--- title: "Cloudflare MCP server for AI agents - actionlake" description: "Give Claude 1,595 Cloudflare actions through one MCP server: zero trust, workers, SSL, DNS. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/cloudflare updated: 2026-10-22 --- Connectors · Identity & security # Cloudflare MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Cloudflare and the rest of your systems. It gives your agent 1,595 Cloudflare actions (728 reads, 613 writes and 254 that wait for a confirmation) and holds the Cloudflare credential itself, so the agent never does. It paces Cloudflare's limits and records every call. [Connect Cloudflare free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "cloudflare.accounts.list", intent: "check which Cloudflare account is connected" } # List Accounts · read · 1 upstream call ``` - 1,595 actions in one signed file - 728 read look, never change - 613 write create and update - 254 wait for a yes destructive, confirmed first Set up ## Connect Cloudflare in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Cloudflare. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_token` Cloudflare API token ``` account { op: "connections.requirements", service: "cloudflare" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "cloudflare.accounts.list" } # list accounts · read · 1 upstream call check { action: "cloudflare.account_iam_user_groups.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Cloudflare at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_token` **Limits we pace to** 1,200 calls per 5 minutes, per connection **API covered** Cloudflare API v4 (OpenAPI 3.0.3, schema 4.0.0)`api.cloudflare.com/client/v4` **Built from** Cloudflare's documentation, read 22 October 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json) [developers.cloudflare.com](https://developers.cloudflare.com/api/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 704 of 728 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 8, so ask can line Cloudflare up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Cloudflare. 1,595 actions in 33 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **728** read look, never change - **613** write create and update - **254** destructive wait for a confirmation 1. ### Zero trust 461 208 read · 169 write · 84 destructive List Access applications · List Access reusable policies · Get an Access application · Get an Access reusable policy 2. ### Workers 200 85 read · 81 write · 34 destructive Create Hyperdrive · List Hyperdrives · Restart Hyperdrive · Create Database Signature 3. ### SSL 78 37 read · 27 write · 14 destructive Upload mTLS certificate · List mTLS certificates (account) · List mTLS certificate associations · Create Certificate 4. ### DNS 72 29 read · 32 write · 11 destructive Add Account Custom Nameserver · List Account Custom Nameservers · Create DNS Firewall Cluster · List DNS Firewall Clusters 5. ### Email 63 27 read · 27 write · 9 destructive Create a destination address · List destination addresses · List account routing rules · Plan account routing rule changes 6. ### Logs 61 31 read · 24 write · 6 destructive List Logpush jobs for a dataset · Create Logpush job · List Logpush jobs · Get ownership challenge 7. ### User 60 33 read · 20 write · 7 destructive User Details · List Memberships · Get user analytics dashboard · Get user audit logs 8. ### Firewall 55 22 read · 23 write · 10 destructive Create an IP Access rule · List IP Access rules · Create a list · Create list items **25 more areas · 545 actions** - Zone settings **54** - Load balancing **51** - Tunnels **38** - R2 **33** - IAM **32** - Rulesets **32** - Billing **30** - Notifications **25** - Cache **24** - Waiting rooms **23** - Pages **22** - Performance **21** - Rules **19** - Custom pages **18** - Security **17** - Registrar **16** - Analytics **15** - Waf **15** - Accounts **13** - D1 **13** - KV **12** - Zones **11** - Spectrum **9** - Audit **1** - Network **1** Top actions ## The Cloudflare API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 20 of Cloudflare's 20 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `cloudflare.account_members.list` List Members | List Members. | read | `identity.user.list` 474 connectors | | `cloudflare.account_iam_user_groups.list` List User Groups | List User Groups. | read | `identity.group.list` 262 connectors | | `cloudflare.account_iam_permission_groups.list` List Account Permission Groups | List Account Permission Groups. | read | `identity.role.list` 184 connectors | | `cloudflare.user.get` User Details | User Details. | read | `identity.current_user.get` 307 connectors | | `cloudflare.account_iam_user_groups.create` Create User Group | Create User Group. | write | `identity.group.create` 205 connectors | | `cloudflare.account_members.get` Member Details | Member Details. | read | `identity.user.get` 399 connectors | | `cloudflare.account_iam_user_groups.update` Update User Group | Update User Group. | write | `identity.group.update` 189 connectors | | `cloudflare.account_iam_permission_groups.get` Permission Group Details | Permission Group Details. | read | `identity.role.get` 127 connectors | | `cloudflare.account_iam_user_groups.delete` Remove User Group | Remove User Group. | destructive | `identity.group.delete` 181 connectors | | `cloudflare.account_access_apps.list` List Access applications | List Access applications. | read | `identity.application.list` 37 connectors | | `cloudflare.account_teamnet_virtual_networks.list` List virtual networks | List virtual networks. | read | `security.network.list` 15 connectors | | `cloudflare.accounts.update` Update Account | Update Account. | write | `platform.tenant.update` 46 connectors | Try it ## Prompts to paste into Claude. Each one names the Cloudflare actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Cloudflare? List every user and their role. calls `cloudflare.account_members.list` 2. Write write Create User Group in Cloudflare. Show me exactly what you will send before you save it. calls `cloudflare.account_iam_user_groups.create` Governance for Cloudflare ## Destructive actions wait for a yes. 254 Cloudflare actions are destructive. The first 10: - Remove User Group `cloudflare.account_iam_user_groups.delete` - Purge Cached Content `cloudflare.zone_purge_cache.create` - Purge Queue `cloudflare.account_queues_purge.create` - Purge Peeked Queue Messages `cloudflare.account_queues_messages_purge.create` - Purge the Pages build cache `cloudflare.account_pages_projects_purge_build_cache.create` - Delete multiple key-value pairs (account) `cloudflare.account_storage_kv_namespaces_bulk_delete.create` - Batch terminate instances of a workflow `cloudflare.account_workflows_instances_batch_terminate.create` - Delete Zone `cloudflare.zones.delete` - Delete a specific account `cloudflare.accounts.delete` - Remove Zone Hold `cloudflare.zone_hold.delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do cloudflare.account_iam_user_groups.delete confirm_policy: **human** Remove User Group? **intent:** the user asked me to remove User Group run suspended · waiting for a named person · key _cloudflare-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "cloudflare-agent", allowed_actions: ["cloudflare.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "cloudflare.account_iam_user_groups.delete", approver: "lead@example.com" }, { match: "cloudflare.zone_purge_cache.create", approver: "lead@example.com" }, { match: "cloudflare.account_queues_purge.create", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Cloudflare only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Cloudflare costs on actionlake. Every Cloudflare action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Cloudflare refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 1,595 Cloudflare actions - 1,595 actions page each page of a long list is one call - 704 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Cloudflare action. 1,595 actions by area: the id your agent calls, what it does, and its effect. **Zero trust 461** - `cloudflare.account_access_apps.get` Get an Access application read - `cloudflare.account_access_apps.list` List Access applications read - `cloudflare.account_access_policies.get` Get an Access reusable policy read - `cloudflare.account_access_policies.list` List Access reusable policies read - `cloudflare.account_access_ai_controls_mcp_analytics_portals_tool_calls_timeseries.get` Per-portal MCP tool-call timeseries read - `cloudflare.account_access_ai_controls_mcp_analytics_servers_tool_calls_timeseries.get` Per-server MCP tool-call timeseries read - and 455 more in this area **Workers 200** - `cloudflare.account_hyperdrive_configs.create` Create Hyperdrive write - `cloudflare.account_hyperdrive_configs.list` List Hyperdrives read - `cloudflare.account_hyperdrive_configs_restart.create` Restart Hyperdrive write - `cloudflare.account_hyperdrive_integrations_operations_planet_scale_create_database_signature.create` Create Database Signature write - `cloudflare.account_hyperdrive_configs.delete` Delete Hyperdrive destructive - `cloudflare.account_hyperdrive_configs.get` Get Hyperdrive read - and 194 more in this area **SSL 78** - `cloudflare.account_mtls_certificates.create` Upload mTLS certificate write - `cloudflare.account_mtls_certificates.list` List mTLS certificates (account) read - `cloudflare.account_mtls_certificates_associations.list` List mTLS certificate associations read - `cloudflare.origin_ca_certificates.create` Create Certificate write - `cloudflare.account_mtls_certificates.delete` Delete mTLS certificate destructive - `cloudflare.account_mtls_certificates.get` Get mTLS certificate read - and 72 more in this area **DNS 72** - `cloudflare.account_custom_ns.create` Add Account Custom Nameserver write - `cloudflare.account_custom_ns.list` List Account Custom Nameservers read - `cloudflare.account_dns_firewall.create` Create DNS Firewall Cluster write - `cloudflare.account_dns_firewall.list` List DNS Firewall Clusters read - `cloudflare.account_custom_ns.delete` Delete Account Custom Nameserver destructive - `cloudflare.account_dns_firewall.delete` Delete DNS Firewall Cluster destructive - and 66 more in this area **Email 63** - `cloudflare.account_email_routing_addresses.create` Create a destination address write - `cloudflare.account_email_routing_addresses.list` List destination addresses read - `cloudflare.account_email_routing_rules.list` List account routing rules read - `cloudflare.account_email_routing_rules_plan.create` Plan account routing rule changes write - `cloudflare.account_email_routing_addresses.delete` Delete destination address destructive - `cloudflare.account_email_routing_addresses.get` Get a destination address read - and 57 more in this area **Logs 61** - `cloudflare.account_logpush_datasets_jobs.list` List Logpush jobs for a dataset read - `cloudflare.account_logpush_jobs.create` Create Logpush job write - `cloudflare.account_logpush_jobs.list` List Logpush jobs read - `cloudflare.account_logpush_ownership.create` Get ownership challenge write - `cloudflare.account_logpush_datasets_fields.get` List fields read - `cloudflare.account_logpush_jobs.delete` Delete Logpush job destructive - and 55 more in this area **User 60** - `cloudflare.memberships.list` List Memberships read - `cloudflare.user.get` User Details read - `cloudflare.user_analytics_dashboard.list` Get user analytics dashboard read - `cloudflare.user_audit_logs.list` Get user audit logs read - `cloudflare.memberships.delete` Delete Membership destructive - `cloudflare.memberships.get` Membership Details read - and 54 more in this area **Firewall 55** - `cloudflare.account_firewall_access_rules_rules.create` Create an IP Access rule write - `cloudflare.account_firewall_access_rules_rules.list` List IP Access rules read - `cloudflare.account_rules_lists.create` Create a list write - `cloudflare.account_rules_lists_items.create` Create list items write - `cloudflare.account_firewall_access_rules_rules.delete` Delete an IP Access rule destructive - `cloudflare.account_firewall_access_rules_rules.get` Get an IP Access rule read - and 49 more in this area **Zone settings 54** - `cloudflare.zone_settings.get` Get zone setting read - `cloudflare.zone_settings.list` Get all zone settings read - `cloudflare.zone_settings_zaraz_history.list` List Zaraz historical configuration records read - `cloudflare.zone_settings_zaraz_publish.create` Publish Zaraz preview configuration write - `cloudflare.zone_settings.patch` Edit multiple zone settings write - `cloudflare.zone_settings.patch_by_setting_id` Edit zone setting write - and 48 more in this area **Load balancing 51** - `cloudflare.account_load_balancers.create` Create Account Load Balancer write - `cloudflare.account_load_balancers.list` List Account Load Balancers read - `cloudflare.account_load_balancers_monitor_groups.create` Create Monitor Group write - `cloudflare.account_load_balancers_monitor_groups.list` List Monitor Groups read - `cloudflare.account_load_balancers.delete` Delete Account Load Balancer destructive - `cloudflare.account_load_balancers.get` Account Load Balancer Details read - and 45 more in this area **Tunnels 38** - `cloudflare.account_cfd_tunnel.create` Create a Cloudflare Tunnel write - `cloudflare.account_cfd_tunnel.list` List Cloudflare Tunnels read - `cloudflare.account_teamnet_virtual_networks.get` Get a virtual network read - `cloudflare.account_teamnet_virtual_networks.list` List virtual networks read - `cloudflare.account_cfd_tunnel.delete` Delete a Cloudflare