Cloudflare MCP server

Connect Cloudflare to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Cloudflare MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the manage r2 buckets tool in Cloudflare
  • Use the purge cache tool in Cloudflare
  • Use the manage notifications tool in Cloudflare
  • Use the manage firewall rules tool in Cloudflare
  • Use the manage pages projects tool in Cloudflare
  • Use the list workers tool in Cloudflare

Supported Tools

manage_r2_buckets

Manage R2 Buckets

List, create, get details, or delete R2 object storage buckets. R2 is Cloudflare's S3-compatible object storage with zero egress fees.

purge_cache

Purge Cache

Purge cached content for a Cloudflare zone. Supports purging everything, specific URLs, cache tags, or hostnames. Use this to force Cloudflare to re-fetch content from the origin server.

manage_notifications

Manage Notifications

List, create, or delete notification policies and webhook destinations. Notification policies define what events trigger alerts and how they are delivered. View notification history to see past alerts.

manage_firewall_rules

Manage Firewall Rules

List, create, or delete firewall rules, modern WAF custom rules, and IP access rules for a zone. Rules use Cloudflare's expression language to match requests and apply actions like block, challenge, or allow.

manage_pages

Manage Pages Projects

List, get details, or manage Cloudflare Pages projects and their deployments. View deployment history, rollback to a previous deployment, or delete deployments and projects.

list_workers

List Workers

List all Workers scripts deployed on the account. Returns script names, modification dates, and usage model for each Worker.

list_dns_records

List DNS Records

Retrieve DNS records for a Cloudflare zone. Filter by record type, name, or content to find specific records. Returns all record types including A, AAAA, CNAME, MX, TXT, NS, and more.

manage_ssl_certificates

Manage SSL/TLS Certificates

View and manage SSL/TLS certificates for a zone. List certificate packs, custom certificates, and Origin CA certificates. Update the zone's SSL/TLS encryption mode. Create or revoke Origin CA certificates.

manage_dns_record

Manage DNS Record

Create, retrieve, update, or delete a DNS record in a Cloudflare zone. Supports all record types including A, AAAA, CNAME, MX, TXT, NS, SRV, and more. Use **action** to specify the operation.

manage_kv

Manage Workers KV

Manage Workers KV (Key-Value) storage. List, create, retrieve, rename, or delete namespaces, and read/write/delete key-value pairs within a namespace.

update_zone_settings

Update Zone Settings

Get or update zone-level settings such as SSL/TLS mode, security level, caching, minification, development mode, and more. Can retrieve all current settings or update a specific one.

manage_domains

Manage Domain Registrations

List, get details, or update domain registrations managed through Cloudflare Registrar. View registration status, update auto-renew, lock, and privacy settings.

manage_zone

Manage Zone

Create or delete a domain (zone) on Cloudflare, or retrieve detailed zone information. When creating a zone, Cloudflare will attempt to automatically import existing DNS records.

query_analytics

Query Analytics

Query Cloudflare's GraphQL Analytics API for traffic, DNS, firewall, and performance data. Supports flexible GraphQL queries to retrieve analytics for zones and accounts.

manage_stream

Manage Stream Videos

List, view, or delete Cloudflare Stream videos. Also manage live inputs for live streaming. Stream provides video encoding, storage, and delivery at the edge.

list_zones

List Zones

List all domains (zones) on the Cloudflare account. Optionally filter by domain name or status. Returns zone details including ID, name, status, nameservers, and plan information.

manage_worker_routes

Manage Worker Routes

List, create, or delete Worker routes for a zone. Worker routes map URL patterns to Workers scripts, determining which requests are handled by which Worker.

manage_account

Manage Account

View account details, list account members and roles, add or remove members, and view audit logs. Manage team access to your Cloudflare account.

manage_load_balancers

Manage Load Balancers

List, create, get, or delete load balancers for a zone. Also manage origin pools and health monitors at the account level. Load balancers distribute traffic across origin servers.

Connect Cloudflare to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Cloudflare in Metorial. In your Metorial portal, enable the Cloudflare MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Cloudflare tools.

Run Cloudflare through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Cloudflare and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Cloudflare tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Cloudflare

Google Sheets

Create, read, and update spreadsheets and their cell data. Read and write values to individual cells, ranges, or multiple ranges using A1 notation or named ranges. Apply cell formatting including text styles, backgrounds, borders, number formats, and conditional formatting. Manage sheets (tabs) within a spreadsheet—add, delete, copy, rename, and reorder them. Create and manage embedded charts, pivot tables, filter views, data validation rules, protected ranges, named ranges, and merged cells. Perform batch operations to apply multiple updates atomically.

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Google Drive

Upload, download, create, copy, move, rename, trash, and permanently delete files and folders in Google Drive. Search for files using complex queries filtering by name, MIME type, owner, modification date, labels, and other metadata. Share files and folders with specific users, groups, or domains with role-based permissions (owner, writer, commenter, reader). Manage shared drives and their members. Export Google Workspace files (Docs, Sheets, Slides) to standard formats like PDF, DOCX, and XLSX. Track file revision history and restore earlier versions. Create, read, update, and delete threaded comments and replies on files. Read label definitions and search files by label. Browse the Drive apps installed for your account. Store app-specific data in a hidden per-user folder.

Technical notes for Cloudflare

Manage internet infrastructure including DNS records, domains, and zone settings. Deploy and configure serverless Workers scripts, R2 object storage buckets, and Pages deployments. Configure security rules including WAF, firewall rules, rate limiting, DDoS protection, and IP access controls. Manage SSL/TLS certificates, load balancers, origin pools, and health monitors. Upload and deliver video content via Cloudflare Stream. Access traffic, DNS, and security analytics via GraphQL. Configure Zero Trust Access applications, Gateway policies, and Tunnel connections. Set up alerting and webhook notifications for security events, health checks, certificate status, and usage thresholds. Register and manage domains, account members, roles, and API tokens.

Frequently asked questions

Common questions about connecting Cloudflare to AI agents with Metorial.

  1. How many tools does the Cloudflare MCP server have?
    The Cloudflare MCP server exposes 19 tools, including Manage R2 Buckets, Purge Cache, Manage Notifications. Each one is governed and traced through Metorial.
  2. Cloudflare exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Cloudflare MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Cloudflare and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Cloudflare MCP server yourself or use the hosted gateway.

Connect Cloudflare to production AI agents

See how Metorial gives your team governed access to Cloudflare, with tracing and security controls built in.