--- title: "Cloudflare API MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/cloudflare-code/ description: "Lets an assistant discover Cloudflare API endpoints and execute API calls through code, within the granted Cloudflare permissions." --- # Cloudflare API MCP: review, setup & limitations · Undominated.ai > Lets an assistant discover Cloudflare API endpoints and execute API calls through code, within the granted Cloudflare permissions. [← Explore all mcp servers](/mcp-servers/) CLOUD OPERATIONS / Cloudflare # Cloudflare API MCP Lets an assistant discover Cloudflare API endpoints and execute API calls through code, within the granted Cloudflare permissions. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 5 linked sources Publisher Cloudflare Licence Apache-2.0 ↗ Revision 76b19f116e53 Read what was—and wasn’t—checked ↓ “MCP server for the entire Cloudflare API using codemode” Cloudflare · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - API discovery and execution share one source-backed workflow, including documentation lookup. - OAuth and API-token paths allow interactive and automated deployments with explicit Cloudflare grants. ### A good fit for - Carrying out a reviewed sequence of Cloudflare account operations from an MCP client. ### Weigh up before choosing - The execute tool can change Cloudflare resources; this is a broad account-control surface. - Claims about token savings are upstream claims and were not benchmarked in this review. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md (installation, capability and permission sections) - package.json - src/index.ts - LICENSE - src/mcp-handler.ts ### Our findings - The entrypoint wraps the MCP handler in an OAuth provider and also supports externally supplied Cloudflare credentials. - The documented execute tool runs JavaScript that calls cloudflare.request; account/token rights are the relevant authority boundary. ### Not established by this review - Server startup, authentication and tool execution were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. Upstream setup instructions ↗ - Add the documented remote configuration and complete Cloudflare OAuth. - Select only the necessary account permissions; use the API-token path only with a suitably scoped token. ### Before you start - A Cloudflare account and a remote-capable MCP client. ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "cloudflare-api": { "type": "http", "url": "https://mcp.cloudflare.com/mcp" } } } Copy configuration ↗ ### Compatibility An MCP client supporting Streamable HTTP. · A Cloudflare account and a remote-capable MCP client. · Configuration example follows the official mcpServers form; use your client’s remote-server schema. ### Implementation TypeScript ### Transports Streamable HTTP ### Cloud operations / Remote service - Searches Cloudflare documentation/API schemas. - Executes API requests that can create, modify or delete permitted Cloudflare resources. ### Cost model Cloudflare account services and resources created or used through API calls determine cost. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Official documentation ↗ Checked 2026-09-21 https://github.com/cloudflare/mcp/blob/76b19f116e53b1d6ad1c8b2c07d0d2e91a37abf1/README.md Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports - Applicable source licence ↗ Checked 2026-09-21 https://github.com/cloudflare/mcp/blob/76b19f116e53b1d6ad1c8b2c07d0d2e91a37abf1/LICENSE Supports: license - Implementation: package.json ↗ Checked 2026-09-21 https://github.com/cloudflare/mcp/blob/76b19f116e53b1d6ad1c8b2c07d0d2e91a37abf1/package.json Supports: language, review - Implementation: src/index.ts ↗ Checked 2026-09-21 https://github.com/cloudflare/mcp/blob/76b19f116e53b1d6ad1c8b2c07d0d2e91a37abf1/src/index.ts Supports: language, review - Implementation: src/mcp-handler.ts ↗ Checked 2026-09-21 https://github.com/cloudflare/mcp/blob/76b19f116e53b1d6ad1c8b2c07d0d2e91a37abf1/src/mcp-handler.ts Supports: review, transports KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Azure MCP Server ↗ Brings Azure service tools into one MCP server, with namespace selection and a read-only option for scoped use.](/mcp-servers/azure/)[### Fly.io flyctl MCP ↗ Manage Fly apps, Machines, volumes, secrets and operational status through the MCP server built into flyctl.](/mcp-servers/fly/)[### Netlify MCP ↗ Connect an agent to Netlify project, deployment and environment-variable operations through the hosted server.](/mcp-servers/netlify/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)