MCP Cloudflare DNS Server

A Model Context Protocol server implementation for Cloudflare DNS that enables AI agents to manage DNS records for your domains.

Fork of gilberth/mcp-cloudflare by TheLord. Original work is credited and this fork is distributed under the same MIT license.

Features

• List DNS records - View all or filtered DNS records

• Create DNS records - Add new A, AAAA, CNAME, MX, TXT, and other record types

• Update DNS records - Modify existing records

• Delete DNS records - Remove unwanted records

• Full Cloudflare API support - Supports proxying, TTL, priority settings

Related MCP server: cloudflare-api-mcp

Setup

1. Get Cloudflare API Token

1. Go to Cloudflare API Tokens

2. Click "Create Token"

3. Use the "Edit zone DNS" template or create a custom token with:

   • Zone:Read (to use list_zones)

   • DNS:Edit (to create, update, and delete DNS records)

4. Copy your API token

2. Get Zone ID

1. Go to your domain in the Cloudflare Dashboard

2. Copy the Zone ID from the right sidebar

Usage

Environment Variables

Create a .env file:

CLOUDFLARE_API_TOKEN=your-api-token-here
CLOUDFLARE_ZONE_ID=your-zone-id-here  # Optional: default zone when zone_id not specified per-tool
CLOUDFLARE_EMAIL=your-email@example.com  # Optional, only for legacy API keys

Claude Desktop Configuration

{
  "mcpServers": {
    "cloudflare": {
      "command": "npx",
      "args": ["-y", "@neverprepared/mcp-cloudflare-dns"],
      "env": {
        "CLOUDFLARE_API_TOKEN": "your-api-token"
      }
    }
  }
}

Run locally

npx -y @neverprepared/mcp-cloudflare-dns

Available Tools

list_zones

List all Cloudflare zones (domains) on the account. Use this to discover zone IDs when working with a domain by name.

list_dns_records

List all DNS records for a zone, with optional filters for record name and type.

get_dns_record

Get detailed information about a specific DNS record by ID.

create_dns_record

Create a new DNS record with specified type, name, and content. SRV and CAA records accept a structured data object instead of a content string.

update_dns_record

Update an existing DNS record by ID. All fields except recordId are optional.

delete_dns_record

Delete a DNS record by ID.

export_dns_zone

Export all DNS records for a zone as a JSON array. Useful for backups and bulk operations.

import_dns_zone

Bulk-import DNS records from a JSON array. Returns a success/failure summary with per-record partial failure handling.

Supported DNS Record Types

• A (IPv4 address)

• AAAA (IPv6 address)

• CNAME (Canonical name)

• MX (Mail exchange)

• TXT (Text)

• NS (Name server)

• SRV (Service)

• CAA (Certificate Authority Authorization)

• PTR (Pointer)

Security

• API tokens are never logged or exposed

• DNS record content is treated as untrusted external data to guard against prompt injection

• Record IDs are validated against Cloudflare's expected format before use

• API error details are sanitized before being returned to the calling agent

• Uses official Cloudflare API with secure authentication

• Supports scoped API tokens for minimal permissions

License

MIT — see LICENSE.

Original work copyright TheLord (gilberth/mcp-cloudflare).