4,500+ servers built on MCP Fusion
Vinkius

Cloudflare MCP. Full control over edge functions and data lifecycle.

Claude Claude
ChatGPT ChatGPT
Cursor Cursor
Gemini Gemini
Windsurf Windsurf
VS Code VS Code
JetBrains JetBrains
Vercel Vercel
See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

Cloudflare MCP on Cursor AI Code Editor MCP Client Cloudflare MCP on Claude Desktop App MCP Integration Cloudflare MCP on OpenAI Agents SDK MCP Compatible Cloudflare MCP on Visual Studio Code MCP Extension Client Cloudflare MCP on GitHub Copilot AI Agent MCP Integration Cloudflare MCP on Google Gemini AI MCP Integration Cloudflare MCP on Lovable AI Development MCP Client Cloudflare MCP on Mistral AI Agents MCP Compatible Cloudflare MCP on Amazon AWS Bedrock MCP Support

Just plug in your AI agents and start using Vinkius.

Cloudflare MCP Server manages your entire edge infrastructure via AI agents. Use it to deploy Workers, manage secrets, query D1 databases, and monitor traffic across KV, R2, and CDN—all from natural language commands.

What your AI agents can do

Create deployment

Rolls out a specific Worker version to traffic, allowing you to choose between an immediate switch or a gradual percentage rollout.

Create secret

Creates or updates an encrypted secret for your Worker, useful for storing API keys and passwords securely.

Create tail session

Starts a live log stream (tail session) for debugging production workers and monitoring runtime errors.

+ 22 more capabilities included
Control Worker Deployments

Roll out new code versions to your Workers with specified traffic percentages or immediately replace old code.

Manage Edge Data Stores (KV/D1)

Read, write, and run SQL queries against key-value pairs (KV) and serverless SQLite databases (D1).

Secure Credentials

Create or delete encrypted secrets needed by your Workers, like API keys or database passwords.

Configure Traffic Routing

Define URL patterns (routes) that direct specific traffic to a Worker script.

Monitor and Debug Performance

Fetch analytics on zone traffic, view worker logs in real-time (create_tail_session), or check deployment history.

Supported MCP Clients

Claude Claude
ChatGPT ChatGPT
Cursor Cursor
Gemini Gemini
Windsurf Windsurf
VS Code VS Code
JetBrains JetBrains
Vercel Vercel
+ other MCP clients
Free for Subscribers

Waiting for input…

AI Agent

Cloudflare MCP Server: 25 Tools for Edge Control

These tools give your agent the capability to read, write, deploy, and monitor every component of your Cloudflare edge infrastructure.

create019d7574

create deployment

Rolls out a specific Worker version to traffic, allowing you to choose between an immediate switch or a gradual percentage rollout.

create019d7574

create secret

Creates or updates an encrypted secret for your Worker, useful for storing API keys and passwords securely.

create019d7574

create tail session

Starts a live log stream (tail session) for debugging production workers and monitoring runtime errors.

create019d7574

create worker route

Sets up a new URL pattern that directs specific traffic to execute your Worker script.

delete019d7574

delete secret

Removes an unused secret from a Worker, revoking the associated credentials immediately.

delete019d7574

delete tail session

Closes an active worker log stream (tail session) when you're done debugging.

delete019d7574

delete worker

Completely removes a Worker script and all its associated resources from your account.

delete019d7574

delete worker route

Stops serving traffic for a specific Worker by removing its defined URL pattern (route).

get019d7574

get kv key

Retrieves the raw JSON value for a specified key within any KV namespace.

get019d7574

get worker

Fetches detailed configuration information about an existing Cloudflare Worker script.

get019d7574

get worker analytics

Returns performance data for a Worker, showing invocation counts and error trends over time.

get019d7574

get worker version

Gets specific details about a historical code snapshot (version) of your Worker script.

get019d7574

get zone analytics

Provides aggregated data on traffic patterns and CDN performance for an entire Cloudflare zone over the last 24 hours.

list019d7574

list d1 databases

Lists all available serverless SQLite databases in your account, providing their IDs and names.

list019d7574

list deployments

Shows the history of deployments for a Worker, including version IDs and current traffic percentages.

list019d7574

list kv keys

Lists all key names within a specific KV namespace, useful for auditing stored data before reading values.

list019d7574

list kv namespaces

Returns a list of existing KV namespaces in your account by their ID and title.

list019d7574

list r2 buckets

Lists all available object storage buckets (R2) so you know where to manage files.

list019d7574

list secrets

Retrieves a list of configured secrets for a Worker, showing names and types without exposing values.

list019d7574

list worker routes

Lists all active URL patterns (routes) that currently point to your Workers, letting you know what's live.

list019d7574

list worker versions

Provides a full audit trail of every code snapshot deployed for a specific Worker script.

list019d7574

list workers

Lists all Worker scripts in your account, providing names and modification dates to start management tasks.

list019d7574

list zones

Returns a list of DNS zones associated with your account, needed for routes or cache purges.

purge019d7574

purge cache

Clears all cached content for an entire zone after you've updated static assets or pushed new code.

query019d7574

query d1

Executes any standard SQL query (SELECT, INSERT, UPDATE, DELETE) against a specified D1 database.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on every call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with Cloudflare, then connect any of our 4,700+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 4,700+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Every connection is secured and compliant automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog every week

What you can do with this MCP connector

Look, you don't wanna jump between a bunch of dashboards and CLI commands just to manage your edge stuff. This server puts all the Cloudflare core services right where your AI agent can hit 'em with natural language commands. You get programmatic control over everything: Workers, data stores like KV and D1, routes, secrets, and analytics—all through one interface.

Worker Control & Deployment

It's simple to manage your worker lifecycle. Use list_workers to see a list of every script you have running in your account, including when they were last modified. Need more detail? Run get_worker to fetch the full configuration for an existing Worker script. You can check out historical code snapshots using list_worker_versions, or get specific details on one version with get_worker_version.

To see what's been deployed, run list_deployments, which shows you a history of deployments, including version IDs and current traffic percentages.

When it comes to pushing new code live, you control the rollout with create_deployment. You can roll out a specific Worker version either immediately or by setting a gradual percentage increase. If you need to know what's going on right now, list_deployments shows that history. To check if your script is running correctly in real-time, start a live log stream using create_tail_session; when you’re done debugging, use delete_tail_session to close the session.

If a Worker's function changes or needs removal, use delete_worker to completely wipe out the script and all its resources. You can also manage traffic routing by defining URL patterns with create_worker_route, which directs specific traffic to your Worker script; when you're done with that route, use delete_worker_route to stop serving traffic for it.

Data Storage and Queries (KV/D1)

For data persistence, you've got two main options. First, there are KV namespaces, which store key-value pairs. Use list_kv_namespaces to get a list of all available namespaces by ID and title. To see what keys exist inside one of those, run list_kv_keys. When you're ready for the data, use get_kv_key to retrieve the raw JSON value for any specified key.

For structured data, there are D1 databases—serverless SQLite. Start by running list_d1_databases to list all available databases in your account, getting their IDs and names. You execute standard SQL queries (SELECT, INSERT, UPDATE, DELETE) against a specific database using the query_d1 tool.

Object storage is handled through R2 buckets; use list_r2_buckets to see all available object buckets so you know where your files live. Finally, for zone management, run list_zones to get a list of DNS zones associated with your account. If you change static assets or push new code and need the cache cleared everywhere, use purge_cache on an entire zone.

Security and Observability

Keeping things secure means managing credentials properly. Use list_secrets to get a list of all configured secrets for a Worker, showing you names and types without revealing any values. When your app needs a new API key or password, use create_secret to create it or update an existing one; if the secret is no longer needed, run delete_secret.

To track performance, start with general traffic patterns: get_zone_analytics provides aggregated data on CDN performance and traffic for a whole zone over the last 24 hours. For deep worker insights, get_worker_analytics returns metrics like invocation counts and error trends. You can also check out the full deployment history using list_worker_versions, which gives you an audit trail of every code snapshot deployed for a Worker script.

It's all designed to keep your hands on the controls, letting you manage everything from worker deployments and data reads to traffic routing and performance monitoring.

How Cloudflare MCP Works

  1. 1 First, generate a Cloudflare API token granting necessary permissions for Workers, KV, D1, R2, and Analytics.
  2. 2 Next, provide your AI agent with the Account ID. The agent then uses natural language to execute complex operations—like 'Deploy version 3 of Worker X with 10% traffic'—instead of manual CLI steps.
  3. 3 The tool returns the status or data (e.g., a list of active secrets, the query result set) that you can use for your next action.

The bottom line is: It lets your AI agent treat your entire Cloudflare setup like one big API endpoint, eliminating manual dashboard navigation and complex scripting.

