Cloudflare MCP Server

Name: Cloudflare MCP Server
Author: itunified-io

by itunified-iocommunityv2026.4.10

The mcp-cloudflare server manages DNS, zones, tunnels, WAF, Zero Trust, and security using the Cloudflare API v4 without SSH or shell execution.

From the registry: Cloudflare MCP Server — 84 tools for DNS, Tunnels, WAF, Zero Trust, R2, KV & Workers

GitHub Repository

Install & configure

Prerequisites

required
Node.js 20+
Node.js 20 or higher

required

Clone and build

Clone the repo, install deps, build

$ git clone https://github.com/itunified-io/mcp-cloudflare && cd mcp-cloudflare && npm install && npm run build

https://github.com/itunified-io/mcp-cloudflare

required
Cloudflare API token
Create an API token at dash.cloudflare.com/profile/api-tokens
https://dash.cloudflare.com/profile/api-tokens

Install in your client

Paste into the AI you're chatting with — it will figure out the rest

Please install the `cloudflare-itunifiedio` MCP server into my current AI client (that's you).

Required prerequisites (do these first if not already done):
- **Node.js 20+** — Node.js 20 or higher
- **Clone and build** — Clone the repo, install deps, build Run: `git clone https://github.com/itunified-io/mcp-cloudflare && cd mcp-cloudflare && npm install && npm run build` (https://github.com/itunified-io/mcp-cloudflare)
- **Cloudflare API token** — Create an API token at dash.cloudflare.com/profile/api-tokens (https://dash.cloudflare.com/profile/api-tokens)

Canonical MCP server config (stdio transport):
- command: `node`
- args: ["/path/to/mcp-cloudflare/dist/index.js"]
- required environment variables:
  - `CLOUDFLARE_API_TOKEN`: Cloudflare API token (example: `<your-cloudflare-api-token>`)
- optional environment variables:
  - `NAS_VAULT_ADDR`: HashiCorp Vault address (optional credential loading)
  - `NAS_VAULT_ROLE_ID`: Vault AppRole role ID
  - `NAS_VAULT_SECRET_ID`: Vault AppRole secret ID
  - `NAS_VAULT_KV_MOUNT`: Vault KV v2 mount path (example: `kv`)

Note: 75 tools across DNS, Zones, Tunnels, WAF, Zero Trust, Workers/KV/R2. Supports HashiCorp Vault for credential loading.

Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.

Note: 75 tools across DNS, Zones, Tunnels, WAF, Zero Trust, Workers/KV/R2. Supports HashiCorp Vault for credential loading.