Tunnel destructive - `cloudflare.account_cfd_tunnel.get` Get a Cloudflare Tunnel read - and 32 more in this area **R2 33** - `cloudflare.account_r2_buckets.create` Create Bucket write - `cloudflare.account_r2_buckets_domains_custom.create` Attach Custom Domain To Bucket write - `cloudflare.account_r2_buckets_jobs.create` Create Bucket Job write - `cloudflare.account_r2_buckets_objects.list` List Objects read - `cloudflare.account_r2_buckets.delete` Delete Bucket destructive - `cloudflare.account_r2_buckets.get` List Buckets read - and 27 more in this area **IAM 32** - `cloudflare.account_iam_permission_groups.list` List Account Permission Groups read - `cloudflare.account_iam_user_groups.create` Create User Group write - `cloudflare.account_iam_user_groups.list` List User Groups read - `cloudflare.account_members.list` List Members read - `cloudflare.account_iam_permission_groups.get` Permission Group Details read - `cloudflare.account_iam_resource_groups.create` Create Resource Group write - and 26 more in this area **Rulesets 32** - `cloudflare.account_rulesets.create` Create an account ruleset write - `cloudflare.account_rulesets.list` List account rulesets read - `cloudflare.account_rulesets_phases_entrypoint_versions.list` List an account entry point ruleset's versions read - `cloudflare.account_rulesets_rules.create` Create an account ruleset rule write - `cloudflare.account_rulesets.delete` Delete an account ruleset destructive - `cloudflare.account_rulesets.get` Get an account ruleset read - and 26 more in this area **Billing 30** - `cloudflare.account_billing_history.list` Get Account Billing History read - `cloudflare.account_billing_profile.create` Create Billing Profile write - `cloudflare.account_billing_profile_payment_method.create` Create Payment Intent for Billing Profile write - `cloudflare.account_billing_usage.list` Get account billing usage read - `cloudflare.account_billing_bad_debt.get` Get Account Bad Debt read - `cloudflare.account_billing_credits.get` Get Account Credits read - and 24 more in this area **Notifications 25** - `cloudflare.account_alerting_v3_destinations_pagerduty.list` List PagerDuty services read - `cloudflare.account_alerting_v3_destinations_pagerduty_connect.create` Create PagerDuty integration token write - `cloudflare.account_alerting_v3_destinations_webhooks.create` Create a webhook write - `cloudflare.account_alerting_v3_destinations_webhooks.list` List webhooks read - `cloudflare.account_alerting_v3_available_alerts.get` Get Alert Types read - `cloudflare.account_alerting_v3_destinations_eligible.get` Get delivery mechanism eligibility read - and 19 more in this area **Cache 24** - `cloudflare.zone_cache_cache_reserve_clear.create` Start Cache Reserve Clear write - `cloudflare.zone_cache_origin_cloud_regions.create` Create an origin cloud region mapping write - `cloudflare.zone_cache_tiered_cache_smart_topology_enable.create` Create Smart Tiered Cache setting write - `cloudflare.zone_purge_cache.create` Purge Cached Content destructive - `cloudflare.zone_cache_cache_reserve.get` Get Cache Reserve setting read - `cloudflare.zone_cache_cache_reserve.patch` Change Cache Reserve setting write - and 18 more in this area **Waiting rooms 23** - `cloudflare.zone_waiting_rooms.create` Create waiting room write - `cloudflare.zone_waiting_rooms.list` List waiting rooms for zone read - `cloudflare.zone_waiting_rooms_events.create` Create event write - `cloudflare.zone_waiting_rooms_events.list` List events read - `cloudflare.zone_waiting_rooms.delete` Delete waiting room destructive - `cloudflare.zone_waiting_rooms.get` Waiting room details read - and 17 more in this area **Pages 22** - `cloudflare.account_pages_projects.create` Create a Cloudflare Pages project write - `cloudflare.account_pages_projects.list` List Cloudflare Pages projects read - `cloudflare.account_pages_projects_deployments.list` List Pages deployments read - `cloudflare.account_pages_projects_deployments_retry.create` Retry a Pages deployment write - `cloudflare.account_pages_projects.delete` Delete a Cloudflare Pages project destructive - `cloudflare.account_pages_projects.get` Get a Cloudflare Pages project read - and 16 more in this area **Performance 21** - `cloudflare.zone_origin_cloud_regions.list` List origin cloud region mappings (zone) read - `cloudflare.zone_smart_shield_cache_reserve_clear.create` Start Cache Reserve Clear (zone) write - `cloudflare.zone_smart_shield_healthchecks.create` Create Health Check (zone) write - `cloudflare.zone_smart_shield_healthchecks.list` List Health Checks (zone) read - `cloudflare.zone_argo_smart_routing.get` Get Argo Smart Routing setting read - `cloudflare.zone_argo_smart_routing.patch` Patch Argo Smart Routing setting write - and 15 more in this area **Rules 19** - `cloudflare.zone_pagerules.create` Create a Page Rule write - `cloudflare.zone_pagerules.list` List Page Rules read - `cloudflare.zone_pagerules_settings.list` List available Page Rules settings read - `cloudflare.zone_snippets.list` List zone snippets read - `cloudflare.zone_managed_headers.delete` Delete Managed Transforms destructive - `cloudflare.zone_managed_headers.get` List Managed Transforms read - and 13 more in this area **Custom pages 18** - `cloudflare.account_custom_pages.list` List custom pages (account) read - `cloudflare.account_custom_pages_assets.create` Create a custom asset write - `cloudflare.account_custom_pages_assets.list` List custom assets read - `cloudflare.account_custom_pages_preview_tokens.create` Create a preview token write - `cloudflare.account_custom_pages.get` Get a custom page (account) read - `cloudflare.account_custom_pages.update` Update a custom page (account) write - and 12 more in this area **Security 17** - `cloudflare.zone_bot_management_feedback.create` Submit a feedback report write - `cloudflare.zone_page_shield_connections.list` List detected connections read - `cloudflare.zone_page_shield_cookies.list` List detected cookies read - `cloudflare.zone_page_shield_policies.create` Create a content security rule write - `cloudflare.zone_bot_management.get` Get Zone Bot Management Config read - `cloudflare.zone_bot_management.update` Update Zone Bot Management Config write - and 11 more in this area **Registrar 16** - `cloudflare.account_registrar_domain_check.create` Check domain availability write - `cloudflare.account_registrar_domain_transfer_check.create` Check domain transfer eligibility destructive - `cloudflare.account_registrar_domains.list` List domains read - `cloudflare.account_registrar_extensions.list` List extensions read - `cloudflare.account_registrar_domain_search.get` Search for available domains read - `cloudflare.account_registrar_domains.get` Get domain read - and 10 more in this area **Analytics 15** - `cloudflare.account_analytics_query_data_security_content_findings_top_n.query` Top integrations by content findings read - `cloudflare.account_analytics_query_data_security_findings_summary.query` Data security findings summary read - `cloudflare.account_analytics_query_data_security_findings_timeseries.query` Data security findings timeseries read - `cloudflare.account_analytics_query_summary.query` Query analytics summary read - `cloudflare.account_analytics_query_timeseries.query` Query analytics timeseries read - `cloudflare.account_analytics_query_top_n.query` Query analytics top-N read - and 9 more in this area **Waf 15** - `cloudflare.zone_content_upload_scan_disable.create` Disable Content Scanning for a zone. write - `cloudflare.zone_content_upload_scan_enable.create` Enable Content Scanning for a zone. write - `cloudflare.zone_content_upload_scan_payloads.create` Create Content Scanning custom expressions for a zone. write - `cloudflare.zone_content_upload_scan_payloads.list` List the Content Scanning custom expressions of a zone. read - `cloudflare.zone_content_upload_scan_payloads.delete` Delete a Content Scanning custom expression from a zone. destructive - `cloudflare.zone_content_upload_scan_payloads.patch` Update a Content Scanning custom expression for a zone. write - and 9 more in this area **Accounts 13** - `cloudflare.account_tags_keys.list` List tag keys read - `cloudflare.accounts.get` Account Details read - `cloudflare.accounts.list` List Accounts read - `cloudflare.accounts.update` Update Account write - `cloudflare.account_tags.delete` Delete tags from an account-level resource destructive - `cloudflare.account_tags.get` Get tags for an account-level resource read - and 7 more in this area **D1 13** - `cloudflare.account_d1_database.create` Create D1 Database write - `cloudflare.account_d1_database.list` List D1 Databases read - `cloudflare.account_d1_database_export.create` Export D1 Database as SQL write - `cloudflare.account_d1_database_import.create` Import SQL into your D1 Database write - `cloudflare.account_d1_database.delete` Delete D1 Database destructive - `cloudflare.account_d1_database.get` Get D1 Database read - and 7 more in this area **KV 12** - `cloudflare.account_storage_kv_namespaces.create` Create