MCP Cloudflare MCP server

by crunchtools·io.github.crunchtools/cloudflare·v0.1.1

No reviews yet

Secure MCP server for Cloudflare DNS, Transform Rules, and Page Rules

A91/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A91/100

full report

Adoption

New

0 stars17 downloads/wk

Reviews

Write one

Nobody has reviewed MCP Cloudflare yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP Cloudflare tools (18, 6 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

create_dns_record_toolwrite action
Create a new DNS record.
create_page_rule_toolwrite action
Create a new page rule.
delete_dns_record_toolwrite action
Delete a DNS record.
delete_page_rule_toolwrite action
Delete a page rule.
get_dns_record_tool
Get a single DNS record by ID.
get_zone_tool
Get Cloudflare zone details by ID or name.
list_dns_records_tool
List DNS records for a Cloudflare zone.
list_page_rules_tool
List all page rules for a zone.
list_request_header_rules_tool
List request header modification rules.
list_response_header_rules_tool
List response header modification rules.
list_url_rewrite_rules_tool
List URL rewrite rules.
list_zones_tool
List all Cloudflare zones accessible by the API token.
purge_cache_tool
Purge cached content from Cloudflare's edge.
set_request_header_rules_tool
Set request header modification rules (replaces all existing rules).
set_response_header_rules_tool
Set response header modification rules (replaces all existing rules).
set_url_rewrite_rules_tool
Set URL rewrite rules (replaces all existing rules).
update_dns_record_toolwrite action
Update an existing DNS record.
update_page_rule_toolwrite action
Update an existing page rule.

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings

Code scan15 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 2 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How MCP Cloudflare compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 91/100; higher than 85% of 1,119 Developer tools servers
Tools: 18; the typical Developer tools server has 7
Tools that change things: 33%; typical: 5%. Fewer write tools means less an agent can break
Downloads a week: 17; more than 4% of 436 Developer tools servers with a package

What its tools let an agent do: 8 read · 2 create · 5 change · 3 delete

Install MCP Cloudflare in Claude Code, Cursor or VS Code

claude mcp add cloudflare -- uvx mcp-cloudflare-crunchtools

Add to Cursor

What the publisher says

From the MCP Cloudflare repository's README, as published. We do not edit it. Read it on GitHub

MCP Cloudflare CrunchTools

A secure MCP (Model Context Protocol) server for Cloudflare DNS, Transform Rules, Page Rules, and cache management.

Overview

This MCP server is designed to be:

Secure by default - Threat modeling, input validation, and token protection
No third-party services - Runs locally via stdio, your API token never leaves your machine
Cross-platform - Works on Linux, macOS, and Windows
Automatically updated - GitHub Actions monitor for CVEs and update dependencies
Containerized - Available at quay.io/crunchtools/mcp-cloudflare built on Hummingbird Python base image

Naming Convention

Why Hummingbird?

The container image is built on the Hummingbird Python base image from Project Hummingbird, which provides:

Minimal CVE exposure - Hummingbird images are built with a minimal package set, dramatically reducing the attack surface compared to general-purpose images
Regular updates - Security patches are applied promptly, keeping CVE counts low
Optimized for Python - Pre-configured Python environment with uv package manager for fast, reproducible builds
Production-ready - Designed for production workloads with proper signal handling and non-root user defaults

This means your MCP server runs in a hardened environment with fewer vulnerabilities than typical Python container images

Features

Zone Management (2 tools)

list_zones - List all zones accessible by your API token
get_zone - Get zone details by ID or domain name

DNS Records (5 tools)

listdnsrecords - List DNS records with filtering
getdnsrecord - Get a single DNS record
creatednsrecord - Create A, AAAA, CNAME, MX, TXT, NS, SRV, CAA records
updatednsrecord - Update existing records
deletednsrecord - Delete records

Transform Rules (6 tools)

listrequestheaderrules / setrequestheaderrules - Modify request headers
listresponseheaderrules / setresponseheaderrules - Modify response headers
listurlrewriterules / seturlrewriterules - URL path/query rewrites

Page Rules (4 tools)

listpagerules - List all page rules
createpagerule - Create redirects, cache settings, SSL modes
updatepagerule - Modify existing rules
deletepagerule - Remove rules

Cache Management (1 tool)

purge_cache - Purge by URL, tag, host, prefix, or everything

Installation

With uvx (Recommended)

uvx mcp-cloudflare-crunchtools

With pip

pip install mcp-cloudflare-crunchtools

With Container

podman run -e CLOUDFLARE_API_TOKEN=your_token \
    quay.io/crunchtools/mcp-cloudflare

Configuration

Creating a Cloudflare API Token

Navigate to API Tokens

Go to https://dash.cloudflare.com/profile/api-tokens
Click "Create Token"
Click "Get started" next to "Create Custom Token"

Configure Token Name

Enter: mcp-cloudflare-crunchtools

Configure Permissions

The Permissions section has three dropdowns per row:

First dropdown: Resource type (Account or Zone)
Second dropdown: Specific permission category
Third dropdown: Access level (Read or Edit)

Click "+ Add more" to add each permission row. For full management, add:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MCP Cloudflare: common questions

Is MCP Cloudflare MCP server safe?: Yes, by our scan: it is graded A (91/100). Read the MCP Cloudflare safety report
How do I install MCP Cloudflare?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MCP Cloudflare need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MCP Cloudflare maintained?: The last commit was 39 days ago (2026-09-26). The latest release is v0.1.1.
What can I use instead of MCP Cloudflare?: Servers from other publishers that do the same job: Porkbun (official) MCP server, Scrapling MCP Server and MCP server.
How does MCP Cloudflare compare with other Developer tools MCP servers?: safety score 91/100 (higher than 85% of 1,119 Developer tools servers); tools 18 (the typical Developer tools server has 7); tools that change things 33% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MCP Cloudflare

Same job from other publishers: the closest match first, then the best rated.

Porkbun (official)
Official Porkbun MCP server: domains, DNS, SSL, hosting and Cloudflare via the Porkbun API.
not reviewed
Established
A
Scrapling MCP Server
Web scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.
not reviewed
Widely used
A
MCP
Cloudflare MCP servers
not reviewed
Established
A
Notion
Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
not reviewed
Established
B
ShipStatic
Deploy static websites, landing pages, and prototypes instantly. Free, no account needed.
not reviewed
Established
A