Connectors · Identity & security
Cloudflare MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Cloudflare and the rest of your systems. It gives your agent 1,595 Cloudflare actions (728 reads, 613 writes and 254 that wait for a confirmation) and holds the Cloudflare credential itself, so the agent never does. It paces Cloudflare's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "cloudflare.accounts.list", intent: "check which Cloudflare account is connected"}# List Accounts · read · 1 upstream call- 1,595actionsin one signed file
- 728readlook, never change
- 613writecreate and update
- 254wait for a yesdestructive, confirmed first
Set up
Connect Cloudflare in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Cloudflare.
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
api_tokenCloudflare API token
account { op: "connections.requirements", service: "cloudflare" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "cloudflare.accounts.list" }# list accounts · read · 1 upstream callcheck { action: "cloudflare.account_iam_user_groups.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Cloudflare at a glance
- Sign-in
- Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
api_token- Limits we pace to
- 1,200 calls per 5 minutes, per connection
- API covered
- Cloudflare API v4 (OpenAPI 3.0.3, schema 4.0.0)
api.cloudflare.com/client/v4 - Built from
- Cloudflare's documentation, read 22 October 2026OpenAPI spec (GitHub)developers.cloudflare.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 704 of 728 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 8, so ask can line Cloudflare up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Cloudflare.
1,595 actions in 33 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 728readlook, never change
- 613writecreate and update
- 254destructivewait for a confirmation
Zero trust
461208 read · 169 write · 84 destructive
List Access applications · List Access reusable policies · Get an Access application · Get an Access reusable policy
Workers
20085 read · 81 write · 34 destructive
Create Hyperdrive · List Hyperdrives · Restart Hyperdrive · Create Database Signature
SSL
7837 read · 27 write · 14 destructive
Upload mTLS certificate · List mTLS certificates (account) · List mTLS certificate associations · Create Certificate
DNS
7229 read · 32 write · 11 destructive
Add Account Custom Nameserver · List Account Custom Nameservers · Create DNS Firewall Cluster · List DNS Firewall Clusters
Email
6327 read · 27 write · 9 destructive
Create a destination address · List destination addresses · List account routing rules · Plan account routing rule changes
Logs
6131 read · 24 write · 6 destructive
List Logpush jobs for a dataset · Create Logpush job · List Logpush jobs · Get ownership challenge
User
6033 read · 20 write · 7 destructive
User Details · List Memberships · Get user analytics dashboard · Get user audit logs
Firewall
5522 read · 23 write · 10 destructive
Create an IP Access rule · List IP Access rules · Create a list · Create list items
25 more areas · 545 actions
- Zone settings 54
- Load balancing 51
- Tunnels 38
- R2 33
- IAM 32
- Rulesets 32
- Billing 30
- Notifications 25
- Cache 24
- Waiting rooms 23
- Pages 22
- Performance 21
- Rules 19
- Custom pages 18
- Security 17
- Registrar 16
- Analytics 15
- Waf 15
- Accounts 13
- D1 13
- KV 12
- Zones 11
- Spectrum 9
- Audit 1
- Network 1
Top actions
The Cloudflare API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 20 of Cloudflare's 20 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
cloudflare.account_members.listList Members | List Members. | read | identity.user.list474 connectors |
cloudflare.account_iam_user_groups.listList User Groups | List User Groups. | read | identity.group.list262 connectors |
cloudflare.account_iam_permission_groups.listList Account Permission Groups | List Account Permission Groups. | read | identity.role.list184 connectors |
cloudflare.user.getUser Details | User Details. | read | identity.current_user.get307 connectors |
cloudflare.account_iam_user_groups.createCreate User Group | Create User Group. | write | identity.group.create205 connectors |
cloudflare.account_members.getMember Details | Member Details. | read | identity.user.get399 connectors |
cloudflare.account_iam_user_groups.updateUpdate User Group | Update User Group. | write | identity.group.update189 connectors |
cloudflare.account_iam_permission_groups.getPermission Group Details | Permission Group Details. | read | identity.role.get127 connectors |
cloudflare.account_iam_user_groups.deleteRemove User Group | Remove User Group. | destructive | identity.group.delete181 connectors |
cloudflare.account_access_apps.listList Access applications | List Access applications. | read | identity.application.list37 connectors |
cloudflare.account_teamnet_virtual_networks.listList virtual networks | List virtual networks. | read | security.network.list15 connectors |
cloudflare.accounts.updateUpdate Account | Update Account. | write | platform.tenant.update46 connectors |
Try it
Prompts to paste into Claude.