a namespace write - `cloudflare.account_storage_kv_namespaces.list` List namespaces read - `cloudflare.account_storage_kv_namespaces_bulk_delete.create` Delete multiple key-value pairs (account) destructive - `cloudflare.account_storage_kv_namespaces_bulk_get.fetch` Get multiple key-value pairs read - `cloudflare.account_storage_kv_namespaces.delete` Delete a namespace destructive - `cloudflare.account_storage_kv_namespaces.get` Get a namespace read - and 6 more in this area **Zones 11** - `cloudflare.zone_activation_check.update` Rerun the Activation Check write - `cloudflare.zone_hold.create` Create Zone Hold write - `cloudflare.zones.create` Create Zone write - `cloudflare.zones.list` List Zones read - `cloudflare.zone_hold.delete` Remove Zone Hold destructive - `cloudflare.zone_hold.get` Get Zone Hold read - and 5 more in this area **Spectrum 9** - `cloudflare.zone_spectrum_analytics_aggregate_current.list` Get current aggregated analytics read - `cloudflare.zone_spectrum_apps.create` Create Spectrum application using a name for the origin write - `cloudflare.zone_spectrum_apps.list` List Spectrum applications read - `cloudflare.zone_spectrum_protocols.list` List Spectrum application protocols read - `cloudflare.zone_spectrum_analytics_events_bytime.get` Get analytics by time read - `cloudflare.zone_spectrum_analytics_events_summary.get` Get analytics summary read - and 3 more in this area **Audit 1** - `cloudflare.account_audit_logs.list` Get account audit logs read **Network 1** - `cloudflare.ips.get` Cloudflare/JD Cloud IP Details read This index shows a sample of each area. All 1,595 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Cloudflare MCP server, answered. **Is there a Cloudflare MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,595 Cloudflare actions across zero trust, workers, SSL and DNS, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Cloudflare. **What do I need to connect Cloudflare?** Cloudflare API token. The free call account { op: "connections.requirements", service: "cloudflare" } lists exactly what to paste. **Can an AI agent delete or change things in Cloudflare?** Only if its key allows it, and only with an explicit confirmation. 254 Cloudflare actions are destructive, including remove User Group, purge Cached Content and purge Queue. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Cloudflare API limit?** actionlake paces every call to the limits in the Cloudflare service file: 1,200 calls per 5 minutes per connection. Repeated reads are answered from cache (704 Cloudflare actions can be), which never reaches Cloudflare. **What does a Cloudflare action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,595 Cloudflare actions page). Cache hits, searches, dry runs and calls Cloudflare refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Cloudflare API does it cover?** The Cloudflare API v4 (OpenAPI 3.0.3, schema 4.0.0) at api.cloudflare.com/client/v4. It is built from Cloudflare's documentation as read on 22 October 2026. 1,595 actions in 33 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Cloudflare data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Cloudflare credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Cloudflare Shares the most action names with - [OneLogin 16](https://actionlake.com/connectors/onelogin) - [Doppler 12](https://actionlake.com/connectors/doppler) - [Keycloak Admin REST API 12](https://actionlake.com/connectors/keycloak-admin-rest-api) - [SailPoint Identity Security Cloud 11](https://actionlake.com/connectors/sailpoint-identity-security-cloud) - [BeyondTrust Password Safe 8](https://actionlake.com/connectors/beyondtrust-password-safe) - [ConductorOne 7](https://actionlake.com/connectors/conductorone) Joins with, on shared entities - [Fortinet FortiGate 5](https://actionlake.com/connectors/fortinet-fortigate) - [authentik 5](https://actionlake.com/connectors/authentik) - [Sophos Central 5](https://actionlake.com/connectors/sophos-central) - [Axiom 5](https://actionlake.com/connectors/axiom) - [Material Security 5](https://actionlake.com/connectors/material-security) - [Delinea Secret Server 4](https://actionlake.com/connectors/delinea-secret-server) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Cloudflare; the name is the vendor's own. Counts are from the Cloudflare service file, version 1.0.0. ## Give your agent Cloudflare today. [Connect Cloudflare free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/cloudflare More: https://actionlake.com/llms.txt