Tutorial7 min read

Deploy to Cloudflare With an AI Agent

To deploy to Cloudflare with an AI agent, connect the official Cloudflare MCP with a scoped API token, then ask the agent to publish a Worker or Pages project. It deploys Workers from inline code or a bundle, sets KV/R2/D1 bindings and env vars, and rolls back to a previous Worker version. Because the same MCP also controls DNS and WAF, the agent can attach a domain and set an edge rule in the same conversation — the one hosting MCP that covers deploy, DNS, and edge security in a single install.

Before you start

You need a Cloudflare account, a Worker or Pages project, and an MCP-compatible client. The setup decision that matters is the token: scope it to exactly the permissions the agent needs, and never hand an agent the global API key.

Step by step

1

Create a scoped Cloudflare API token

In the Cloudflare dashboard, create an API token with only the permissions the agent needs: Workers Scripts:Edit to deploy Workers, Zone:Read and DNS:Edit for DNS, Account Analytics:Read for metrics. Avoid the global API key.

2

Connect the Cloudflare MCP

Add the official Cloudflare MCP to your client — remotely at mcp.cloudflare.com/mcp over OAuth, or locally via npx with CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID.

3

Deploy a Worker or Pages project

Ask the agent to publish a Worker from inline code or a bundle path, set its env vars and bindings (KV, R2, D1), and report the deployed URL.

4

Attach a domain and edge rules

Because the same MCP controls DNS and WAF, the agent can point a domain at the deployment and add an edge rule in the same conversation — no second tool.

5

Roll back if a deploy regresses

Ask the agent to publish a previous Worker version. Pair this with Cloudflare Change History so every agent-initiated change stays auditable.

Token permissions by task

If the agent should…Grant
Read analytics and zone config onlyAccount Analytics:Read, Zone:Read
Deploy Workers+ Workers Scripts:Edit
Edit DNS records+ DNS:Edit on the zone
Manage R2 / KV storage+ Workers KV / R2 permissions

No confirmation layer on destructive ops

The Cloudflare MCP runs destructive operations — delete Worker, purge zone — immediately, with no built-in confirmation step. The two defenses are a tightly scoped token and a human approval gate on production changes. Keep Change History on so every agent-initiated change is auditable.

Frequently asked questions

How do I deploy to Cloudflare with an AI agent?

Connect the official Cloudflare MCP to your agent client with a scoped API token, then ask the agent to publish a Worker or Pages project. The Cloudflare MCP can deploy Workers from inline code or a bundle, set KV/R2/D1 bindings and env vars, and roll back to a previous Worker version — and because it also controls DNS and WAF, the agent can attach a domain and set an edge rule in the same install.

What API token permissions does the Cloudflare MCP need?

Only what the task requires. For read-only use: Account Analytics:Read and Zone:Read. To deploy Workers add Workers Scripts:Edit. For DNS changes add the DNS edit permission on the zone. Create a scoped token per use case rather than using the global API key, which grants every permission on the account.

Can the Cloudflare MCP roll back a deploy?

Yes. It can publish a previous Worker version, which is the rollback path for Workers. It can also set env vars and bindings and roll back if a deploy fails. Pair it with Cloudflare Change History so every agent-initiated change is auditable after the fact.

Is it safe to run the Cloudflare MCP against production DNS?

Only with a scoped token and approval enabled. DNS mistakes propagate quickly and can black-hole traffic, and the Cloudflare MCP runs destructive operations — delete Worker, purge zone — immediately, with no built-in confirmation layer. Scope the token, keep production changes behind a human approval step, and use Change History for audit.

Does the Cloudflare MCP also handle DNS and domains?

Yes — that is its distinguishing feature among hosting MCPs. The same install exposes DNS record CRUD, WAF rules, R2 and KV storage, and zone analytics alongside Worker deploys. For most agent-driven deploys that need a custom domain, it removes the need for a separate domains MCP.

Continue reading

Compare Cloudflare against the other hosting MCPs, or pair it with a domains MCP.

