Cloudflare MCP Server
Manage Cloudflare Workers, logs, and services using natural language prompts.
Data last scanned today · Reviewed yesterday
Overview
Cloudflare MCP Server acts as an interface between your AI assistant and your Cloudflare account. It includes multiple specialized servers for tasks such as retrieving documentation, managing Workers builds, monitoring observability logs, and handling browser rendering requests. By connecting this server to an MCP-compliant client, you can automate routine tasks across your application development, security, and performance infrastructure. It supports streamable HTTP transport to interact with various Cloudflare service APIs directly from your AI agent.
Our verdict
With a security score of 53/100, this server is classified as high risk. This rating is largely due to the lack of an authentication method, meaning any user with access to the configuration can execute actions on your Cloudflare account. Additionally, the server does not feature a read-only mode, providing full write access by default. It is recommended for users who are comfortable with these security trade-offs or those operating in non-sensitive testing environments.
- Maintained directly by Cloudflare.
- Zero direct dependencies reduce supply-chain surface area.
- Comprehensive suite of tools for Workers and observability.
- Requires manual authentication management due to lack of OAuth.
- Lacks granular access controls or read-only modes.
- High risk profile caused by unauthenticated configuration access.
Setup
{
"mcpServers": {
"mcp-server-cloudflare": {
"args": [
"-y",
"@cloudflare/mcp-server-cloudflare"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Alternatives
Badge
Maintain this server? Add the live badge to your README.