Exposes Cloudflare DNS, security, WAF rules, page-rule redirects, zone settings, and cache purge functionality through 16 structured tools that allow reading and modifying DNS records, managing firewall rules, creating redirects, and more.
Referenced as a sandbox environment for creating test zones to safely experiment with the Cloudflare MCP server's capabilities without affecting production infrastructure.
Cloudflare MCP Server
Modern Model-Context-Protocol (MCP) server that exposes Cloudflare DNS, security, redirects and zone-settings functionality as structured tools which any compliant AI client (e.g. Claude Desktop) can invoke.
✨ Key Features
- Rich Tool Catalog – 16 read & write operations covering DNS records, WAF rules, page-rule redirects, cache purge, zone settings and more.
- Plug-and-Play with Claude Desktop – ships with STDIO transport so Claude immediately lists & calls tools; no extra adaptor required.
- Type-Safe – written in TypeScript and powered by
@modelcontextprotocol/sdk
, with zod schemas for every tool’s params & return value. - Non-destructive by Default – destructive certificate-ordering functions are disabled out-of-the-box to prevent accidental cost.
- Script Library & Tests – one-shot scripts for manual ops plus Jest integration/unit tests.
🚀 Quick Start
Need a sandbox? Cloudflare Workers Free Plan lets you create test zones.
🛠️ Tool Catalog
Category | Tool Name | Description |
---|---|---|
General | echo | Round-trip text for connectivity testing |
Zones | list_zones | Enumerate zones the token can access |
Zones | get_zone_settings | Return full settings object |
Zones | list_zone_settings | Short settings summary |
DNS | list_dns_records | Read all DNS RRsets |
DNS | create_dns_record * | Add a record |
DNS | update_dns_record * | Modify record |
DNS | delete_dns_record * | Remove record |
Security | list_waf_rules | Read firewall rules |
Security | create_security_rule * | Add firewall rule |
Security | update_security_rule * | Edit firewall rule |
Security | delete_security_rule * | Delete firewall rule |
Redirect | list_page_rules | List redirects/page-rules |
Redirect | create_redirect * | Create redirect |
Redirect | delete_page_rule * | Delete redirect |
Cache | purge_cache * | Purge URL or everything |
* Destructive operations – use with care.
SSL cert ordering/upload functions are intentionally not registered. Enable them by removing the filter in src/index.ts
if required.
🧑💻 Development
Handy demo scripts live under scripts/
(e.g. scripts/list-dns-demo.ts
). All accept a --zone
flag.
🏗️ Architecture
src/index.ts
– entrypoint; merges tool maps and registers them withMcpServer
.src/tools/
– individual tool modules, each exporting{ tools, description }
.src/cloudflare-client.ts
– thin wrapper around axios + CF API base URL.tests/
– Jest tests (unit + integration).
The server communicates over STDIO using JSON-RPC 2.0 as defined by the MCP SDK. See docs/API.md
.
🤝 Contributing
PRs & issues are welcome! Please read REFERENCE.md
for coding conventions and style guidelines.
- Fork → feature branch → PR.
- Ensure
npm test
passes. - Describe the tool behaviour or bug clearly.
📜 License
MIT © 2025 Jeff Golden
Made with Windsurf
remote-capable server
The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.
Tools
Exposes Cloudflare DNS, security, redirects and zone-settings functionality as structured tools that AI assistants like Claude Desktop can invoke directly.
Related MCP Servers
- -securityAlicense-qualityLets you use Claude Desktop, or any MCP Client, to use natural language to accomplish things on your Cloudflare account.Last updated -3,2342,567TypeScriptApache 2.0
- AsecurityAlicenseAqualityEnables natural language interaction with Azure services through Claude Desktop, supporting resource management, subscription handling, and tenant selection with secure authentication.Last updated -3013TypeScriptMIT License
- -securityAlicense-qualityA lightweight MCP server for managing DNS records, purging cache, and interacting with the Cloudflare API through natural language commands.Last updated -13TypeScriptMIT License
- -securityFlicense-qualityEnables managing Google Cloud Platform resources through natural language commands in Claude Desktop, supporting comprehensive operations across compute, storage, databases, networking, monitoring, and IAM without manual credential setup.Last updated -8Python