More guides

Comparison

AWS MCP vs Azure MCP: Which to Use in 2026

7 min read

Comparison

Square MCP vs Stripe MCP: Which to Use in 2026

7 min read

Ranked Guide

Best MCPs for DevOps in 2026 (Ranked)

11 min read

Vertical Guide

Best MCPs for Domains and DNS in 2026 (Ranked)

8 min read

Comparison

Namecheap vs GoDaddy vs Cloudflare MCP (2026)

7 min read

Vertical Guide

Best MCPs for Payments in 2026 (Ranked)

8 min read

Vertical Guide

Best MCPs for Invoicing and Accounting in 2026

9 min read

Comparison

Stripe MCP vs PayPal MCP: Which to Use in 2026

6 min read

Ranked Guide

Best MCP Servers for Postgres in 2026 (Ranked)

12 min read

Ranked Guide

Best MCP Servers for Browser Automation in 2026 (Ranked)

12 min read

Ranked Guide

Best MCP Servers for Vector Databases in 2026 (RAG-Ready)

11 min read

Ranked Guide

Best MCP Servers for Git in 2026 (GitHub, GitLab, Bitbucket, Local)

11 min read

Ranked Guide

Best MCP Servers for Workflow Automation in 2026 (Ranked)

11 min read

Ranked Guide

Best Free MCP Servers in 2026 (No API Key Required)

10 min read

Comparison

GitHub vs GitLab MCP: Which to Use in 2026

8 min read

Comparison

Pinecone vs Qdrant vs Chroma MCP: Which to Use (2026)

9 min read

Comparison

Playwright vs Browserbase MCP: Local vs Cloud (2026)

8 min read

Comparison

Postgres MCP vs Supabase MCP: Which to Use (2026)

8 min read

Comparison

n8n vs Zapier vs Make MCP: Which to Use (2026)

9 min read

Ranked Guide

Best MCP Servers for Deploying Websites in 2026 (Ranked)

11 min read

Comparison

Vercel vs Netlify vs Cloudflare MCP: Which to Use (2026)

9 min read

Tutorial

Deploy to Vercel With an AI Agent (Vercel MCP, 2026)

7 min read

Strategy

Can an AI Agent Deploy to Production? (Safely, in 2026)

8 min read

Fundamentals

What Is MCP? A Plain-English Guide to Model Context Protocol

6 min read

Setup Guide

Best MCPs for Cursor in 2026 (Ranked + Setup)

8 min read

Setup Guide

Best MCPs for Claude Desktop in 2026 (Ranked + Setup)

9 min read

Setup Guide

Best MCPs for Claude Code in 2026 (Ranked + Setup)

8 min read

Setup Guide

Best MCPs for Codex CLI in 2026 (Ranked + config.toml)

8 min read

Setup Guide

Best MCPs for Windsurf in 2026 (Cascade-Ready Setup)

8 min read

Setup Guide

Best MCPs for VS Code in 2026 (Agent Mode + .vscode/mcp.json)

8 min read

Vertical Guide

Best MCPs for Marketing in 2026 (Ranked + Use Cases)

9 min read

Vertical Guide

Best MCPs for SEO in 2026 (Ranked + Workflows)

9 min read

Vertical Guide

Best MCPs for Data Teams in 2026 (Ranked + Workflows)

9 min read

Vertical Guide

Best MCPs for Security in 2026 (Ranked + Posture Workflows)

10 min read

Strategy

MCP Registry vs Curated Directory: Which Should You Use?

5 min read

Setup Guide

Best MCPs for ChatGPT: The Apps and Connectors Worth Installing

9 min read

Tutorial

How to Add an MCP Server to ChatGPT (Developer Mode + Apps Directory)

7 min read

Security

MCP Security: What to Know Before You Install

9 min read

Role Guide

Best MCPs for Marketers in 2026 (SEO, Email, Analytics)

8 min read

Strategy

Remote vs Local MCP Servers: When to Use Each

7 min read

Fundamentals

MCP vs Function Calling: What’s the Difference?

6 min read

Comparison

MCP Directories Compared: Top MCPs vs mcp.so vs PulseMCP vs mcp.directory

8 min read

Security

MCP Prompt Injection: How Tool-Calling Agents Get Hijacked

8 min read

Security

OAuth 2.1 for MCP: What the Spec Standardised and What You Need to Know

8 min read

Security

Sandboxing MCP Servers: Containers, Least Privilege, and Process Isolation

9 min read

Security

Rotating MCP Credentials: A Practical Guide for Leaks, Expiry, and Routine Hygiene

7 min read

Security

Least-Privilege Scoping for MCPs: How to Grant the Smallest Useful Permission

7 min read

Setup Guide

Best MCP Servers for Databases in 2026 (Ranked + Setup)

10 min read

Setup Guide

Best MCP Servers for Research in 2026 (Search, Scrape, Synthesize)

9 min read

Setup Guide

Best MCP Servers for Design-to-Code in 2026 (Figma → React)

9 min read

Setup Guide

Best MCP Servers for Domains in 2026 (Registrars + DNS)

9 min read

Tutorial

How to Buy a Domain From Claude (Cloudflare MCP, Step by Step)

6 min read

Tutorial

How to Search for Domains With an AI Agent (Cross-Registrar Workflow)

7 min read

Tutorial

How to Deploy a Website With an AI Agent (MCP Workflow)

8 min read