"Cloudflare Workers" matching MCP tools:

• delete_cloudflare_recordA

  Porkbun (official)

  Delete a DNS record from a domain's Cloudflare zone. This changes live DNS for a domain Cloudflare is authoritative for, so confirm with the user first — deleting the wrong record can take a site or its mail offline. Get `record_id` from get_cloudflare_records. The record is read before deletion, so the response reports exactly what was removed. Supports dry_run.

  Connector

  Destructive

  OAuth

• get_vendor_statusA

  Merlonix MonitoringA

  Get the current status plus 30-day status history of one monitored vendor by slug (e.g. "cloudflare"). Use list_vendor_status to discover valid slugs.

  ConnectorNo auth

• us_treasury_yieldsA

  MCPFax Macro & Market IntelligenceA

  US Treasury constant-maturity yields for the 2, 10 and 30 year tenors in percent, the computed 10s2s curve spread with an explicit inverted flag, and the 30-year fixed mortgage rate. IMPORTANT: this is a STORED SNAPSHOT, not a live read — the FRED host blocks Cloudflare Workers (HTTP 520), so it is refreshed out of band. Every response carries `snapshot.captured_at` and `snapshot.age_hours`; check them before trading or quoting off these numbers. Costs $0.01 USDC per call via x402 on Base; an unpaid call returns the payment challenge instead of data, and a call that returns no data is never settled so it costs nothing. Equivalent HTTP route: GET /rates.

  ConnectorNo auth

• get_docsA

  chorus.hostA

  Return the full beacon.host documentation as Markdown (the same text as https://beacon.host/skill.md): the REST API, the beacon CLI, accounts and API keys, claiming sites, password protection, and Workers, which run server-side JavaScript at <slug>.worker.beacon.host for APIs and webhook receivers (GitHub, Stripe), including Hono apps, with no Cloudflare account needed. Read it before building a backend, when the user asks about accounts or limits, or when a task needs something publish_site can't do. Setup for every MCP client: https://beacon.host/mcp

  ConnectorNo auth

• drive_sandbox_readA

  AgentDriveA

  [EXPERIMENTAL] Read a file from the per-workspace sandbox filesystem (build artifacts, test output, logs). Requires Cloudflare Containers; degrades to 503 otherwise.

  ConnectorNo auth

• get_function_logsA

  shiplyA

  Read recent runtime logs for a site's per-site Worker (console output, request summaries, exceptions) from Cloudflare Workers Observability — 7-day retention, newest first. Use this to debug a deployed function: each event has timestamp, level, message, outcome, statusCode, requestId, and CPU/wall time. Also returns a CF dashboard deep-link.

  ConnectorNo auth

• read_pageA

  Black Label Operator Website MCPA

  Read one https://operator.blacklabelbots.com page as Markdown (Cloudflare Markdown for Agents) or stripped text, up to 40,000 characters.

  ConnectorNo auth

• rollback_cloudflare_domainA

  Porkbun (official)

  UNDO a completed Cloudflare move: point the domain's nameservers back at Porkbun, restoring the DNS Porkbun still holds. This changes authoritative DNS for a live domain, so confirm with the user first. The Cloudflare zone is deliberately LEFT IN PLACE — deleting a zone inside the customer's own Cloudflare account is their call. Fails if Porkbun never moved the domain, it is already back on Porkbun nameservers, or it is being worked on right now.

  Connector

  Destructive

  OAuth

• set_cloudflare_zone_settingsA

  Porkbun (official)

  Change Cloudflare zone settings for a moved domain. Only an allowlist is editable (ssl, always_use_https, automatic_https_rewrites, min_tls_version, development_mode, cache_level) — WAF/firewall/security controls are deliberately not exposed. Prefer ssl `full` over `flexible`: `flexible` makes Cloudflare fetch the origin over plain HTTP, a downgrade the visitor cannot see. CLOUDFLARE_REAUTHORIZE_REQUIRED means the stored authorization lacks this permission — surface the connectUrl and ask the customer to reconnect. Supports dry_run.

  Connector

  Destructive

  OAuth

• read_pageA

  Black Label Continuum Website MCPA

  Read one https://continuum.blacklabelbots.com page as Markdown (Cloudflare Markdown for Agents) or stripped text, up to 40,000 characters.

  ConnectorNo auth

• list_cloudflare_inventoryA

  Porkbun (official)

  List every domain in the account with its Cloudflare eligibility: `state` is eligible / warn / blocked / connected / inprogress, each with a human-readable reason (DNSSEC live, custom nameservers, uses Porkbun hosting, etc). Read this BEFORE queueing so you can tell the user what will move and what won't. Works even when the Cloudflare account isn't connected yet, so you can plan while the user authorizes.

  ConnectorOAuth

• get_cloudflare_recordsA

  Porkbun (official)

  List a domain's LIVE DNS records as Cloudflare holds them, each with its orange-cloud (`proxied`) state and whether it is `proxiable` at all. Once a domain has moved to Cloudflare THIS is the authoritative record set — list_dns_records reads the Porkbun zone, which is no longer answering queries for it. Returns ZONE_NOT_READY if the zone does not exist yet.

  ConnectorOAuth

• get_cloudflare_zone_settingsA

  Porkbun (official)

  Read the Cloudflare zone settings that matter after a move: ssl mode, always_use_https, automatic_https_rewrites, min_tls_version, development_mode, cache_level. Warns when SSL mode is `off` or `flexible`, which means Cloudflare fetches the origin over plain HTTP while visitors still see a padlock. If this returns CLOUDFLARE_REAUTHORIZE_REQUIRED the customer's Cloudflare connection predates this permission — show them the connectUrl and ask them to reconnect (one click; domains already moved are unaffected).

  ConnectorOAuth

• get_asnA

  IP Address APIA

  The caller's network ASN and organization, as seen by Cloudflare.

  ConnectorNo auth

• get_headersA

  IP Address APIA

  The caller's HTTP request headers, echoed back (proxy and Cloudflare headers filtered out).

  ConnectorNo auth

• reschedule_chain_handoffA

  MundaneA

  Give a handoff a new window (and area) when it failed -- missed, a no-show, a refused item, a locked code -- or the workers could not agree a time. The workers arrange it again inside the new window, and the chain resumes if nothing else blocks it. Not for a handoff already agreed.

  ConnectorNo auth

• create_cloudflare_recordA

  Porkbun (official)

  Create a DNS record in a domain's Cloudflare zone. IMPORTANT: for a domain that has been moved to Cloudflare this is the tool that changes what actually resolves — create_dns_record writes Porkbun's zone, which no longer answers for it. `name` accepts "@" for the apex or a bare label like "www". `ttl: 1` means Cloudflare-automatic. MX requires `priority`. `proxied` (orange cloud) applies to A/AAAA/CNAME only. Record types Cloudflare models as structured objects (SRV, CAA, …) need a `data` object instead of `content`. Supports dry_run.

  ConnectorOAuth

• bgp_leaksA

  Cloudflare RadarA

  Recent BGP route-leak events detected by Cloudflare. Returns leaker AS, victim AS, originated prefixes, start/end times.

  ConnectorNo auth

• dns_lookupA

  domain-intelA

  Resolve DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA) for a domain using Cloudflare DoH.

  ConnectorNo auth

• list_diem_workersA

  DIEM Agent WorkersA

  List bounded x402-paid workers, exact USDC prices, schemas, limits, and endpoints. This tool is free.

  ConnectorNo auth

• tascan_create_zoneA

  TaScanA

  Create a geofenced work zone. Delivery zones route workers who open the project Site Gate (geo.html?project=...) to this zone's task list when GPS places them inside the radius. Set enforce_on_list=true to zone-lock the task list — workers cannot start it from outside the zone.

  ConnectorNo auth