Model Context Protocol moderate risk

Cloudflare

Cloudflare MCP servers provide natural language access to Cloudflare services for configuration, data analysis, and automation, using the MCP protocol.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwriteexec

Quickstart

Config

{
	"mcpServers": {
		"cloudflare-observability": {
			"command": "npx",
			"args": ["mcp-remote", "https://observability.mcp.cloudflare.com/mcp"]
		},
		"cloudflare-bindings": {
			"command": "npx",
			"args": ["mcp-remote", "https://bindings.mcp.cloudflare.com/mcp"]
		}
	}
}

Exposed MCP Tools (15)

safe

Documentation server

Provides up-to-date reference information on Cloudflare.

Read-only access to documentation.

moderate

Workers Bindings server

Allows building Workers applications with storage, AI, and compute primitives.

Involves creating and configuring Workers resources.

safe

Workers Builds server

Provides insights and management capabilities for Cloudflare Workers Builds.

Primarily read-only access to build information.

safe

Observability server

Enables debugging and insight into application logs and analytics.

Primarily read-only access to logs and analytics data.

safe

Radar server

Provides global Internet traffic insights and trends.

Read-only access to aggregated traffic data.

moderate

Container server

Spins up a sandbox development environment.

Creates and manages containerized environments.

safe

Browser rendering server

Fetches web pages, converts them to markdown, and takes screenshots.

Primarily read-only access to web content.

safe

Logpush server

Provides quick summaries for Logpush job health.

Read-only access to Logpush job status.

safe

AI Gateway server

Searches logs and retrieves details about prompts and responses related to AI Gateway.

Primarily read-only access to AI Gateway logs.

safe

AutoRAG server

Lists and searches documents on AutoRAGs.

Read-only access to AutoRAG documents.

safe

Audit Logs server

Queries audit logs and generates reports for review.

Read-only access to audit logs.

moderate

DNS Analytics server

Optimizes DNS performance and debugs issues based on current setup.

May involve suggesting DNS configuration changes.

safe

Digital Experience Monitoring server

Provides quick insights on critical applications for an organization.

Read-only access to application monitoring data.

safe

Cloudflare One CASB server

Identifies security misconfigurations for SaaS applications.

Read-only access to SaaS application configuration data.

safe

GraphQL server

Retrieves analytics data using Cloudflare’s GraphQL API.

Read-only access to analytics data.

Safety Assessment

The Cloudflare MCP server's safety depends heavily on the specific server being used and the API token's permissions. Read-only servers are generally safe, while those allowing write operations require careful permission management. Over-scoping API tokens poses the greatest risk.

Access is controlled via API tokens with specific scopes.
Many tools are read-only, limiting potential damage.
The MCP protocol provides a standardized interface, potentially aiding security reviews.
Individual servers are focused on specific Cloudflare services, limiting blast radius.

Some servers allow write operations, potentially leading to misconfiguration.
Improperly configured API tokens could grant excessive permissions.
Reliance on external MCP clients introduces a dependency and potential vulnerability.
Some features may require paid plans, potentially leading to unexpected costs if not managed.