MCP100 IndexCloud & DevOps
MCP100 RecommendedFirst-party MCP

Cloudflare MCP

by Cloudflare

Updated September 24, 2026

Cloud & DevOpsSoftware & TechnologyAccess · Hosted

MCP100 verdict

Access Cloudflare API and product-specific MCP capabilities across developer infrastructure, observability, security, DNS, Workers, and related services.

MCP100 Assessment

Editorial verdict

Recommended for scoped Cloudflare investigation and administration when OAuth permissions are narrow, the appropriate endpoint is chosen, and change-producing actions require approval.

Reviewed July 24, 2026

Task Fit

Mapped

Cloud operations

Trust

Reviewed

A dated editorial review is published on the MCP detail page.

Maintenance

Activity observed

A dated repository or package update is available; editorial maintenance review is still pending.

Popularity

Signals available

Visible usage signals are shown for discovery only, not as proof of safety.

Best for

  • Searching and executing supported Cloudflare API operations across Workers, DNS, R2, Zero Trust, and related products
  • Investigating account configuration and operational data from an MCP client
  • Using product-specific read-oriented Cloudflare MCP endpoints for logs, analytics, and documentation

Not ideal for

  • A narrowly scoped integration when the broad Cloudflare API server is authorized with excessive permissions
  • Environments that cannot complete browser-based OAuth

Avoid if

  • The agent must not be able to change DNS, security, storage, compute, or account configuration
  • You cannot inspect and restrict the OAuth permissions selected during authorization
  • Untrusted retrieved content can directly trigger execute calls without approval

Trade-offs

  • The Cloudflare API server compresses more than 2,500 API endpoints into search and execute tools, reducing tool-schema context but greatly increasing potential blast radius.
  • Cloudflare also offers narrower product-specific MCP servers, which can be safer but require choosing and configuring separate endpoints.
  • The hosted service removes local runtime maintenance but sends requests and results through Cloudflare's managed MCP infrastructure.

Evidence scope

Evidence

Current source snapshot

Popularity

880 MCP repository stars

No MCP-specific package metric is stored

Repository identity: cloudflare/mcp

Stars observed September 24, 2026 · Downloads observation date unavailable

Exact reviewed repository identity; current GitHub repository stars are eligible as repository-level adoption evidence.

The current broad canonical profile is cloudflare/mcp. Do not inherit download metrics from the older/domain-specific package family.

Maintenance

Publisher activity observed September 17, 2026

Current source snapshot

Trust review

Source relationship: First-party MCP

Reviewed July 24, 2026