Skip to main content
Glama

mcp-cloudflare-api__search

Read-only

Search the Cloudflare OpenAPI spec. All $refs are pre-resolved inline. Response schemas describe the body as the API sends it, usually Cloudflare's envelope: { success, errors, messages, result }, plus result_info on paginated lists.

Products: cloudforce-one, access, workers, magic, dlp, email-security, realtime, email, devices, ai-gateway, data-security, intel, gateway, stream, settings, brand-protection, ai-search, builds, security-center, browser-rendering, addressing, dex, images, logpush, api_gateway, cws, load_balancers, firewall, rulesets, vectorize... (172 total)

Types:

interface OperationInfo { summary?: string; "x-api-token-group"?: string[]; // API token permissions the endpoint accepts (any one); OAuth scopes have the same names description?: string; tags?: string[]; parameters?: Array<{ name: string; in: string; required?: boolean; schema?: unknown; description?: string }>; requestBody?: { required?: boolean; content?: Record<string, { schema?: unknown }> }; // Each schema d… Through Royally: its server marks it read-only, so it runs straight away.

Input Schema

NameRequiredDescriptionDefault
codeYesJavaScript async arrow function to search the OpenAPI spec
site_idNoSite to run this tool on: bb028350-9e3e-46c0-bea7-cd6c2dedf060 (https://mcp.cloudflare.com/mcp)
truncateNoCap the result at ~6,000 tokens. Set to false only when the result goes straight to a file or pipe, not into the conversation: without the cap, a broad query can return megabytes.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false, openWorldHint=false), so the description earns credit for going beyond them: it states that $refs are pre-resolved inline and describes the response envelope (`{ success, errors, messages, result }` plus `result_info` on paginated lists). The truncate semantics live in the schema, but the return-shape context here is genuinely additive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first sentence is well front-loaded, but the body degenerates into a truncated 172-item product list and a truncated TypeScript interface, ending in a garbled fragment ('Through Royally: its server marks it read-only...'). Large amounts of the text do not earn their place and the corruption undermines trust in the rest.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a code-execution tool, an agent needs to know what the async arrow function receives and what it should return, plus when to pick this over execute. The description partially answers the first via the OperationInfo shape but omits the return contract and any sibling routing, and the truncation leaves the definition visibly incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The OperationInfo type block does add value for the `code` parameter by revealing which fields (summary, tags, parameters, requestBody, x-api-token-group) are available to query, but the block is cut off mid-sentence ('// Each schema d…'), leaving the code contract incomplete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence gives a specific verb and resource: 'Search the Cloudflare OpenAPI spec', and the schema confirms the mechanism (a JS arrow function run against the spec). However, it never distinguishes this from the obvious siblings mcp-cloudflare-api__docs and mcp-cloudflare-api__execute, so an agent must infer the split between searching, reading docs, and executing an operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance and no alternatives named, despite three sibling tools in the same server that overlap heavily (docs, execute, whoami). The only usage-adjacent statement is the trailing fragment about a server marking something read-only, which reads as an artifact rather than routing advice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources