cloudflare-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CLOUDFLARE_API_TOKEN | Yes | Cloudflare API token with read-only permissions |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_accountsA | List all Cloudflare accounts accessible with the current API token |
| get_accountB | Get details for a specific Cloudflare account |
| list_account_membersC | List all members of a Cloudflare account |
| get_audit_logsB | Get audit logs for a Cloudflare account. Returns recent activity including user actions, API calls, and configuration changes. |
| list_zonesA | List all zones (domains) in the account |
| get_zoneB | Get details for a specific zone |
| get_zone_settingsA | Get all settings for a zone including SSL, security, caching, and performance settings |
| get_ssl_settingsB | Get SSL/TLS settings for a zone including encryption mode and TLS version |
| list_certificate_packsA | List SSL certificate packs for a zone |
| get_ssl_verificationA | Get SSL verification status for a zone's certificates |
| list_custom_certificatesA | List custom SSL certificates uploaded to a zone |
| get_universal_ssl_settingsB | Get Universal SSL settings for a zone |
| get_rate_limiting_rulesA | Get rate limiting rules for a zone (modern WAF rulesets API) |
| list_legacy_rate_limitsA | List legacy rate limiting rules for a zone (deprecated API) |
| list_zone_rulesetsB | List all rulesets for a zone (includes WAF, rate limiting, transform rules, etc.) |
| get_rulesetC | Get details of a specific ruleset |
| get_waf_custom_rulesB | Get custom WAF rules for a zone |
| get_waf_managed_rulesB | Get managed WAF rules configuration for a zone |
| list_dns_recordsC | List DNS records for a zone |
| list_firewall_rulesC | List firewall rules for a zone |
| list_page_rulesB | List page rules for a zone |
| list_workersB | List Worker scripts in an account |
| list_worker_routesA | List Worker routes for a zone |
| list_load_balancersB | List load balancers for a zone |
| list_origin_poolsB | List load balancer origin pools for an account |
| list_custom_hostnamesA | List custom hostnames (SSL for SaaS) for a zone |
| list_access_appsC | List Cloudflare Access applications for an account |
| list_access_policiesA | List Cloudflare Access policies for an account |
| get_bot_managementB | Get bot management settings for a zone |
| get_argo_settingsB | Get Argo Smart Routing and Tiered Caching settings for a zone |
| list_waiting_roomsA | List waiting rooms for a zone |
| get_cache_settingsB | Get cache settings for a zone |
| get_zone_analyticsC | Get analytics dashboard data for a zone |
| get_analytics_by_coloB | Get zone analytics broken down by Cloudflare colo/data center |
| graphql_analyticsC | Query Cloudflare Analytics using GraphQL. Supports zones, accounts, and various datasets. |
| list_account_rolesB | List all roles available in a Cloudflare account |
| list_account_rulesetsA | List all rulesets at the account level |
| get_account_rulesetB | Get a specific account-level ruleset |
| list_access_groupsA | List Cloudflare Access groups for an account |
| list_access_service_tokensA | List Cloudflare Access service tokens for an account |
| list_worker_servicesB | List Worker services in an account |
| list_load_balancer_monitorsB | List health monitors for load balancers |
| get_origin_rulesA | Get origin rules for a zone (override origin server, host header, etc.) |
| get_url_rewrite_rulesC | Get URL rewrite/transform rules for a zone |
| get_request_header_rulesA | Get HTTP request header modification rules for a zone |
| get_response_header_rulesA | Get HTTP response header modification rules for a zone |
| get_cache_rulesC | Get cache rules for a zone |
| get_ddos_l7_rulesB | Get Layer 7 DDoS protection rules for a zone |
| get_ddos_l4_rulesB | Get Layer 4 DDoS protection rules for an account |
| list_spectrum_appsA | List Spectrum applications for a zone (TCP/UDP proxy) |
| list_api_shield_operationsB | List API Shield operations/endpoints for a zone |
| list_api_shield_schemasB | List API Shield schemas for a zone |
| get_api_shield_configB | Get API Shield configuration for a zone |
| list_d1_databasesB | List D1 SQL databases in an account |
| get_d1_databaseC | Get details of a D1 database |
| list_r2_bucketsA | List R2 storage buckets in an account |
| list_kv_namespacesA | List Workers KV namespaces in an account |
| get_kv_namespaceC | Get details of a KV namespace |
| list_kv_keysC | List keys in a KV namespace |
| list_durable_object_namespacesA | List Durable Object namespaces in an account |
| list_queuesA | List Cloudflare Queues in an account |
| get_queueC | Get details of a Cloudflare Queue |
| list_tunnelsC | List Cloudflare Tunnels in an account |
| get_tunnelC | Get details of a Cloudflare Tunnel |
| list_tunnel_connectionsB | List active connections for a Cloudflare Tunnel |
| list_logpush_jobs_zoneA | List Logpush jobs for a zone |
| list_logpush_jobs_accountA | List Logpush jobs for an account |
| get_email_routing_settingsB | Get email routing settings for a zone |
| list_email_routing_rulesB | List email routing rules for a zone |
| list_email_routing_addressesC | List verified destination email addresses |
| list_pages_projectsB | List Cloudflare Pages projects in an account |
| get_pages_projectC | Get details of a Pages project |
| list_pages_deploymentsB | List deployments for a Pages project |
| list_stream_videosC | List videos in Cloudflare Stream |
| get_stream_videoC | Get details of a Stream video |
| list_imagesC | List images in Cloudflare Images |
| get_images_statsB | Get Cloudflare Images usage statistics |
| list_registrar_domainsC | List domains registered with Cloudflare Registrar |
| get_registrar_domainC | Get details of a domain in Cloudflare Registrar |
| list_healthchecksB | List healthchecks for a zone |
| get_healthcheckC | Get details of a healthcheck |
| list_ip_access_rulesA | List IP access rules for a zone (IP blocking/allowing) |
| list_zone_lockdown_rulesA | List zone lockdown rules (IP allowlisting for URLs) |
| list_user_agent_rulesA | List user agent blocking rules for a zone |
| list_origin_ca_certificatesA | List Origin CA certificates for a zone |
| list_client_certificatesC | List client certificates for mTLS |
| get_authenticated_origin_pullsA | Get Authenticated Origin Pulls settings for a zone |
| list_filtersB | List filters used by firewall rules |
| list_snippetsA | List Cloudflare Snippets for a zone |
| list_web3_hostnamesA | List Web3 hostnames for a zone |
| get_zaraz_configC | Get Zaraz configuration for a zone |
| get_zone_settingB | Get a specific zone setting by name (e.g., ssl, min_tls_version, security_level) |
| get_certificate_packC | Get details of a specific SSL certificate pack |
| get_custom_certificateA | Get details of a specific custom SSL certificate |
| get_legacy_rate_limitC | Get details of a specific legacy rate limit rule |
| get_dns_recordB | Get details of a specific DNS record |
| get_page_ruleB | Get details of a specific page rule |
| get_worker_scriptC | Get metadata for a specific Worker script |
| get_custom_hostnameB | Get details of a specific custom hostname |
| get_waiting_roomB | Get details of a specific waiting room |
| list_ai_modelsB | List available Workers AI models |
| list_vectorize_indexesA | List Vectorize indexes (vector databases) in an account |
| get_vectorize_indexB | Get details of a Vectorize index |
| list_ai_gatewaysB | List AI Gateway instances in an account |
| get_ai_gateway_logsC | Get logs for an AI Gateway |
| list_worker_secretsA | List secret names for a Worker script (does not return secret values) |
| list_worker_deploymentsA | List deployments for a Worker script (useful for rollback decisions) |
| list_worker_tailsA | List active tail log sessions for a Worker script |
| get_userA | Get current authenticated user details (email, ID, etc.) |
| verify_tokenA | Verify the current API token and get its status |
| get_billing_profileB | Get billing profile for an account (payment status, etc.) |
| get_zone_subscriptionA | Get zone subscription tier (Free/Pro/Business/Enterprise) - determines available features |
| list_devicesB | List devices enrolled in Zero Trust/WARP |
| list_device_posture_rulesB | List device posture rules (compliance requirements) |
| list_device_policiesC | List device policies for Zero Trust |
| get_dnssecC | Get DNSSEC status for a zone |
| get_page_shield_settingsA | Get Page Shield settings for a zone (client-side security monitoring) |
| list_page_shield_scriptsA | List scripts detected by Page Shield |
| list_page_shield_connectionsB | List connections detected by Page Shield |
| list_page_shield_policiesC | List Page Shield policies |
| list_security_insightsA | List Security Center insights for a zone (security issues and recommendations) |
| list_notification_policiesB | List notification/alerting policies for an account |
| list_notification_historyA | List notification history (past alerts sent) |
| list_available_alertsB | List available alert types that can be configured |
| list_notification_webhooksB | List configured notification webhook destinations |
| get_tunnel_configurationC | Get configuration for a Cloudflare Tunnel (ingress rules, etc.) |
| list_turnstile_widgetsA | List Turnstile widgets (CAPTCHA alternatives) for an account |
| get_turnstile_widgetC | Get details of a specific Turnstile widget |
| list_gateway_rulesB | List Zero Trust Gateway rules (DNS/HTTP/Network filtering) |
| get_gateway_configurationC | Get Zero Trust Gateway configuration settings |
| list_gateway_locationsA | List Gateway locations (DNS resolver endpoints) |
| list_gateway_proxy_endpointsC | List Gateway proxy endpoints |
| list_hyperdrive_configsB | List Hyperdrive configurations (database connection accelerators) |
| get_hyperdrive_configC | Get details of a Hyperdrive configuration |
| get_url_normalizationB | Get URL normalization settings for a zone |
| get_managed_headersC | Get managed request/response headers configuration |
| list_keyless_certificatesA | List Keyless SSL certificates for a zone |
| list_magic_transit_ipsec_tunnelsB | List Magic Transit IPsec tunnels for an account |
| get_magic_transit_ipsec_tunnelB | Get details of a specific Magic Transit IPsec tunnel |
| list_magic_transit_gre_tunnelsA | List Magic Transit GRE tunnels for an account |
| get_magic_transit_gre_tunnelA | Get details of a specific Magic Transit GRE tunnel |
| list_magic_transit_routesA | List Magic Transit static routes for an account |
| get_magic_transit_routeA | Get details of a specific Magic Transit static route |
| list_magic_transit_connectorsA | List Magic Transit connectors for an account |
| get_magic_transit_connectorB | Get details of a specific Magic Transit connector |
| list_magic_transit_sitesB | List Magic WAN sites for an account |
| get_magic_transit_siteA | Get details of a specific Magic WAN site |
| list_dns_firewall_clustersC | List DNS Firewall clusters for an account |
| get_dns_firewall_clusterA | Get details of a specific DNS Firewall cluster |
| get_dns_firewall_analyticsC | Get DNS Firewall analytics for a cluster |
| get_secondary_dns_primaryA | Get secondary DNS primary nameserver configuration for a zone |
| list_secondary_dns_peersB | List secondary DNS peers for an account |
| get_secondary_dns_peerA | Get details of a specific secondary DNS peer |
| list_secondary_dns_tsigsB | List secondary DNS TSIG keys for an account |
| get_secondary_dns_tsigA | Get details of a specific secondary DNS TSIG key |
| get_secondary_dns_incomingC | Get secondary DNS incoming zone transfer configuration |
| get_secondary_dns_outgoingB | Get secondary DNS outgoing zone transfer configuration |
| list_secondary_dns_aclsB | List secondary DNS ACLs for an account |
| get_secondary_dns_aclB | Get details of a specific secondary DNS ACL |
| list_speed_testsC | List speed tests for a zone URL |
| get_speed_testC | Get details of a specific speed test |
| get_speed_scheduleA | Get scheduled speed test configuration for a URL |
| list_speed_available_regionsB | List available regions for speed tests |
| get_speed_page_trendC | Get speed trends for a page over time |
| list_calls_appsA | List Cloudflare Calls applications (WebRTC) |
| get_calls_appB | Get details of a specific Calls application |
| list_calls_turn_keysB | List TURN keys for Cloudflare Calls |
| get_calls_turn_keyA | Get details of a specific TURN key |
| list_dlp_profilesA | List DLP profiles for an account |
| get_dlp_profileB | Get details of a specific DLP profile |
| list_dlp_datasetsC | List DLP datasets for an account |
| get_dlp_datasetB | Get details of a specific DLP dataset |
| list_dlp_patternsC | List predefined DLP patterns available |
| get_dlp_payload_log_settingsB | Get DLP payload logging settings for an account |
| get_cloudflare_ipsA | Get Cloudflare's IP ranges (IPv4 and IPv6) - useful for allowlisting |
| list_membershipsA | List account memberships for the authenticated user |
| get_membershipB | Get details of a specific account membership |
| list_access_bookmarksC | List Access bookmarks for an account |
| get_access_bookmarkC | Get details of an Access bookmark |
| list_access_certificatesB | List Access mTLS certificates for an account |
| get_access_certificateB | Get details of an Access mTLS certificate |
| get_access_certificate_settingsC | Get Access mTLS certificate settings |
| list_access_custom_pagesB | List Access custom pages for an account |
| get_access_custom_pageC | Get details of an Access custom page |
| list_access_identity_providersB | List Access identity providers for an account |
| get_access_identity_providerB | Get details of an Access identity provider |
| get_access_keysB | Get Access keys configuration (signing keys for tokens) |
| list_access_logsC | List Access request logs for an account |
| get_access_organizationA | Get Access organization settings for an account |
| list_access_tagsB | List Access tags for an account |
| get_access_tagC | Get details of an Access tag |
| list_access_usersB | List Access users for an account |
| list_access_user_active_sessionsB | List active sessions for an Access user |
| list_access_user_failed_loginsB | List failed logins for an Access user |
| list_ai_gateway_datasetsB | List datasets for an AI Gateway |
| get_ai_gateway_datasetC | Get details of an AI Gateway dataset |
| list_ai_gateway_evaluationsC | List evaluations for an AI Gateway |
| get_ai_gateway_evaluationC | Get details of an AI Gateway evaluation |
| list_ai_gateway_routesB | List routes for an AI Gateway |
| get_ai_gateway_routeB | Get details of an AI Gateway route |
| list_address_mapsB | List IP address maps for an account |
| get_address_mapC | Get details of an IP address map |
| list_ip_prefixesB | List IP prefixes (BYOIP) for an account |
| get_ip_prefixB | Get details of an IP prefix |
| get_ip_prefix_bgp_statusB | Get BGP status for an IP prefix |
| list_ip_prefix_delegationsC | List delegations for an IP prefix |
| list_addressing_servicesC | List addressing services for an account |
| get_url_scanC | Get URL scan result |
| get_url_scan_harA | Get HAR file from URL scan |
| list_ai_search_instancesB | List AI Search instances for an account |
| get_ai_search_instanceC | Get details of an AI Search instance |
| list_ai_search_itemsB | List items in an AI Search instance |
| list_ai_search_jobsB | List jobs for an AI Search instance |
| get_ai_search_jobB | Get details of an AI Search job |
| list_worker_buildsC | List Worker builds for an account |
| get_worker_buildC | Get details of a Worker build |
| list_workflowsB | List Workers Workflows for an account |
| get_workflowC | Get details of a Workers Workflow |
| list_workflow_instancesC | List instances of a Workers Workflow |
| get_workflow_instanceB | Get details of a workflow instance |
| list_cni_interconnectsB | List Cloud Network Interconnects for an account |
| get_cni_interconnectC | Get details of a Cloud Network Interconnect |
| list_cni_slotsB | List CNI slots for an account |
| get_cni_settingsB | Get CNI settings for an account |
| list_r2_pipelinesB | List R2 pipelines for an account |
| get_r2_pipelineA | Get details of an R2 pipeline |
| list_permission_groupsB | List IAM permission groups for an account |
| get_permission_groupB | Get details of an IAM permission group |
| list_resource_groupsA | List IAM resource groups for an account |
| get_resource_groupC | Get details of an IAM resource group |
| list_risk_scoring_behaviorsC | List Zero Trust risk scoring behaviors |
| list_risk_scoring_integrationsA | List Zero Trust risk scoring integrations |
| get_risk_scoring_integrationB | Get details of a risk scoring integration |
| list_r2_catalogsA | List R2 catalogs for an account |
| get_r2_catalogB | Get details of an R2 catalog |
| list_teamnet_routesC | List team network routes for an account |
| list_teamnet_virtual_networksA | List team virtual networks for an account |
| get_teamnet_virtual_networkB | Get details of a team virtual network |
| list_secrets_storesB | List secrets stores for an account |
| get_secrets_storeC | Get details of a secrets store |
| list_secrets_store_secretsA | List secrets in a secrets store (names only) |
| list_pcapsB | List packet captures for an account |
| get_pcapB | Get details of a packet capture |
| get_pcap_ownershipC | Get packet capture ownership info |
| get_mnm_configC | Get Magic Network Monitoring configuration |
| list_mnm_rulesB | List Magic Network Monitoring rules |
| get_mnm_ruleB | Get details of a Magic Network Monitoring rule |
| list_warp_connectorsB | List WARP connectors for an account |
| get_warp_connectorC | Get details of a WARP connector |
| list_account_mtls_certificatesA | List mTLS certificates at account level |
| get_account_mtls_certificateC | Get details of an account mTLS certificate |
| get_account_dns_settingsC | Get DNS settings for an account |
| list_dns_viewsC | List DNS views for an account |
| get_dns_viewC | Get details of a DNS view |
| get_schema_validation_settingsA | Get API schema validation settings for a zone |
| list_api_schemasC | List API schemas for a zone |
| get_token_validation_settingsA | Get token validation settings for a zone |
| get_smart_shield_settingsB | Get Smart Shield settings for a zone |
| get_zone_logs_retentionB | Get zone logs retention settings |
| get_leaked_credential_check_settingsB | Get leaked credential check settings for a zone |
| list_leaked_credential_detectionsC | List leaked credential detections for a zone |
| get_total_tls_settingsC | Get Total TLS settings for a zone (Advanced Certificate Manager) |
| get_dns_analytics_reportC | Get DNS analytics report for a zone |
| get_fraud_detection_settingsA | Get fraud detection settings for a zone |
| list_cloud_connector_rulesC | List cloud connector rules for a zone |
| get_dcv_delegationB | Get DCV delegation UUID for a zone |
| get_intel_asnC | Get intelligence about an ASN |
| get_intel_domainC | Get intelligence about a domain |
| get_intel_domain_historyC | Get domain history intelligence |
| get_intel_ipC | Get intelligence about an IP address |
| get_intel_whoisB | Get WHOIS information for a domain |
| list_intel_indicator_feedsC | List threat indicator feeds |
| get_intel_indicator_feedC | Get details of a threat indicator feed |
| list_intel_sinkholesC | List Cloudflare sinkholes |
| list_intel_ip_listsC | List IP lists for threat intelligence |
| list_account_rules_listsB | List account-level rules lists (IP lists, hostname lists, etc.) |
| get_account_rules_listC | Get details of an account rules list |
| list_account_rules_list_itemsC | List items in an account rules list |
| list_account_tokensB | List API tokens for an account |
| get_account_tokenB | Get details of an API token |
| verify_account_tokenC | Verify an API token is valid |
| list_token_permission_groupsA | List available permission groups for API tokens |
| list_rum_sitesB | List Real User Monitoring sites |
| get_rum_siteB | Get details of a RUM site |
| list_abuse_reportsB | List abuse reports for an account |
| get_abuse_reportB | Get details of an abuse report |
| list_infrastructure_targetsC | List infrastructure targets |
| get_infrastructure_targetB | Get details of an infrastructure target |
| list_connectivity_servicesC | List connectivity directory services |
| get_connectivity_serviceC | Get details of a connectivity service |
| list_endpoint_healthchecksC | List endpoint healthchecks for diagnostics |
| get_endpoint_healthcheckB | Get details of an endpoint healthcheck |
| list_containersC | List containers for an account |
| get_r2_event_notification_configA | Get R2 bucket event notification configuration |
| get_api_gateway_configC | Get API Gateway configuration for a zone |
| get_api_gateway_discoveryC | Get API Gateway discovery status |
| list_api_gateway_operationsB | List API Gateway operations for a zone |
| get_api_gateway_operationC | Get details of an API Gateway operation |
| list_api_gateway_schemasB | List API Gateway schemas for a zone |
| list_api_gateway_user_schemasB | List API Gateway user-uploaded schemas |
| get_api_gateway_user_schemaC | Get details of an API Gateway user schema |
| get_api_gateway_settingsC | Get API Gateway schema validation settings |
| get_spectrum_analytics_summaryC | Get Spectrum analytics summary |
| get_content_upload_scan_settingsA | Get content upload scan (malware) settings for a zone |
| get_zone_holdB | Get zone hold status |
| get_r2_shareB | Get details of an R2 share |
| list_r2_share_recipientsA | List recipients of an R2 share |
| list_r2_share_resourcesC | List resources in an R2 share |
| list_slurper_jobsC | List migration (slurper) jobs |
| get_slurper_jobB | Get details of a migration job |
| get_slurper_job_progressB | Get progress of a migration job |
| get_botnet_feed_asn_configB | Get botnet feed ASN configuration |
| get_botnet_feed_asn_reportC | Get botnet feed report for an ASN |
| list_autorag_filesB | List files in an AutoRAG instance |
| list_autorag_jobsC | List jobs for an AutoRAG instance |
| get_autorag_jobB | Get details of an AutoRAG job |
| list_dex_colosC | List DEX colocations |
| list_dex_fleet_status_devicesC | List DEX fleet status by device |
| get_dex_fleet_status_liveC | Get live DEX fleet status |
| get_dex_fleet_status_over_timeC | Get DEX fleet status over time |
| list_dex_tests_overviewC | List DEX tests overview |
| get_dex_tests_unique_devicesC | Get unique devices for DEX tests |
| get_dex_http_testC | Get DEX HTTP test details |
| get_dex_traceroute_testC | Get DEX traceroute test details |
| list_dex_rulesC | List DEX rules |
| get_dex_ruleC | Get DEX rule details |
| list_dex_commandsC | List DEX commands |
| get_dex_commands_quotaC | Get DEX commands quota |
| list_brand_protection_alertsC | List brand protection alerts |
| list_brand_protection_brandsB | List registered brands for brand protection |
| list_brand_protection_logosC | List brand protection logos |
| get_brand_protection_logoC | Get brand protection logo details |
| list_brand_protection_matchesC | List brand protection matches (potential infringements) |
| list_brand_protection_logo_matchesC | List brand protection logo matches |
| list_brand_protection_queriesC | List brand protection queries |
| get_brand_protection_url_infoC | Get brand protection URL info |
| get_brand_protection_domain_infoC | Get brand protection domain info |
| list_brand_protection_tracked_domainsC | List brand protection tracked domains |
| list_brand_protection_recent_submissionsC | List recent brand protection submissions |
| list_email_security_investigateC | List email security investigation results |
| get_email_security_messageC | Get email security message details |
| get_email_security_message_detectionsC | Get email security message detections |
| list_email_security_submissionsC | List email security submissions |
| list_email_security_allow_policiesC | List email security allow policies |
| get_email_security_allow_policyB | Get email security allow policy details |
| list_email_security_block_sendersC | List email security blocked senders |
| get_email_security_block_senderC | Get email security blocked sender details |
| list_email_security_domainsC | List email security domains |
| get_email_security_domainC | Get email security domain details |
| list_email_security_impersonation_registryC | List email security impersonation registry |
| list_email_security_trusted_domainsC | List email security trusted domains |
| get_email_security_phishguard_reportsC | Get email security Phishguard reports |
| list_realtime_appsC | List Realtime Kit apps |
| get_realtime_analytics_daywiseC | Get Realtime Kit daily analytics |
| list_realtime_livestreamsC | List Realtime Kit livestreams |
| get_realtime_livestreamB | Get Realtime Kit livestream details |
| list_realtime_meetingsC | List Realtime Kit meetings |
| get_realtime_meetingC | Get Realtime Kit meeting details |
| list_realtime_meeting_participantsB | List participants in a Realtime Kit meeting |
| list_realtime_presetsC | List Realtime Kit presets |
| get_realtime_presetB | Get Realtime Kit preset details |
| list_realtime_recordingsC | List Realtime Kit recordings |
| get_realtime_recordingB | Get Realtime Kit recording details |
| list_realtime_sessionsC | List Realtime Kit sessions |
| get_realtime_sessionC | Get Realtime Kit session details |
| get_realtime_session_summaryC | Get Realtime Kit session summary |
| get_realtime_session_transcriptC | Get Realtime Kit session transcript |
| list_realtime_webhooksB | List Realtime Kit webhooks |
| get_realtime_webhookC | Get Realtime Kit webhook details |
| get_zerotrust_connectivity_settingsC | Get Zero Trust connectivity settings |
| list_zerotrust_hostname_routesC | List Zero Trust hostname routes |
| get_zerotrust_hostname_routeC | Get Zero Trust hostname route details |
| list_zerotrust_subnetsC | List Zero Trust subnets |
| list_cloudforce_one_eventsC | List Cloudforce One threat events |
| get_cloudforce_one_eventC | Get Cloudforce One threat event details |
| get_cloudforce_one_events_aggregateC | Get Cloudforce One events aggregate |
| list_cloudforce_one_categoriesC | List Cloudforce One event categories |
| list_cloudforce_one_countriesC | List Cloudforce One event countries |
| list_cloudforce_one_datasetsC | List Cloudforce One datasets |
| get_cloudforce_one_datasetC | Get Cloudforce One dataset details |
| list_cloudforce_one_indicatorsC | List Cloudforce One threat indicators |
| list_cloudforce_one_indicator_typesC | List Cloudforce One indicator types |
| list_cloudforce_one_tagsC | List Cloudforce One tags |
| list_cloudforce_one_target_industriesC | List Cloudforce One target industries |
| list_cloudforce_one_queriesC | List Cloudforce One queries |
| get_cloudforce_one_queryC | Get Cloudforce One query details |
| get_cloudforce_one_requestC | Get Cloudforce One request details |
| get_cloudforce_one_requests_quotaC | Get Cloudforce One requests quota |
| list_cloudforce_one_request_typesB | List Cloudforce One request types |
| get_cloudforce_one_scans_configC | Get Cloudforce One scans configuration |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 390 tools
With 390 tools, many resource families are nearly indistinguishable from an agent's perspective, such as list_workers vs list_worker_services, list_api_shield_operations vs list_api_gateway_operations, and get_zone_setting vs get_zone_settings. The descriptions help, but the scale and overlapping naming create substantial misselection risk.
The dominant pattern is list_<plural> and get_<singular>, which is readable, but there are many deviations: collection-style get_*_rules/get_*_settings use 'get' instead of 'list', and tools like graphql_analytics, get_analytics_by_colo, and verify_token break the pattern. Overall the naming is mostly predictable but not consistently applied.
390 tools is an extreme number for an agent-facing MCP server, far beyond the 50+ threshold. Even if Cloudflare's API is broad, exposing nearly every read-only endpoint as a separate tool makes the interface overwhelming and hard to navigate efficiently.
The entire tool surface is read-only: every tool is get/list/query style, with no create, update, or delete operations for any resource. A general Cloudflare management server cannot complete common workflows like creating DNS records or updating rules, making the set severely incomplete for its implied purpose.