
MCP Cloudflare
This gives Claude direct control over your Cloudflare infrastructure through the official API. You get 18 tools covering DNS records (create, update, delete A/AAAA/CNAME/MX/TXT), transform rules for header manipulation and URL rewrites, page rules for redirects and cache settings, and cache purging by URL, tag, or prefix. Security is front and center: your API token stays local via stdio transport, never touches third parties, and the codebase includes threat modeling docs and automated CVE scanning. Ships as a PyPI package or container built on minimal Hummingbird images. Reach for this when you need to let Claude manage your DNS, modify HTTP headers, or handle cache invalidation without leaving the terminal.
- tools
- 26
- transport
- STDIO
- last updated
- Mar 2, 2026
Tools
26 toolsPublic tool metadata for what this MCP can expose to an agent.
list_zonesList all zones accessible by your API token
List all zones accessible by your API token
No parameter schema in public metadata yet.
get_zoneGet zone details by ID or domain name
Get zone details by ID or domain name
No parameter schema in public metadata yet.
list_dns_recordsList DNS records with filtering
List DNS records with filtering
No parameter schema in public metadata yet.
get_dns_recordGet a single DNS record
Get a single DNS record
No parameter schema in public metadata yet.
create_dns_recordCreate A, AAAA, CNAME, MX, TXT, NS, SRV, CAA records
Create A, AAAA, CNAME, MX, TXT, NS, SRV, CAA records
No parameter schema in public metadata yet.
update_dns_recordUpdate existing records
Update existing records
No parameter schema in public metadata yet.
delete_dns_recordDelete records
Delete records
No parameter schema in public metadata yet.
list_request_header_rulesModify request headers
Modify request headers
No parameter schema in public metadata yet.
set_request_header_rulesModify request headers
Modify request headers
No parameter schema in public metadata yet.
list_response_header_rulesModify response headers
Modify response headers
No parameter schema in public metadata yet.
set_response_header_rulesModify response headers
Modify response headers
No parameter schema in public metadata yet.
list_url_rewrite_rulesURL path/query rewrites
URL path/query rewrites
No parameter schema in public metadata yet.
set_url_rewrite_rulesURL path/query rewrites
URL path/query rewrites
No parameter schema in public metadata yet.
list_page_rulesList all page rules
List all page rules
No parameter schema in public metadata yet.
create_page_ruleCreate redirects, cache settings, SSL modes
Create redirects, cache settings, SSL modes
No parameter schema in public metadata yet.
update_page_ruleModify existing rules
Modify existing rules
No parameter schema in public metadata yet.
delete_page_ruleRemove rules
Remove rules
No parameter schema in public metadata yet.
get_access_organizationThe Zero Trust organization and its team login domain
The Zero Trust organization and its team login domain
No parameter schema in public metadata yet.
list_access_appsApplications on a zone, with their audience tags
Applications on a zone, with their audience tags
No parameter schema in public metadata yet.
get_access_appApplications on a zone, with their audience tags
Applications on a zone, with their audience tags
No parameter schema in public metadata yet.
create_access_appPut a hostname behind an Access login, or take it out
Put a hostname behind an Access login, or take it out
No parameter schema in public metadata yet.
delete_access_appPut a hostname behind an Access login, or take it out
Put a hostname behind an Access login, or take it out
No parameter schema in public metadata yet.
list_access_policiesWho an application admits
Who an application admits
No parameter schema in public metadata yet.
create_access_policyAllow, deny or bypass by email, email domain, IP or everyone
Allow, deny or bypass by email, email domain, IP or everyone
No parameter schema in public metadata yet.
delete_access_policyAllow, deny or bypass by email, email domain, IP or everyone
Allow, deny or bypass by email, email domain, IP or everyone
No parameter schema in public metadata yet.
purge_cachePurge by URL, tag, host, prefix, or everything
Purge by URL, tag, host, prefix, or everything
No parameter schema in public metadata yet.
Sponsors
Readme
MCP Cloudflare CrunchTools
A secure MCP (Model Context Protocol) server for Cloudflare DNS, Transform Rules, Page Rules, and cache management.
Overview
This MCP server is designed to be:
- Secure by default - Threat modeling, input validation, and token protection
- No third-party services - Runs locally via stdio, your API token never leaves your machine
- Cross-platform - Works on Linux, macOS, and Windows
- Automatically updated - GitHub Actions monitor for CVEs and update dependencies
- Containerized - Available at
quay.io/crunchtools/mcp-cloudflarebuilt on Hummingbird Python base image
Naming Convention
| Component | Name |
|---|---|
| GitHub repo | crunchtools/mcp-cloudflare |
| Container | quay.io/crunchtools/mcp-cloudflare |
| Python package (PyPI) | mcp-cloudflare-crunchtools |
| CLI command | mcp-cloudflare-crunchtools |
| Module import | mcp_cloudflare_crunchtools |
Why Hummingbird?
Details
- Repository
- github.com/crunchtools/mcp-cloudflare
- Category
- Cloud & Infrastructure
- Package
mcp-cloudflare-crunchtools- Transport
- STDIO
- Registry
- MCP registry, active