cloudflare-dns-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Host interface to bind for HTTP transport. | 127.0.0.1 |
| PORT | No | Port to listen on for HTTP transport. | 8787 |
| TRANSPORT | No | Transport mode: 'http' (default) or 'stdio'. | http |
| ADMIN_PORT | No | Port for the gateway admin panel, bound to 127.0.0.1 only. | 8788 |
| ADMIN_PASSWORD | No | Password for the gateway admin panel. If unset, a strong random one is generated and printed once at startup. | |
| GATEWAY_ENABLE | No | Set to 'true' to enable multi-tenant gateway mode (HTTP transport only). When enabled, no global CLOUDFLARE_API_TOKEN is used. | |
| MCP_AUTH_TOKEN | No | Bearer token required to access the MCP endpoint over HTTP. Not needed for local stdio transport. | |
| ALLOWED_ORIGINS | No | Comma-separated list of extra browser origins allowed for CORS (DNS-rebinding protection). | |
| GATEWAY_DATA_DIR | No | Required in gateway mode: directory holding agents.json and encrypted secret store files. | |
| GATEWAY_PUBLIC_URL | No | Optional public base URL of this /mcp server (e.g. https://cf.example.com) used to fill in connector snippets. | |
| CLOUDFLARE_API_TOKEN | No | Your Cloudflare API token. The server refuses to start without it in single-tenant mode. The token's scope defines what the server can do. | |
| GATEWAY_SECRET_STORE | No | Secret store backend: 'file' forces encrypted-file backend; otherwise macOS keychain when available, falling back to file. | |
| ALLOW_UNAUTHENTICATED | No | Set to 'true' to allow HTTP access without MCP_AUTH_TOKEN when authentication is terminated upstream (e.g. Cloudflare Access). Defaults to 'false'. | false |
| CLOUDFLARE_ACCOUNT_ID | No | Optional Cloudflare account ID for Workers tools. Falls back to the token's sole visible account; errors if multiple accounts exist. | |
| GATEWAY_MASTER_PASSPHRASE | No | Required when the file secret store is used: passphrase from which the AES-256 key is derived via scrypt. | |
| CLOUDFLARE_API_PASSTHROUGH | No | Controls the raw API passthrough tool: 'read' (default), 'full' (writes require confirm=true), or 'off' (disabled). | read |
| CLOUDFLARE_WORKERS_DEPLOY_ENABLE | No | Set to 'true' to enable the cloudflare_deploy_worker tool (each call also requires confirm=true). | |
| CLOUDFLARE_WORKER_SECRET_ENV_ALLOWLIST | No | Comma-separated list of environment variable names that cloudflare_set_worker_secret_from_env may read. Exact, case-sensitive. | |
| CLOUDFLARE_WORKER_SECRET_SCRIPT_ALLOWLIST | No | Comma-separated list of Worker script names allowed to receive env-sourced secrets. Exact, case-sensitive. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |