Which install is the real Cloudflare MCP?

The hosted server at https://mcp.cloudflare.com/mcp, which Cloudflare documents as the Cloudflare API server (Code Mode). Add it as a remote server in Claude Code, Claude Desktop, Cursor or VS Code and authorize with OAuth. The npm package `@cloudflare/mcp-server-cloudflare` is the 2025 local server for Workers, KV, R2, D1 and Queues; it cannot touch DNS records or the Registrar, and its last release was 2025-03-14. This entry pointed at that package until 2026-09-29.

Can it edit DNS records?

Yes, through Code Mode: the agent searches the spec for the DNS records endpoints on a zone and calls them with `execute`. There is no dedicated `dns_create` tool to look for — the tool list is three entries long by design. Scope the credential to DNS edit on the one zone you are working on.

Can an agent register a domain with it?

Yes, since the Registrar API beta (2026-04-15): `domain-search`, `domain-check` and `registrations` endpoints on the account, callable through `execute` with a token that has Registrar write permission. The account's default payment method is charged and a completed registration is non-refundable, so gate the registration call behind an explicit confirmation. Cloudflare's Registrar API page (last updated 2026-09-16) still lists renewals, transfers and contact updates as unavailable, but the published API spec documents `transfer-in` and `domain-transfer-check` as well (read 2026-10-20); the only registration setting it can change is auto-renew. Only a curated subset of Cloudflare Registrar TLDs is available through the API.

Why does the tool list show three tools for 2,500 endpoints?

Code Mode. Instead of one tool per endpoint — which would put hundreds of thousands of tokens of tool definitions into every conversation — the server hands the model the OpenAPI spec through `search` and lets it call endpoints from JavaScript through `execute`, at roughly a thousand tokens. A tool count is no longer a capability measure for servers built this way.

What about the other Cloudflare MCP servers?

Cloudflare also runs sixteen single-purpose remote servers — documentation (no auth), Workers bindings, Workers builds, observability, containers, browser rendering, Logpush, AI Gateway, AI Search, audit logs, DNS analytics, DEM, CASB, Radar and GraphQL — each at its own `*.mcp.cloudflare.com/mcp` URL. They are narrower and cheaper in context when you only need one product. None of them edits DNS records or registers domains; that is the API server's job.

Which repository is this?

The GitHub link is the servers monorepo, which lists every Cloudflare MCP server. The Code Mode server's own source is github.com/cloudflare/mcp. The star count on this page measures the monorepo, and the tool table comes from Cloudflare's documentation rather than a live `tools/list` — the server is OAuth-gated.

Cloudflare

Name: Top MCPs — curated MCP directory
Creator: Top MCPs
License: https://creativecommons.org/licenses/by/4.0/

Official

Reach the whole Cloudflare API from an agent — DNS records, Workers, R2, and the Registrar beta — through one hosted Code Mode server.

Score 85(?)CloudflareApache-2.0 4.1kVerified Oct 20, 2026Top MCPs for Cloud & Infrastructure →

Install View on GitHub

Quick answer

What it does

Exposes the Cloudflare REST API as a search-and-execute "Code Mode" pair rather than one tool per endpoint: the agent writes JavaScript against `spec.paths` to locate an endpoint, then calls it through `cloudflare.request()`. DNS record CRUD, zone settings, Workers deploys and rollbacks, R2 and KV, and the Registrar API's domain-search, domain-check and registrations endpoints are all reachable this way. The npm package `@cloudflare/mcp-server-cloudflare` is a different, older server: 89 Workers-platform tools, no DNS records, no Registrar, last published 2025-03-14.

Best for

DNS record management on Cloudflare zones
Worker deployment and rollback
Domain search, check and registration via the Registrar API beta
R2, KV and D1 operations

Not for

Unattended DNS changes on production domains
Domains held at another registrar

Source: top-mcps.com/mcp/cloudflare — verified Oct 2026

Setup recipe

Pick your client, then follow the three steps.

1
Install
claude_desktop_config.jsonjson
{ "mcpServers": { "cloudflare": { "command": "npx", "args": [ "-y", "mcp-remote", "https://mcp.cloudflare.com/mcp" ] } } }
Claude Desktop launches stdio servers, so mcp-remote bridges to the hosted endpoint and opens the sign-in in your browser. On Pro, Max, Team and Enterprise you can skip the file: Settings → Connectors → Add custom connector → https://mcp.cloudflare.com/mcp. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
CLI or .mcp.jsonshell
claude mcp add --transport http cloudflare https://mcp.cloudflare.com/mcp
Then run /mcp inside Claude Code to finish the sign-in. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
.cursor/mcp.jsonjson
{ "mcpServers": { "cloudflare": { "url": "https://mcp.cloudflare.com/mcp" } } }
Global path: ~/.cursor/mcp.json. Cursor shows "Needs login" once it connects — click it to authorize. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
.vscode/mcp.jsonjsonc
{ "servers": { "cloudflare": { "type": "http", "url": "https://mcp.cloudflare.com/mcp" } } }
VS Code uses the "servers" key. Run MCP: List Servers → Start Server and allow the sign-in. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
~/.codeium/windsurf/mcp_config.jsonjson
{ "mcpServers": { "cloudflare": { "serverUrl": "https://mcp.cloudflare.com/mcp" } } }
Windsurf uses "serverUrl" for hosted servers. Open via Cascade → hammer icon → Configure. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
cline_mcp_settings.jsonjson
{ "mcpServers": { "cloudflare": { "command": "npx", "args": [ "-y", "mcp-remote", "https://mcp.cloudflare.com/mcp" ] } } }
Bridged through mcp-remote. Open via the Cline sidebar → MCP Servers → Edit. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
~/.continue/config.jsonjson
{ "experimental": { "modelContextProtocolServers": [ { "transport": { "type": "streamable-http", "url": "https://mcp.cloudflare.com/mcp" } } ] } }
Continue takes the hosted URL directly in the transport block. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
CLIshell
codex mcp add cloudflare --url https://mcp.cloudflare.com/mcp
Codex detects OAuth support and opens the browser to authorize. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
~/.config/zed/settings.jsonjsonc
{ "context_servers": { "cloudflare": { "command": { "path": "npx", "args": [ "-y", "mcp-remote", "https://mcp.cloudflare.com/mcp" ] } } } }
Bridged through mcp-remote under "context_servers". Settings live-reload on save. Authorization happens in the browser on first use (OAuth); no token goes in the config file.
ChatGPT → Settings → Connectors (remote URL)json
{ "name": "Cloudflare", "transport": "http", "url": "https://mcp.cloudflare.com/mcp" }
Paste this into Settings → Connectors → Add custom connector. Requires ChatGPT Pro / Team / Enterprise / Edu with Developer mode enabled.
2
Set required secrets
No credentials required — this MCP runs over stdio without authentication.
3
Try a minimum working prompt
Audit deployed Workers
List every Worker deployed on my Cloudflare account with: name, last deployment date, and whether it has a custom route or just a workers.dev URL. Flag any that have not been deployed in over 180 days.
Tested with: Claude Desktop, Cursor.

Tools & permissions

Tool	Description	Args	Side effects
`search`	Write JavaScript against the OpenAPI spec (`spec.paths`) to find the Cloudflare API endpoints for a task.	—	Read
`execute`	Write JavaScript that calls the discovered endpoints through `cloudflare.request()` — reads and writes alike, with the credential's permissions.	—	Write
`docs`	Search Cloudflare developer documentation.	—	Network

Security & scope

Access scope: Read + write
Sandbox: OAuth lets you choose which permissions the connection gets; a bearer API token carries exactly its scopes. Whatever the credential allows, `execute` runs immediately — there is no confirmation layer in the server.
Gotchas: A credential with account-wide permissions hands the agent every zone, Worker and bucket. Create a scoped token — one zone, DNS edit only — for DNS work, and a separate one with Registrar write permission only when you intend to buy.
Registrations through the Registrar API charge the account's default payment method and are non-refundable once complete. Put a human confirmation in front of any `execute` call that hits `/registrar/registrations`.
API tokens with client IP address filtering enabled are not supported by the hosted server.
The legacy `@cloudflare/mcp-server-cloudflare` npm package is not this server: 89 Workers-platform tools, no DNS records, no Registrar, and no release since 2025-03-14.

Agent prompt pack

— copy into Claude, Cursor, or ChatGPT.

Paste into Claude, Cursor, or ChatGPT. Edit the [brackets] before sending.

Recommend the best MCP servers for [task: e.g. cloud & infrastructure work] in [client: Claude].

Constraints:
- Prefer tools that are [official | open-source | read-only] — pick what matters for my use case.
- Exclude MCPs that require [e.g. a paid plan, OAuth-only flows, remote-only transport].
- Return at most 3 picks, ranked.

For each pick include:
1. One-sentence rationale.
2. The ready-to-paste install snippet for my client.
3. Any required secrets I need to create before installing.

Cross-check the top-mcps.com listing: https://top-mcps.com/top-mcps-for-cloud-infrastructure

Compare Cloudflare against a real alternative. Swap the second MCP in [brackets] if you want a different match.

Compare Cloudflare MCP vs [Vercel MCP] for the following job: [describe the job, e.g. "let an agent create GitHub issues on bug triage"].

Judge them on:
- Setup time and complexity (what a new user hits first).
- Auth model (none / API key / OAuth 2.1) and credential risk.
- Transport (stdio / Streamable HTTP / SSE) and where the server runs.
- Required secrets and the blast radius if they leak.
- Operational risk in an unattended agent loop.
- Which one is "good enough" for a weekend prototype vs. production.

End with one sentence: which should I pick for my scenario, which is: [my scenario].

References:
- https://top-mcps.com/mcp/cloudflare
- top-mcps.com listing for Vercel

Asks the agent to install and verify. Works inside Claude Code, Cursor Agent, Codex CLI.

Install the Cloudflare MCP server for my [client: Claude] at the default config path for that client.

Use the exact install snippet published at https://top-mcps.com/mcp/cloudflare (fetch https://top-mcps.com/mcp/cloudflare.json for the canonical server.json if you can read URLs).

Before finishing:
1. Create the required secrets (no secrets) and put them in the appropriate env block — do not hard-code them.
2. Restart or reload the client so it picks up the new server.
3. Verify the server is connected (green / running state) and at least one tool is listed.
4. If anything fails, read the client's MCP logs and report the exact error — do not silently retry.

Confirm when done and list the tools the server now exposes.

Frequently asked questions

What changed

— 4 updates tracked.

Oct 20, 2026
Cloudflare's published API spec now documents Registrar transfer-in, a transfer eligibility check and a registrar-sandbox path family; its Registrar API docs page (2026-09-16) still lists transfers as unavailable. The hosted endpoint answers 401 with OAuth as before.
Sep 29, 2026
Entry re-verified: the ranked path is the hosted Code Mode server at mcp.cloudflare.com/mcp (search, execute, docs). The npm package this entry used to install has no DNS or Registrar tools and was last published 2025-03-14.
Aug 11, 2026
containers-mcp@0.2.19, workers-observability@0.5.5 and dex-analysis@0.5.5 released in the servers monorepo
Apr 15, 2026
Cloudflare Registrar API beta announced: domain-search, domain-check and registrations endpoints, reachable through the Cloudflare MCP by default.

At a glance

Maintainer: Cloudflare
Transport: Streamable HTTP
Auth model: OAuth 2.1
Required secrets: None
Supported clients: Claude Desktop
Claude Code
Cursor
VS Code
License: Apache-2.0
Language: TypeScript
Latest version: latest
Last verified: Oct 20, 2026

GitHub repo Official website

Rank badge

Maintainer of Cloudflare? Embed the live badge — it re-renders with the current rank and score on every catalog refresh.

[![Ranked #1 in Security on Top-MCPs](https://top-mcps.com/badge/cloudflare.svg)](https://top-mcps.com/mcp/cloudflare)

Alternatives

Vercel →
Vercel — official ChatGPT Apps directory listing, verified for 2026.
Netlify →
Deploy a site, read the build, and manage projects, forms and extensions with Netlify's official MCP server.
Railway →
Spin up Railway projects, services, and deploys via remote MCP with OAuth.
Fly.io →
Run `fly mcp server` to expose flyctl operations to AI agents.
DigitalOcean →
Manage Droplets, App Platform, Kubernetes, and Spaces from an AI agent.
Name.com →
Register, transfer and manage Name.com domains and DNS from an agent — the official server, sandboxed by default.
GoDaddy →
Manage the largest consumer domain portfolio from inside ChatGPT — search, register, transfer, and DNS via OAuth.
Namecheap →
Search, register, and manage Namecheap domains from inside ChatGPT — OAuth install, no API key.
Porkbun →
At-cost registration and full DNS control from an agent — read-only until you explicitly turn writes on.
Hostinger →
Buy a domain, provision hosting, deploy a site, and set its DNS — one official server covering the whole chain, now through three search-and-execute tools.
Vercel (MCP server) →
Deploy from files or Git, buy and attach domains, edit DNS, and debug deployments on Vercel — the official remote MCP, over OAuth.

Related guides

Best MCPs for DNS Management in 2026 (Records, Propagation, DNSSEC) →
Ranked Guide
Deploy to Cloudflare With an AI Agent (Cloudflare MCP, 2026) →
Tutorial
Best MCP Servers for Domains in 2026 (Registrars + DNS) →
Setup Guide

More Cloud & Infrastructure MCPs

Other tools in the same category worth evaluating.

Supabase

Full Supabase access: database, auth, storage, and edge functions.

supabasedatabasebackendpostgres

5 minLow

Stripe

Official

Manage payments, customers, and subscriptions through Stripe.

stripepaymentsbillinginvoicing

5 minMedium

DigitalOcean

Official

Manage Droplets, App Platform, Kubernetes, and Spaces from an AI agent.

digitaloceanhostingcloudkubernetes

5 minMedium

Compared with Cloudflare

Side-by-side breakdowns for the choices people most often weigh against this MCP.

CloudflarevsVercel CloudflarevsNetlify CloudflarevsRailway CloudflarevsFly.io

Exploring Top MCPs for Cloud & Infrastructure? See all Cloud & Infrastructure MCPs →

Quick answer

What it does

Best for

Not for

Setup recipe

Install

Set required secrets

Try a minimum working prompt

Tools & permissions

Security & scope

Agent prompt pack

Full details

Frequently asked questions

Which install is the real Cloudflare MCP?

Can it edit DNS records?

Can an agent register a domain with it?

Why does the tool list show three tools for 2,500 endpoints?

What about the other Cloudflare MCP servers?

Which repository is this?

What changed

More Cloud & Infrastructure MCPs

Supabase

Stripe

DigitalOcean

Compared with Cloudflare