Cloudflare MCP Server
Manage Cloudflare Workers, logs, and services using natural language prompts.
Data last scanned yesterday · Reviewed 2 months ago
Overview
Cloudflare MCP Server acts as an interface between your AI assistant and your Cloudflare account. It includes multiple specialized servers for tasks such as retrieving documentation, managing Workers builds, monitoring observability logs, and handling browser rendering requests. By connecting this server to an MCP-compliant client, you can automate routine tasks across your application development, security, and performance infrastructure. It supports streamable HTTP transport to interact with various Cloudflare service APIs directly from your AI agent.
Our verdict
With a security score of 53/100, this server is classified as high risk. This rating is largely due to the lack of an authentication method, meaning any user with access to the configuration can execute actions on your Cloudflare account. Additionally, the server does not feature a read-only mode, providing full write access by default. It is recommended for users who are comfortable with these security trade-offs or those operating in non-sensitive testing environments.
- Maintained directly by Cloudflare.
- Zero direct dependencies reduce supply-chain surface area.
- Comprehensive suite of tools for Workers and observability.
- Requires manual authentication management due to lack of OAuth.
- Lacks granular access controls or read-only modes.
- High risk profile caused by unauthenticated configuration access.
Setup
{
"mcpServers": {
"mcp-server-cloudflare": {
"args": [
"-y",
"@cloudflare/mcp-server-cloudflare"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What is the difference between the Code Mode server and the domain-specific servers?
The Code Mode server offers broad API coverage and general-purpose tools, while the domain-specific servers in this repository provide curated, purpose-built tools for individual Cloudflare products.
›How do these servers communicate with my MCP client?
Every server uses a stateless Streamable HTTP handler at the /mcp endpoint, with /sse provided as a URL compatibility alias.
›Do these servers maintain an active session state?
No, the servers use a request-scoped implementation without an MCP protocol session, though application-specific data like OAuth credentials or caches are handled separately where required.
Alternatives
Changelog
- Fixworkers-observability@0.5.3
2026-07-30
- Fixworkers-builds@0.2.3
2026-07-30
- Fixworkers-bindings@0.5.3
2026-07-30
- Fixstack-mcp@0.1.3
2026-07-30
- Fixstack-mcp@0.1.2
2026-07-30
- Fixstack-mcp@0.1.1
2026-07-30
- Fixlogpush@0.2.3
2026-07-30
- Fixgraphql-mcp-server@0.2.4
2026-07-30
- Fixdocs-ai-search@0.4.11
2026-07-30
- Fixdns-analytics@0.2.3
2026-07-30
Badge
Maintain this server? Add the live badge to your README.