Who Is Cloudflare MCP For?

This is for the Platform Engineer tired of manually juggling Wrangler CLI commands and multiple dashboards. If you’re responsible for keeping a production edge application running 24/7—and failing means money gets lost—you need this. It turns infrastructure management into conversation.

DevOps Engineer

Uses the tool to automate deployment rollouts (create_deployment), manage resource cleanup, and enforce secret rotation policies without writing custom automation scripts.

Edge Architect / Backend Developer

Deploys new features by setting up create_worker_route patterns, querying data with query_d1, and ensuring necessary credentials are managed via create_secret.

SRE (Site Reliability Engineer)

Monitors system health using get_worker_analytics and debugging live issues by creating a real-time log session with create_tail_session.

What Changes When You Connect

  • Automate Rollouts: Stop manually configuring traffic splits. Use create_deployment to execute canary releases or full rollbacks via a simple command, managing version history without touching the dashboard.
  • Deep Debugging Visibility: Never guess why a worker failed. Run create_tail_session to stream live logs from production, or use get_worker_analytics to track error rates and performance dips instantly.
  • Centralized Data Management: Don't write separate scripts for every data read. Use query_d1 to run full SQL against your serverless database, or get_kv_key for quick configuration lookups.
  • Secure Credentials Lifecycle: Handle secrets correctly. Use create_secret when you add a key, and delete_secret when it expires—all auditable via list_secrets.
  • Infrastructure Auditing: Need to know what's running? Start with list_workers, then check list_worker_routes to see exactly which URLs are pointing to those scripts. It builds a full map.

Real-World Use Cases

01

Rolling out a critical update safely

The dev team finishes Worker v2. Instead of manually setting up traffic routing, they ask the agent to run create_deployment using a gradual rollout strategy (e.g., 5% traffic). The agent manages the version ID and ensures the old code handles remaining traffic until testing confirms stability.

02

Investigating sudden performance drops

Traffic suddenly spikes, but latency is high. An SRE runs get_worker_analytics to confirm the error rate increase, then uses create_tail_session on the affected Worker to get real-time logs and pinpoint the exact line of code causing the issue.

03

Migrating user configuration data

The team needs to read all old user settings stored in KV. They first run list_kv_namespaces to find the right store, then use get_kv_key repeatedly (or via a batch script) to pull all records before running a migration query using query_d1.

04

Deprecating an old API endpoint

The team needs to shut down Worker X at /api/v1. Instead of deleting the code, they first run list_worker_routes to confirm the route ID, then execute delete_worker_route using the specific Zone ID and Route ID.

The Tradeoffs

Manual cleanup after testing

Finished debugging a Worker in production. The agent leaves an active log session running (create_tail_session), which costs money and clutters the logs.

Always remember to run delete_tail_session immediately when your debugging is complete, passing the original script name and tail ID.

Deploying a new feature without testing traffic

A developer runs create_deployment instantly (100% traffic) on a risky feature, causing an outage before performance monitoring is complete.

Always start with a gradual rollout. Use the strategy parameter in create_deployment to send only 5% or 10% of traffic first. Then check get_worker_analytics.

Changing data structure without backup

Running a complex UPDATE query via query_d1 against the production database and breaking the schema because no pre-check was done.

First, list all databases using list_d1_databases. Before querying, run test SELECT statements. Never assume data integrity; always validate with a read operation first.

When It Fits, When It Doesn't

Use this MCP Server if your workflow involves multiple, interconnected Cloudflare services (Workers, D1, KV, Routes) and requires state management—meaning one action depends on the output of another. You need to deploy, monitor, update credentials, and query data in sequence. Don't use it if you only need simple read-only checks (e.g., 'What is the current worker name?'). In that case, a basic list_workers call might suffice. However, if your goal involves making changes—like setting up a route (create_worker_route) or changing data (query_d1)—this server's orchestration capability is mandatory.

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Cloudflare. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS INFRASTRUCTURE

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on every call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

How we secure it →

Works with Claude, ChatGPT, Cursor, and more

The Model Context Protocol standardizes how applications expose capabilities to LLMs. Instead of operating in isolation, your AI gains direct access to external platforms, live data, and real-world actions through secure, standardized connections.

This server provides 25 capabilities that interface natively with Claude, ChatGPT, Cursor, and any MCP client. No middleware. No custom integration required.