Each one names the Cloudflare actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Cloudflare? List every user and their role.
calls
cloudflare.account_members.list - Writewrite
Create User Group in Cloudflare. Show me exactly what you will send before you save it.
calls
cloudflare.account_iam_user_groups.create
Governance for Cloudflare
Destructive actions wait for a yes.
254 Cloudflare actions are destructive. The first 10:
- Remove User Group
cloudflare.account_iam_user_groups.delete - Purge Cached Content
cloudflare.zone_purge_cache.create - Purge Queue
cloudflare.account_queues_purge.create - Purge Peeked Queue Messages
cloudflare.account_queues_messages_purge.create - Purge the Pages build cache
cloudflare.account_pages_projects_purge_build_cache.create - Delete multiple key-value pairs (account)
cloudflare.account_storage_kv_namespaces_bulk_delete.create - Batch terminate instances of a workflow
cloudflare.account_workflows_instances_batch_terminate.create - Delete Zone
cloudflare.zones.delete - Delete a specific account
cloudflare.accounts.delete - Remove Zone Hold
cloudflare.zone_hold.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Remove User Group?
intent: the user asked me to remove User Group
account { op: "keys.create", name: "cloudflare-agent", allowed_actions: ["cloudflare.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "cloudflare.account_iam_user_groups.delete", approver: "[email protected]" }, { match: "cloudflare.zone_purge_cache.create", approver: "[email protected]" }, { match: "cloudflare.account_queues_purge.create", approver: "[email protected]" } ]}Cost
What Cloudflare costs on actionlake.
Every Cloudflare action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Cloudflare refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 1,595 Cloudflare actions
- 1,595actions pageeach page of a long list is one call
- 704reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Cloudflare action.
1,595 actions by area: the id your agent calls, what it does, and its effect.
Zero trust461
cloudflare.account_access_apps.getGet an Access applicationreadcloudflare.account_access_apps.listList Access applicationsreadcloudflare.account_access_policies.getGet an Access reusable policyreadcloudflare.account_access_policies.listList Access reusable policiesreadcloudflare.account_access_ai_controls_mcp_analytics_portals_tool_calls_timeseries.getPer-portal MCP tool-call timeseriesreadcloudflare.account_access_ai_controls_mcp_analytics_servers_tool_calls_timeseries.getPer-server MCP tool-call timeseriesread- and 455 more in this area
Workers200
cloudflare.account_hyperdrive_configs.createCreate Hyperdrivewritecloudflare.account_hyperdrive_configs.listList Hyperdrivesreadcloudflare.account_hyperdrive_configs_restart.createRestart Hyperdrivewritecloudflare.account_hyperdrive_integrations_operations_planet_scale_create_database_signature.createCreate Database Signaturewritecloudflare.account_hyperdrive_configs.deleteDelete Hyperdrivedestructivecloudflare.account_hyperdrive_configs.getGet Hyperdriveread- and 194 more in this area
SSL78
cloudflare.account_mtls_certificates.createUpload mTLS certificatewritecloudflare.account_mtls_certificates.listList mTLS certificates (account)readcloudflare.account_mtls_certificates_associations.listList mTLS certificate associationsreadcloudflare.origin_ca_certificates.createCreate Certificatewritecloudflare.account_mtls_certificates.deleteDelete mTLS certificatedestructivecloudflare.account_mtls_certificates.getGet mTLS certificateread- and 72 more in this area
DNS72
cloudflare.account_custom_ns.createAdd Account Custom Nameserverwritecloudflare.account_custom_ns.listList Account Custom Nameserversreadcloudflare.account_dns_firewall.createCreate DNS Firewall Clusterwritecloudflare.account_dns_firewall.listList DNS Firewall Clustersreadcloudflare.account_custom_ns.deleteDelete Account Custom Nameserverdestructivecloudflare.account_dns_firewall.deleteDelete DNS Firewall Clusterdestructive- and 66 more in this area
Email63
cloudflare.account_email_routing_addresses.createCreate a destination addresswritecloudflare.account_email_routing_addresses.listList destination addressesreadcloudflare.account_email_routing_rules.listList account routing rulesreadcloudflare.account_email_routing_rules_plan.createPlan account routing rule changeswritecloudflare.account_email_routing_addresses.deleteDelete destination addressdestructivecloudflare.account_email_routing_addresses.getGet a destination addressread- and 57 more in this area
Logs61
