Cloudflare MCP Server

Cloudflare's MCP server equips AI agents to manage Cloudflare Workers, DNS records, KV key-value stores, and edge firewall security rules. It enables agents to inspect edge routing configurations, deploy serverless worker scripts, query operational analytics, and automate edge network security policies.

Start for free

Benefits with Ory + Cloudflare MCP Server

Cloudflare's MCP server gives your agents access to your Cloudflare account, including Workers, DNS, storage, security settings, and analytics. A single change at the edge can affect every request your sites receive. Ory Agent Security lets agents inspect configuration and analytics while changes to your account stay with the deployment agents you approve, with every tool call tied to the user behind it.

View documentation

Use Cases

— 01 use case

Agent IAM

Monitoring agents read zones and Worker code at Read, provisioning agents create storage at Write, deploy agents hold Admin, and Block covers everyone you exclude.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Cloudflare MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents reviewing configuration and analytics, write for agents that set up new resources, admin for deployment agents your platform team owns, and no access for agents with no role at the edge.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied DNS change stops before it reaches Cloudflare, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents read or change your Cloudflare account and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the Cloudflare MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Cloudflare MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed something serving live traffic, and for whom.