Available Capabilities

create_deployment create_secret create_tail_session create_worker_route delete_secret delete_tail_session delete_worker delete_worker_route get_kv_key get_worker get_worker_analytics get_worker_version get_zone_analytics list_d1_databases list_deployments list_kv_keys list_kv_namespaces list_r2_buckets list_secrets list_worker_routes list_worker_versions list_workers list_zones purge_cache query_d1

Debugging an edge function shouldn't require five different tabs and three copy-pastes.

Right now, when Worker X throws a 500 error in production, you have to jump into the dashboard. You find the specific zone ID, then locate the Worker name, manually start a log stream, watch it buffer for minutes, and finally copy the stack trace out so your teammate can read it. It's tedious.

With this MCP server, you just tell your agent: 'Show me the last 50 lines of logs for Worker X.' The agent handles finding the zone ID, starting the stream (`create_tail_session`), and presenting the clean stack trace right back to you.

Cloudflare MCP Server: Full control over edge functions and data lifecycle

Previously, if you deployed a Worker update that changed how it read user settings, you'd have to manually confirm the secret was updated, then verify the route pattern still worked, and finally purge the cache. It’s a multi-step checklist.

Now, your agent handles the entire sequence. You ask it to 'Update the payment Worker secrets and deploy v3.' The server manages `create_secret`, coordinates with `list_worker_versions` for the new code, runs `create_deployment`, and even hits `purge_cache` if necessary. It's one command.

Common Questions About Cloudflare MCP

How do I check which Workers are currently running on my domain using list_workers? +

Run list_workers. This gives you the names and modification dates for every script in your account, allowing you to identify the ones associated with your specific endpoints.

What is the difference between get_kv_key and query_d1? +

Use get_kv_key when data is stored as simple key-value pairs (like a setting). Use query_d1 for structured, relational data that requires SQL commands like SELECT or INSERT.

How do I safely delete an old Worker without affecting my site? (delete_worker) +

Before deleting with delete_worker, always run list_worker_routes and confirm that no live traffic routes depend on that script. This prevents breaking your site.

Can I check the performance of my entire website, not just one worker? (get_zone_analytics) +

Yes, use get_zone_analytics. This tool aggregates data for the whole zone over 24 hours, giving you metrics on overall traffic and CDN health.

I need to update a secret. Should I use create_secret or list_secrets first? +

Always start with list_secrets to confirm the exact name of the secret you're managing. This prevents calling create_secret with the wrong name, which could fail.

How do I monitor real-time errors or debug a running script using create_tail_session? +

You start the session by calling create_tail_session. This tool gives you a WebSocket URL and tail ID, allowing your AI agent to stream logs and exceptions directly from a Worker in production. Use this when debugging live code behavior.

If I change my Worker's functionality, how do I safely roll out the new version using create_deployment? +

create_deployment manages your rollout strategy. You can choose an immediate 100% traffic deployment or a gradual percentage-based canary release to test the new code before full activation.

I need to point my Worker at a new URL path; how do I use create_worker_route? +

You call create_worker_route providing the zone ID, the specific URL pattern (e.g., /api/v2/*), and your script name. This tells Cloudflare exactly which paths should trigger that particular Worker.

Can I deploy new Worker scripts directly through the AI agent? +

Yes! You can orchestrate deployments natively mapping source code variables seamlessly without touching Wrangler.

Does it interact with specific D1 Serverless SQL definitions? +

Absolutely. Ask your agent to parse complex D1 databases and query tables instantly utilizing precise analytical calls.

How are environment variables and secrets handled? +

All add_secret queries execute symmetrically securely masking output variables while committing seamlessly inside Cloudflare matrices.

More in this category

You might also like

Built & Managed by Vinkius 30s setup 25 tools

We've already built the connector for Cloudflare. Just plug in your AI agents and start using Vinkius.

No hosting. No infrastructure. No complex setup.
All 25 tools are live and waiting. You're up and running in seconds.

Claude Claude
ChatGPT ChatGPT
Cursor Cursor
Gemini Gemini
Windsurf Windsurf
VS Code VS Code
JetBrains JetBrains
Vercel Vercel
+ other MCP clients

Vinkius gives your AI agents access to the full catalog of app connectors, all fully managed, secure, and enterprise-ready. One subscription, every tool you need.

Zero hosting required Full MCP catalog included Enterprise-grade security Auto-updated by Vinkius

Built, hosted, and secured by Vinkius. You just connect and go.