cloudflare.account_logpush_datasets_jobs.listList Logpush jobs for a datasetreadcloudflare.account_logpush_jobs.createCreate Logpush jobwritecloudflare.account_logpush_jobs.listList Logpush jobsreadcloudflare.account_logpush_ownership.createGet ownership challengewritecloudflare.account_logpush_datasets_fields.getList fieldsreadcloudflare.account_logpush_jobs.deleteDelete Logpush jobdestructive- and 55 more in this area
User60
cloudflare.memberships.listList Membershipsreadcloudflare.user.getUser Detailsreadcloudflare.user_analytics_dashboard.listGet user analytics dashboardreadcloudflare.user_audit_logs.listGet user audit logsreadcloudflare.memberships.deleteDelete Membershipdestructivecloudflare.memberships.getMembership Detailsread- and 54 more in this area
Firewall55
cloudflare.account_firewall_access_rules_rules.createCreate an IP Access rulewritecloudflare.account_firewall_access_rules_rules.listList IP Access rulesreadcloudflare.account_rules_lists.createCreate a listwritecloudflare.account_rules_lists_items.createCreate list itemswritecloudflare.account_firewall_access_rules_rules.deleteDelete an IP Access ruledestructivecloudflare.account_firewall_access_rules_rules.getGet an IP Access ruleread- and 49 more in this area
Zone settings54
cloudflare.zone_settings.getGet zone settingreadcloudflare.zone_settings.listGet all zone settingsreadcloudflare.zone_settings_zaraz_history.listList Zaraz historical configuration recordsreadcloudflare.zone_settings_zaraz_publish.createPublish Zaraz preview configurationwritecloudflare.zone_settings.patchEdit multiple zone settingswritecloudflare.zone_settings.patch_by_setting_idEdit zone settingwrite- and 48 more in this area
Load balancing51
cloudflare.account_load_balancers.createCreate Account Load Balancerwritecloudflare.account_load_balancers.listList Account Load Balancersreadcloudflare.account_load_balancers_monitor_groups.createCreate Monitor Groupwritecloudflare.account_load_balancers_monitor_groups.listList Monitor Groupsreadcloudflare.account_load_balancers.deleteDelete Account Load Balancerdestructivecloudflare.account_load_balancers.getAccount Load Balancer Detailsread- and 45 more in this area
Tunnels38
cloudflare.account_cfd_tunnel.createCreate a Cloudflare Tunnelwritecloudflare.account_cfd_tunnel.listList Cloudflare Tunnelsreadcloudflare.account_teamnet_virtual_networks.getGet a virtual networkreadcloudflare.account_teamnet_virtual_networks.listList virtual networksreadcloudflare.account_cfd_tunnel.deleteDelete a Cloudflare Tunneldestructivecloudflare.account_cfd_tunnel.getGet a Cloudflare Tunnelread- and 32 more in this area
R233
cloudflare.account_r2_buckets.createCreate Bucketwritecloudflare.account_r2_buckets_domains_custom.createAttach Custom Domain To Bucketwritecloudflare.account_r2_buckets_jobs.createCreate Bucket Jobwritecloudflare.account_r2_buckets_objects.listList Objectsreadcloudflare.account_r2_buckets.deleteDelete Bucketdestructivecloudflare.account_r2_buckets.getList Bucketsread- and 27 more in this area
IAM32
cloudflare.account_iam_permission_groups.listList Account Permission Groupsreadcloudflare.account_iam_user_groups.createCreate User Groupwritecloudflare.account_iam_user_groups.listList User Groupsreadcloudflare.account_members.listList Membersreadcloudflare.account_iam_permission_groups.getPermission Group Detailsreadcloudflare.account_iam_resource_groups.createCreate Resource Groupwrite- and 26 more in this area
Rulesets32
cloudflare.account_rulesets.createCreate an account rulesetwritecloudflare.account_rulesets.listList account rulesetsreadcloudflare.account_rulesets_phases_entrypoint_versions.listList an account entry point ruleset's versionsreadcloudflare.account_rulesets_rules.createCreate an account ruleset rulewritecloudflare.account_rulesets.deleteDelete an account rulesetdestructivecloudflare.account_rulesets.getGet an account rulesetread- and 26 more in this area
Billing30
cloudflare.account_billing_history.listGet Account Billing Historyreadcloudflare.account_billing_profile.createCreate Billing Profilewritecloudflare.account_billing_profile_payment_method.createCreate Payment Intent for Billing Profilewritecloudflare.account_billing_usage.listGet account billing usagereadcloudflare.account_billing_bad_debt.getGet Account Bad Debtreadcloudflare.account_billing_credits.getGet Account Creditsread- and 24 more in this area
Notifications25
cloudflare.account_alerting_v3_destinations_pagerduty.listList PagerDuty servicesreadcloudflare.account_alerting_v3_destinations_pagerduty_connect.createCreate PagerDuty integration tokenwritecloudflare.account_alerting_v3_destinations_webhooks.createCreate a webhookwritecloudflare.account_alerting_v3_destinations_webhooks.listList webhooksreadcloudflare.account_alerting_v3_available_alerts.getGet Alert Typesreadcloudflare.account_alerting_v3_destinations_eligible.getGet delivery mechanism eligibilityread- and 19 more in this area
