crunchtools avatar

MCP Cloudflare

crunchtools/mcp-cloudflare

This gives Claude direct control over your Cloudflare infrastructure through the official API. You get 18 tools covering DNS records (create, update, delete A/AAAA/CNAME/MX/TXT), transform rules for header manipulation and URL rewrites, page rules for redirects and cache settings, and cache purging by URL, tag, or prefix. Security is front and center: your API token stays local via stdio transport, never touches third parties, and the codebase includes threat modeling docs and automated CVE scanning. Ships as a PyPI package or container built on minimal Hummingbird images. Reach for this when you need to let Claude manage your DNS, modify HTTP headers, or handle cache invalidation without leaving the terminal.

tools
26
transport
STDIO
last updated
Mar 2, 2026

Tools

26 tools

Public tool metadata for what this MCP can expose to an agent.

list_zonesList all zones accessible by your API token

List all zones accessible by your API token

No parameter schema in public metadata yet.

get_zoneGet zone details by ID or domain name

Get zone details by ID or domain name

No parameter schema in public metadata yet.

list_dns_recordsList DNS records with filtering

List DNS records with filtering

No parameter schema in public metadata yet.

get_dns_recordGet a single DNS record

Get a single DNS record

No parameter schema in public metadata yet.

create_dns_recordCreate A, AAAA, CNAME, MX, TXT, NS, SRV, CAA records

Create A, AAAA, CNAME, MX, TXT, NS, SRV, CAA records

No parameter schema in public metadata yet.

update_dns_recordUpdate existing records

Update existing records

No parameter schema in public metadata yet.

delete_dns_recordDelete records

Delete records

No parameter schema in public metadata yet.

list_request_header_rulesModify request headers

Modify request headers

No parameter schema in public metadata yet.

set_request_header_rulesModify request headers

Modify request headers

No parameter schema in public metadata yet.

list_response_header_rulesModify response headers

Modify response headers

No parameter schema in public metadata yet.

set_response_header_rulesModify response headers

Modify response headers

No parameter schema in public metadata yet.

list_url_rewrite_rulesURL path/query rewrites

URL path/query rewrites

No parameter schema in public metadata yet.

set_url_rewrite_rulesURL path/query rewrites

URL path/query rewrites

No parameter schema in public metadata yet.

list_page_rulesList all page rules

List all page rules

No parameter schema in public metadata yet.

create_page_ruleCreate redirects, cache settings, SSL modes

Create redirects, cache settings, SSL modes

No parameter schema in public metadata yet.

update_page_ruleModify existing rules

Modify existing rules

No parameter schema in public metadata yet.

delete_page_ruleRemove rules

Remove rules

No parameter schema in public metadata yet.

get_access_organizationThe Zero Trust organization and its team login domain

The Zero Trust organization and its team login domain

No parameter schema in public metadata yet.

list_access_appsApplications on a zone, with their audience tags

Applications on a zone, with their audience tags

No parameter schema in public metadata yet.

get_access_appApplications on a zone, with their audience tags

Applications on a zone, with their audience tags

No parameter schema in public metadata yet.

create_access_appPut a hostname behind an Access login, or take it out

Put a hostname behind an Access login, or take it out

No parameter schema in public metadata yet.

delete_access_appPut a hostname behind an Access login, or take it out

Put a hostname behind an Access login, or take it out

No parameter schema in public metadata yet.

list_access_policiesWho an application admits

Who an application admits

No parameter schema in public metadata yet.

create_access_policyAllow, deny or bypass by email, email domain, IP or everyone

Allow, deny or bypass by email, email domain, IP or everyone

No parameter schema in public metadata yet.

delete_access_policyAllow, deny or bypass by email, email domain, IP or everyone

Allow, deny or bypass by email, email domain, IP or everyone

No parameter schema in public metadata yet.

purge_cachePurge by URL, tag, host, prefix, or everything

Purge by URL, tag, host, prefix, or everything

No parameter schema in public metadata yet.

Sponsors

Readme

MCP Cloudflare CrunchTools

A secure MCP (Model Context Protocol) server for Cloudflare DNS, Transform Rules, Page Rules, and cache management.

Overview

This MCP server is designed to be:

  • Secure by default - Threat modeling, input validation, and token protection
  • No third-party services - Runs locally via stdio, your API token never leaves your machine
  • Cross-platform - Works on Linux, macOS, and Windows
  • Automatically updated - GitHub Actions monitor for CVEs and update dependencies
  • Containerized - Available at quay.io/crunchtools/mcp-cloudflare built on Hummingbird Python base image

Naming Convention

ComponentName
GitHub repocrunchtools/mcp-cloudflare
Containerquay.io/crunchtools/mcp-cloudflare
Python package (PyPI)mcp-cloudflare-crunchtools
CLI commandmcp-cloudflare-crunchtools
Module importmcp_cloudflare_crunchtools

Why Hummingbird?


View the full README on GitHub

Details

Repository
github.com/crunchtools/mcp-cloudflare
Category
Cloud & Infrastructure
Package
mcp-cloudflare-crunchtools
Transport
STDIO
Registry
MCP registry, active

More from crunchtools

Related Cloud & Infrastructure MCP servers

View all
1itunified-io avatarCloudflare MCP Serveritunified-io/mcp-cloudflareCloudflare MCP Server — 84 tools for DNS, Tunnels, WAF, Zero Trust, R2, KV & Workers0stars
2pipeworx-io avatarCloudflare Radarpipeworx-io/mcp-cloudflare-radarCloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality)0stars
3musaddiq-dev avatarAWS CLI MCP Servermusaddiq-dev/aws-cli-mcp-serverPython MCP server for AWS CLI inspection and operations0stars
4vercel avatarNext Devtools Mcpvercel/next-devtools-mcpNext.js development tools MCP server with stdio transport765stars
5coleam00 avatarCloudflarecoleam00/remote-mcp-server-with-authTemplate for a remote MCP server with GitHub OAuth - following best practices for building MCP servers so you can take this as a starting point for any MCP serv294stars
6eniayomi avatarGCPeniayomi/gcp-mcpA Model Context Protocol (MCP) server that enables AI assistants like Claude to interact with your Google Cloud Platform environment. This allows for natural la198stars