
CursorFull support
OpenAI Responses APIPartial support