Cloudflare MCP, Cloudflare's official MCP servers

• Searches Cloudflare's developer docs

  (Documentation server) Looks up current Cloudflare documentation for a question, so the assistant answers from up-to-date reference instead of memory.

  Try: “How do I set up a Workers cron trigger? Check the Cloudflare docs.”

  Read · search_cloudflare_documentation

• Searches Cloudflare docs from the API server

  (Cloudflare API server) Searches Cloudflare developer documentation alongside the API tools, so you can look up how a feature works before changing it.

  Try: “Look up the Cloudflare docs on D1 limits.”

  Read · docs

• Shows which Cloudflare account is connected

  (Cloudflare API server) Returns the ID of the connected user or account token, plus email or name. Useful to confirm which account the assistant is acting on.

  Try: “Which Cloudflare account am I connected as?”

  Read · whoami

• Calls Cloudflare API endpoints with code

  (Cloudflare API server) Lets the assistant write JavaScript that calls the Cloudflare API on your account, for example to list zones or change settings. Results are capped at about 6,000 tokens.

  Try: “List all zones in my Cloudflare account.”

  Delete · execute

• Turns a web page into Markdown

  (Browser Run server) Fetches a page and converts it to Markdown, which is easier for an assistant to read than raw HTML.

  Try: “Fetch https://example.com/pricing as Markdown.”

  Read · get_url_markdown

• Fetches a page's HTML

  (Browser Run server) Loads a page in a remote browser and returns its HTML, including content added by scripts.

  Try: “Get the HTML of https://example.com.”

  Read · get_url_html_content

• Takes a screenshot of a web page

  (Browser Run server) Captures an image of a page, optionally at a viewport size you choose.

  Try: “Screenshot https://example.com at mobile width.”

  Read · get_url_screenshot

• Renders a web page as a PDF

  (Browser Run server) Renders a page to a PDF document you can save or share.

  Try: “Make a PDF of https://example.com/report.”

  Read · get_url_pdf

• Gets a page's HTML and screenshot together

  (Browser Run server) Returns both the HTML and a screenshot of a page in one call.

  Try: “Snapshot https://example.com so I can compare text and layout.”

  Read · get_url_snapshot

• Pulls page elements by CSS selector

  (Browser Run server) Extracts the elements on a page that match a CSS selector, such as all product titles.

  Try: “Scrape every h2 on https://example.com/blog.”

  Read · scrape_url_elements

• Extracts structured data from a page with AI

  (Browser Run server) Uses AI to pull structured JSON from a page, guided by a prompt and an optional JSON schema.

  Try: “Extract product names and prices from this page as JSON.”

  Read · get_url_json

• Lists the links on a page

  (Browser Run server) Returns every link found on a web page.

  Try: “List all links on https://example.com.”

  Read · get_url_links

• Starts crawling a whole website

  (Browser Run server) Starts an asynchronous crawl of a site and returns a job ID to check later.

  Try: “Crawl https://example.com/docs and collect the pages.”

  Read · start_crawl

• Checks a crawl job and returns its pages

  (Browser Run server) Returns the status and collected records of a crawl started with start_crawl.

  Try: “Is crawl job abc123 done? Show the results.”

  Read · get_crawl_result

• Stops a running crawl

  (Browser Run server) Cancels a crawl job that is still running.

  Try: “Cancel crawl job abc123.”

  Runs code · cancel_crawl

• Lists open remote browser sessions

  (Browser Run server) Shows the active Browser Run sessions on your account.

  Try: “What browser sessions are open on my account?”

  Read · list_browser_sessions

• Closes a remote browser session

  (Browser Run server) Closes a Browser Run session by its session ID.

  Try: “Close browser session xyz789.”

  Delete · kill_browser_session

• Starts or restarts a sandbox container

  (Container server) Starts a fresh sandbox container. Containers are temporary and only guaranteed to last about 10 minutes, so nothing is saved.

  Try: “Start a new sandbox container.”

  Runs code · container_initialize

• Runs a shell command in the sandbox

  (Container server) Runs a command in the sandbox shell. Use it to run Node or Python code safely away from your own machine.

  Try: “Run python3 --version in the sandbox.”

  Runs code · container_exec

• Writes a file in the sandbox

  (Container server) Creates or overwrites a file in the sandbox work directory.

  Try: “Write a hello.py file in the sandbox that prints hello.”

  Write · container_file_write

• Reads a file or folder in the sandbox

  (Container server) Returns the contents of a file or directory in the sandbox.

  Try: “Show me the contents of hello.py in the sandbox.”

  Read · container_file_read

• Lists files in the sandbox

  (Container server) Lists everything in the sandbox work directory.

  Try: “What files are in the sandbox?”

  Read · container_files_list

• Deletes a file or folder in the sandbox

  (Container server) Removes a file or directory from the sandbox.

  Try: “Delete hello.py from the sandbox.”

  Delete · container_file_delete

• Used by the assistant behind the scenes

  Finds the right Cloudflare API endpoints

  (Cloudflare API server) Lets the assistant write JavaScript that queries the Cloudflare API spec to find endpoints for a task, such as listing DNS records.

  Try: “Find the API endpoint for purging cache on a zone.”

  Read · search

• Checks the sandbox is reachable

  (Container server) Pings the container to confirm it is up and responding.

  Try: “Is my sandbox container still running?”

  Read · container_ping

Watch out for

• It can change and delete things on your live account

  Signed-in servers can create, change and delete Workers, KV, R2, D1 and DNS. Grant only the permissions the job needs, or use a read-only token. github.com

• The MCP Registry lists the wrong token header

  The registry entry says 'Authentication'; the servers expect 'Authorization: Bearer <token>'. One user got 401 errors from the registry's name. github.com

• Docs and Blog servers are open to anyone

  These two need no sign-in and only read public Cloudflare content. A maintainer confirmed this is expected. github.com

• Memory bugs in the code sandbox runtime were fixed

  Check Point found memory bugs in workerd, the runtime under Code Mode, in August 2026. Cloudflare fixed its hosted platform and no CVEs were assigned. research.checkpoint.com

Security advisories

In their words