PlugWiki
Cloudflare API MCP Server logo

Cloudflare API MCP Server: Setup for Claude, Cursor and Other Apps

Official · by CloudflareRemote
Getcloudflare/mcpDocs
Tools
4
3 read · 1 change
Stars
1K
on GitHub
Works in
14
apps
Risk
High
can delete
Auth
OAuth
sign in, no key

Lets Claude, Cursor and other assistants work with your Cloudflare account, from Workers and DNS to storage, through Cloudflare's whole API.

This is Cloudflare's own server. It exposes the full Cloudflare API through four tools, so the assistant writes small scripts instead of loading thousands of separate tools. You sign in with your Cloudflare account and choose the permissions, or you give it an API token. It acts on your live account, so grant only the permissions the job needs.

Good for

  • Developers who manage Workers, KV, R2 and D1 from their editor
  • Site owners who change DNS records or firewall rules by chat
  • Platform teams who script Cloudflare through an assistant

Works in

14 should work

Tap an app to see how to set it up and any known problems.

Install Cloudflare API MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Cloudflare API MCP server to Claude Code. Run this command:

claude mcp add --transport http cloudflare-api https://mcp.cloudflare.com/mcp

Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Sign-in with the vendor account (OAuth).

Built from the package data we hold. Not yet tested by us.

Tools

  • Searches Cloudflare's documentation

    Looks up answers in Cloudflare's developer docs.

    Try: “How do I bind a KV namespace to a Worker?”

    Read · docs

  • Finds the right Cloudflare API call

    The assistant writes a short script that searches Cloudflare's API description for the endpoints it needs.

    Try: “Find the API calls for managing DNS records.”

    Read · search

  • Calls the Cloudflare API

    The assistant writes a short script that makes the API calls. This can read or change anything your sign-in or token allows.

    Try: “Add an A record for api.example.com pointing to 192.0.2.1.”

    Delete · execute

  • Shows which account is connected

    Returns the user or account the connection is signed in as.

    Try: “Which Cloudflare account am I connected to?”

    Read · whoami

Read from the source code

Permissions

high risk · 3 things to watch

High risk

It can create, change and delete anything in your Cloudflare account that the sign-in or token allows, because the assistant writes its own API calls. Choose only the permissions you need when you authorize, and use a limited API token for automation.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It can change or delete anything your token allows

    The assistant writes the API calls itself, so one request can edit DNS, delete a Worker or empty storage. Use a token or OAuth scopes that are read-only unless you need changes. raw.githubusercontent.com

  • Missing permissions trigger a new sign-in prompt

    If a call needs a permission you did not grant, the server asks your app to authorize again with that permission added. Check what it asks for before you approve. raw.githubusercontent.com

  • API tokens with IP filtering do not work

    The README says tokens with Client IP Address Filtering are not supported. Create a token without that filter. raw.githubusercontent.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Talks tomcp.cloudflare.com. api.cloudflare.com
Sign-in and keysOAuth tokens are held by your AI app. An API token is sent as a bearer token to the server.
Scopes

  • OAuth permissions you pick at sign-in, or the permissions on your Cloudflare API token

Questions

Is the Cloudflare API MCP server official?

Yes. It is published by Cloudflare in the cloudflare/mcp repository.

What is the Cloudflare API MCP server URL?

https://mcp.cloudflare.com/mcp. Add it in your AI app and sign in with your Cloudflare account.

How is this different from the Cloudflare MCP page?

It is the same hosted server at the same address, shown here from its GitHub repository. The other page covers it together with Cloudflare's smaller single-product servers.

Do I need an API token, or can I sign in?

You can do either. OAuth sign-in is recommended and lets you pick permissions. An API token is for automation and CI. Use it as a bearer token, and include the Account Resources Read permission on account tokens.

Can I make it read-only?

There is no read-only switch. Limit it by choosing read-only permissions when you sign in, or by creating a token that has only read permissions.

What does the codemode setting do?

Adding ?codemode=false to the address gives the assistant one tool for each of about 2,500 API endpoints. This uses far more of your assistant's context, so the README says to use it only when you must.

Information

updated Nov 2, 2026

Publisher
Cloudflare (official)
Transport
Streamable HTTP
Auth
OAuth
License
Apache-2.0
Last commit
Oct 30, 2026
Open issues
24

WebsiteCloudflare docs: MCP servers for CloudflareGitHubIssues

Other Cloudflare MCP servers

See all

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 1
  1. raw.githubusercontent.com · raw.githubusercontent.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.