Cache24
cloudflare.zone_cache_cache_reserve_clear.createStart Cache Reserve Clearwritecloudflare.zone_cache_origin_cloud_regions.createCreate an origin cloud region mappingwritecloudflare.zone_cache_tiered_cache_smart_topology_enable.createCreate Smart Tiered Cache settingwritecloudflare.zone_purge_cache.createPurge Cached Contentdestructivecloudflare.zone_cache_cache_reserve.getGet Cache Reserve settingreadcloudflare.zone_cache_cache_reserve.patchChange Cache Reserve settingwrite- and 18 more in this area
Waiting rooms23
cloudflare.zone_waiting_rooms.createCreate waiting roomwritecloudflare.zone_waiting_rooms.listList waiting rooms for zonereadcloudflare.zone_waiting_rooms_events.createCreate eventwritecloudflare.zone_waiting_rooms_events.listList eventsreadcloudflare.zone_waiting_rooms.deleteDelete waiting roomdestructivecloudflare.zone_waiting_rooms.getWaiting room detailsread- and 17 more in this area
Pages22
cloudflare.account_pages_projects.createCreate a Cloudflare Pages projectwritecloudflare.account_pages_projects.listList Cloudflare Pages projectsreadcloudflare.account_pages_projects_deployments.listList Pages deploymentsreadcloudflare.account_pages_projects_deployments_retry.createRetry a Pages deploymentwritecloudflare.account_pages_projects.deleteDelete a Cloudflare Pages projectdestructivecloudflare.account_pages_projects.getGet a Cloudflare Pages projectread- and 16 more in this area
Performance21
cloudflare.zone_origin_cloud_regions.listList origin cloud region mappings (zone)readcloudflare.zone_smart_shield_cache_reserve_clear.createStart Cache Reserve Clear (zone)writecloudflare.zone_smart_shield_healthchecks.createCreate Health Check (zone)writecloudflare.zone_smart_shield_healthchecks.listList Health Checks (zone)readcloudflare.zone_argo_smart_routing.getGet Argo Smart Routing settingreadcloudflare.zone_argo_smart_routing.patchPatch Argo Smart Routing settingwrite- and 15 more in this area
Rules19
cloudflare.zone_pagerules.createCreate a Page Rulewritecloudflare.zone_pagerules.listList Page Rulesreadcloudflare.zone_pagerules_settings.listList available Page Rules settingsreadcloudflare.zone_snippets.listList zone snippetsreadcloudflare.zone_managed_headers.deleteDelete Managed Transformsdestructivecloudflare.zone_managed_headers.getList Managed Transformsread- and 13 more in this area
Custom pages18
cloudflare.account_custom_pages.listList custom pages (account)readcloudflare.account_custom_pages_assets.createCreate a custom assetwritecloudflare.account_custom_pages_assets.listList custom assetsreadcloudflare.account_custom_pages_preview_tokens.createCreate a preview tokenwritecloudflare.account_custom_pages.getGet a custom page (account)readcloudflare.account_custom_pages.updateUpdate a custom page (account)write- and 12 more in this area
Security17
cloudflare.zone_bot_management_feedback.createSubmit a feedback reportwritecloudflare.zone_page_shield_connections.listList detected connectionsreadcloudflare.zone_page_shield_cookies.listList detected cookiesreadcloudflare.zone_page_shield_policies.createCreate a content security rulewritecloudflare.zone_bot_management.getGet Zone Bot Management Configreadcloudflare.zone_bot_management.updateUpdate Zone Bot Management Configwrite- and 11 more in this area
Registrar16
cloudflare.account_registrar_domain_check.createCheck domain availabilitywritecloudflare.account_registrar_domain_transfer_check.createCheck domain transfer eligibilitydestructivecloudflare.account_registrar_domains.listList domainsreadcloudflare.account_registrar_extensions.listList extensionsreadcloudflare.account_registrar_domain_search.getSearch for available domainsreadcloudflare.account_registrar_domains.getGet domainread- and 10 more in this area
Analytics15
cloudflare.account_analytics_query_data_security_content_findings_top_n.queryTop integrations by content findingsreadcloudflare.account_analytics_query_data_security_findings_summary.queryData security findings summaryreadcloudflare.account_analytics_query_data_security_findings_timeseries.queryData security findings timeseriesreadcloudflare.account_analytics_query_summary.queryQuery analytics summaryreadcloudflare.account_analytics_query_timeseries.queryQuery analytics timeseriesreadcloudflare.account_analytics_query_top_n.queryQuery analytics top-Nread- and 9 more in this area
Waf15
cloudflare.zone_content_upload_scan_disable.createDisable Content Scanning for a zone.writecloudflare.zone_content_upload_scan_enable.createEnable Content Scanning for a zone.writecloudflare.zone_content_upload_scan_payloads.createCreate Content Scanning custom expressions for a zone.writecloudflare.zone_content_upload_scan_payloads.listList the Content Scanning custom expressions of a zone.readcloudflare.zone_content_upload_scan_payloads.deleteDelete a Content Scanning custom expression from a zone.destructivecloudflare.zone_content_upload_scan_payloads.patchUpdate a Content Scanning custom expression for a zone.write- and 9 more in this area
Accounts13
cloudflare.account_tags_keys.listList tag keysreadcloudflare.accounts.getAccount Detailsreadcloudflare.accounts.listList Accountsreadcloudflare.accounts.updateUpdate Accountwritecloudflare.account_tags.deleteDelete tags from an account-level resourcedestructivecloudflare.account_tags.getGet tags for an account-level resourceread- and 7 more in this area
D113
cloudflare.account_d1_database.createCreate D1 Databasewritecloudflare.account_d1_database.listList D1 Databasesreadcloudflare.account_d1_database_export.createExport D1 Database as SQLwritecloudflare.account_d1_database_import.createImport SQL into your D1 Databasewritecloudflare.account_d1_database.deleteDelete D1 Databasedestructivecloudflare.account_d1_database.getGet D1 Databaseread- and 7 more in this area
KV12
cloudflare.account_storage_kv_namespaces.createCreate a namespacewritecloudflare.account_storage_kv_namespaces.listList namespacesreadcloudflare.account_storage_kv_namespaces_bulk_delete.createDelete multiple key-value pairs (account)destructivecloudflare.account_storage_kv_namespaces_bulk_get.fetchGet multiple key-value pairsreadcloudflare.account_storage_kv_namespaces.deleteDelete a namespacedestructivecloudflare.account_storage_kv_namespaces.getGet a namespaceread- and 6 more in this area
Zones11
cloudflare.zone_activation_check.updateRerun the Activation Checkwritecloudflare.zone_hold.createCreate Zone Holdwritecloudflare.zones.createCreate Zonewritecloudflare.zones.listList Zonesreadcloudflare.zone_hold.deleteRemove Zone Holddestructivecloudflare.zone_hold.getGet Zone Holdread- and 5 more in this area
Spectrum9
cloudflare.zone_spectrum_analytics_aggregate_current.listGet current aggregated analyticsreadcloudflare.zone_spectrum_apps.createCreate Spectrum application using a name for the originwritecloudflare.zone_spectrum_apps.listList Spectrum applicationsreadcloudflare.zone_spectrum_protocols.listList Spectrum application protocolsreadcloudflare.zone_spectrum_analytics_events_bytime.getGet analytics by timereadcloudflare.zone_spectrum_analytics_events_summary.getGet analytics summaryread- and 3 more in this area
Audit1
cloudflare.account_audit_logs.listGet account audit logsread
Network1
cloudflare.ips.getCloudflare/JD Cloud IP Detailsread
This index shows a sample of each area. All 1,595 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Cloudflare MCP server, answered.
Is there a Cloudflare MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,595 Cloudflare actions across zero trust, workers, SSL and DNS, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Cloudflare.
What do I need to connect Cloudflare?
Cloudflare API token. The free call account { op: "connections.requirements", service: "cloudflare" } lists exactly what to paste.
Can an AI agent delete or change things in Cloudflare?
Only if its key allows it, and only with an explicit confirmation. 254 Cloudflare actions are destructive, including remove User Group, purge Cached Content and purge Queue. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Cloudflare API limit?
actionlake paces every call to the limits in the Cloudflare service file: 1,200 calls per 5 minutes per connection. Repeated reads are answered from cache (704 Cloudflare actions can be), which never reaches Cloudflare.
What does a Cloudflare action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,595 Cloudflare actions page). Cache hits, searches, dry runs and calls Cloudflare refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Cloudflare API does it cover?
The Cloudflare API v4 (OpenAPI 3.0.3, schema 4.0.0) at api.cloudflare.com/client/v4. It is built from Cloudflare's documentation as read on 22 October 2026. 1,595 actions in 33 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Cloudflare data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Cloudflare credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Cloudflare today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
