Skip to main content
Glama
jeffgolden

Cloudflare MCP Server

by jeffgolden

Cloudflare MCP Server

Modern Model-Context-Protocol (MCP) server that exposes Cloudflare DNS, security, redirects and zone-settings functionality as structured tools which any compliant AI client (e.g. Claude Desktop) can invoke.


✨ Key Features

  • Rich Tool Catalog – 16 read & write operations covering DNS records, WAF rules, page-rule redirects, cache purge, zone settings and more.

  • Plug-and-Play with Claude Desktop – ships with STDIO transport so Claude immediately lists & calls tools; no extra adaptor required.

  • Type-Safe – written in TypeScript and powered by @modelcontextprotocol/sdk, with zod schemas for every tool’s params & return value.

  • Non-destructive by Default – destructive certificate-ordering functions are disabled out-of-the-box to prevent accidental cost.

  • Script Library & Tests – one-shot scripts for manual ops plus Jest integration/unit tests.


Related MCP server: Cloudflare API MCP Server

🚀 Quick Start

# 1. Clone & install
npm install

# 2. Configure credentials
cp config/.env.example .env
$EDITOR .env          # put your CLOUDFLARE_API_TOKEN

# 3. Build & run the server (stdio)
npm run build
node dist/index.js    # Claude Desktop will auto-detect

Need a sandbox? Cloudflare Workers Free Plan lets you create test zones.


🛠️ Tool Catalog

Category

Tool Name

Description

General

echo

Round-trip text for connectivity testing

Zones

list_zones

Enumerate zones the token can access

Zones

get_zone_settings

Return full settings object

Zones

list_zone_settings

Short settings summary

DNS

list_dns_records

Read all DNS RRsets

DNS

create_dns_record*

Add a record

DNS

update_dns_record*

Modify record

DNS

delete_dns_record*

Remove record

Security

list_waf_rules

Read firewall rules

Security

create_security_rule*

Add firewall rule

Security

update_security_rule*

Edit firewall rule

Security

delete_security_rule*

Delete firewall rule

Redirect

list_page_rules

List redirects/page-rules

Redirect

create_redirect*

Create redirect

Redirect

delete_page_rule*

Delete redirect

Cache

purge_cache*

Purge URL or everything

* Destructive operations – use with care.

SSL cert ordering/upload functions are intentionally not registered. Enable them by removing the filter in src/index.ts if required.


🧑‍💻 Development

# Watch-mode compile
npm run dev

# Run the full test suite
npm test

# Lint
npm run lint

Handy demo scripts live under scripts/ (e.g. scripts/list-dns-demo.ts). All accept a --zone flag.


🏗️ Architecture

  • src/index.ts – entrypoint; merges tool maps and registers them with McpServer.

  • src/tools/ – individual tool modules, each exporting { tools, description }.

  • src/cloudflare-client.ts – thin wrapper around axios + CF API base URL.

  • tests/ – Jest tests (unit + integration).

The server communicates over STDIO using JSON-RPC 2.0 as defined by the MCP SDK. See docs/API.md.


🤝 Contributing

PRs & issues are welcome! Please read REFERENCE.md for coding conventions and style guidelines.

  1. Fork → feature branch → PR.

  2. Ensure npm test passes.

  3. Describe the tool behaviour or bug clearly.


📜 License

MIT © 2025 Jeff Golden

Made with Windsurf

Install Server
A
security – no known vulnerabilities
A
license - permissive license
A
quality - confirmed to work

Resources

Looking for Admin?

Admins can modify the Dockerfile, update the server description, and track usage metrics. If you are the server author, to access the admin panel.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/jeffgolden/cloudflare_mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server