cloudflare-mcp-pro
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CLOUDFLARE_API_BASE | No | Override the API base URL | |
| CLOUDFLARE_API_TOKEN | Yes | API token from https://dash.cloudflare.com/profile/api-tokens | |
| CLOUDFLARE_ACCOUNT_ID | No | Default account ID used when a tool doesn't receive account_id |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| verify_tokenA | Validate the configured Cloudflare API token and show its status/permissions. |
| list_accountsB | List Cloudflare accounts accessible by the token. |
| list_zonesA | List zones (domains), optionally filtered by name or status. |
| get_zoneA | Get details of a single zone by ID. |
| create_zoneA | Add a new domain (zone) to an account. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_zoneA | Delete a zone by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| purge_cacheA | Purge a zone's cache — everything, or by files/tags/hosts/prefixes. Requires confirm:true (human-approval gate); without it returns a preview only. |
| get_zone_analyticsA | Get HTTP traffic analytics for a zone over a time range (via GraphQL). |
| get_zone_settingB | Get a single zone setting (e.g. ssl, always_use_https, min_tls_version). |
| update_zone_settingA | Update a single zone setting (e.g. set ssl=full, always_use_https=on). Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_dns_recordsA | List DNS records of a zone, optionally filtered by type/name. |
| create_dns_recordA | Create a DNS record (A, AAAA, CNAME, TXT, MX, etc). Requires confirm:true (human-approval gate); without it returns a preview only. |
| update_dns_recordA | Update an existing DNS record (partial update). Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_dns_recordA | Delete a DNS record by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| get_dnssecA | Get the DNSSEC status and DS record details for a zone. |
| edit_dnssecA | Enable or disable DNSSEC for a zone. Requires confirm:true (human-approval gate); without it returns a preview only. |
| export_dns_recordsA | Export all DNS records of a zone as a BIND zone file. |
| list_workersA | List Worker scripts in an account. |
| get_workerA | Get a Worker script's settings/metadata. |
| deploy_workerA | Create or update (deploy) a Worker script from ES module source. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_workerA | Delete a Worker script by name. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_worker_routesA | List Worker routes (URL patterns mapped to Workers) on a zone. |
| create_worker_routeA | Create a Worker route mapping a URL pattern to a Worker script. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_worker_routeA | Delete a Worker route by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| put_worker_secretA | Create or update a secret binding on a Worker script. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_worker_secretA | Delete a secret binding from a Worker script. Requires confirm:true (human-approval gate); without it returns a preview only. |
| update_worker_cronA | Set the cron triggers (schedules) for a Worker script. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_kv_namespacesB | List Workers KV namespaces in an account. |
| create_kv_namespaceA | Create a new Workers KV namespace. Requires confirm:true (human-approval gate); without it returns a preview only. |
| kv_list_keysB | List keys in a KV namespace, optionally filtered by prefix. |
| kv_getA | Read the value of a key in a KV namespace. |
| kv_putA | Write a value to a key in a KV namespace, with optional TTL. Requires confirm:true (human-approval gate); without it returns a preview only. |
| kv_deleteA | Delete a key from a KV namespace. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_r2_bucketsA | List R2 buckets in an account. |
| create_r2_bucketA | Create a new R2 bucket. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_r2_bucketA | Delete an (empty) R2 bucket. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_d1_databasesC | List D1 databases in an account. |
| create_d1_databaseA | Create a new D1 database. Requires confirm:true (human-approval gate); without it returns a preview only. |
| query_d1A | Execute a SQL statement against a D1 database (with optional bound params). Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_pages_projectsA | List Cloudflare Pages projects in an account. |
| get_pages_projectA | Get details of a Cloudflare Pages project. |
| list_firewall_rulesetsA | List WAF rulesets configured on a zone. |
| get_rulesetA | Get a single ruleset (with its rules) by ID. |
| list_access_rulesB | List IP/ASN/country access rules (block/challenge/allow) on a zone. |
| create_access_ruleA | Create an IP/ASN/country access rule (block, challenge, or whitelist). Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_access_ruleA | Delete an access rule by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_page_rulesA | List page rules on a zone. |
| create_page_ruleA | Create a page rule (URL pattern + actions like cache_level, forwarding_url). Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_page_ruleA | Delete a page rule by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_certificate_packsB | List SSL/TLS certificate packs on a zone. |
| get_ssl_verificationA | Get SSL/TLS certificate verification status for a zone. |
| order_certificate_packA | Order an advanced certificate pack for one or more hostnames. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_custom_hostnamesC | List custom hostnames (SSL for SaaS) on a zone. |
| create_custom_hostnameA | Add a custom hostname (SSL for SaaS) to a zone. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_custom_hostnameA | Delete a custom hostname by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_email_rulesC | List Email Routing rules on a zone. |
| create_email_ruleA | Create an Email Routing rule (forward an address to a destination). Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_email_destinationsA | List verified Email Routing destination addresses in an account. |
| list_queuesA | List Cloudflare Queues in an account. |
| create_queueA | Create a new Cloudflare Queue. Requires confirm:true (human-approval gate); without it returns a preview only. |
| delete_queueA | Delete a Queue by ID. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_tunnelsA | List Cloudflare Tunnels (cloudflared) in an account. |
| get_tunnelA | Get details of a Cloudflare Tunnel by ID. |
| list_turnstile_widgetsA | List Turnstile widgets in an account. |
| create_turnstile_widgetA | Create a Turnstile widget (CAPTCHA alternative) for given domains. Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_ai_modelsA | Search the catalog of Workers AI models available to the account. |
| run_aiA | Run inference on a Workers AI model (text generation, embeddings, classification). Requires confirm:true (human-approval gate); without it returns a preview only. |
| list_logpush_jobsB | List Logpush jobs for a zone or account. |
| create_logpush_jobA | Create a Logpush job streaming a dataset to a destination. Requires confirm:true (human-approval gate); without it returns a preview only. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/helbertparanhos/cloudflare-mcp-pro'
If you have feedback or need assistance with the MCP directory API, please join our Discord server