Cloudflare MCP
Manage Cloudflare zones, DNS records, Workers, Pages deployments, and CDN cache purges.
Overview
| Catalog ID | mcp-cloudflare |
| Category | cloud |
| Auth method | API key |
| Blast radius | moderate |
| Trust | Verified — published by cendriix |
| Version | 1.0.0 |
| Regions | us-east-1, eu-west-1 |
Tools
| Tool | Description |
|---|---|
purge_cache | Purge cache for a zone. |
list_zones | List Cloudflare zones. |
create_dns_record | Create a DNS record. |
deploy_worker | Deploy a Cloudflare Worker. |
get_analytics | Get zone analytics. |
Tool parameters
purge_cache
Purge cache for a zone.
| Parameter | Type | Description | |
|---|---|---|---|
zone_id | string | required | Zone ID |
purge_everything | boolean | optional | Purge all cached content |
files | array | optional | Specific URLs to purge |
list_zones
List Cloudflare zones.
| Parameter | Type | Description | |
|---|---|---|---|
name | string | optional | Filter by domain name |
status | string | optional | Filter by status |
create_dns_record
Create a DNS record.
| Parameter | Type | Description | |
|---|---|---|---|
zone_id | string | required | Zone ID |
type | string | required | Record type |
name | string | required | DNS name |
content | string | required | Record content |
proxied | boolean | optional | Enable Cloudflare proxy |
deploy_worker
Deploy a Cloudflare Worker.
| Parameter | Type | Description | |
|---|---|---|---|
name | string | required | Worker name |
script | string | required | Worker script content |
routes | array | optional | Route patterns |
get_analytics
Get zone analytics.
| Parameter | Type | Description | |
|---|---|---|---|
zone_id | string | required | Zone ID |
since | string | optional | Start time (ISO 8601) |
until | string | optional | End time (ISO 8601) |
Installing
- In Cendriix, go to Settings → MCPs
- Find Cloudflare and click Install
- Paste your API key after installing. It is validated, then encrypted at rest in a secrets vault scoped to your tenant.
- Click Test Connection to run a health check and list available tools
Authentication. Paste your API key after installing. It is validated, then encrypted at rest in a secrets vault scoped to your tenant.
Blast radius
This MCP is classified moderate. This MCP can create and update records in the connected service, but cannot delete infrastructure.
Every tool invocation is recorded in your Audit Log. You can remove this MCP at any time from Settings → MCPs, which revokes tool access immediately.
Further reading
- MCP Marketplace — browse and install MCPs
- Policies & Guardrails — approval gates and blast radius
- Audit Log — review tool invocations
Last updated on