Cloudflare Tunnel MCP. Manage secure network routes from plain conversation.

Cloudflare Tunnel MCP Server - Manage Tunnels & Routes

Your AI agent takes over your Zero Trust connections and private network routing. You'll list, create, and update tunnels and network routes for your private infrastructure. You control ingress rules and manage the connection lifecycle without ever touching the CLI or the cloud console.

Cloudflare Tunnel MCP Server - Manage Tunnels & Routes gives your agent the power to handle the full lifecycle of your tunnels and network routes. It's built to work with your AI client, letting you manage things conversationally.

Getting Started

First, you'll need to generate a management token using get_management_token. Then, you'll use get_tunnel_token to grab a fresh token needed for the connector. You'll feed these credentials to your AI client to start using the tools.

Managing Tunnels and Connections

• Discovery: You can list all active Cloudflare Tunnel connections using list_connections, or see every tunnel route configured with list_routes. To check on the tunnels themselves, list_tunnels shows you all of them, letting you filter by status. You can also get detailed info on a single tunnel with get_tunnel or fetch the status of a specific connector using get_connector. You'll also get the current configuration settings for a remote-managed tunnel with get_configuration.
• Actions: Need a new tunnel? create_tunnel provisions and sets up a brand new Cloudflare Tunnel in your account. If you need to remove one, delete_tunnel takes it out. You can also update an existing tunnel's settings using update_tunnel, or modify its connection parameters with update_route and create_route to connect specific resources. delete_route handles the removal of existing routes.
• Inspecting Routes: You can look up a specific tunnel route using an IP address with get_route_by_ip, or view all configured routes using list_routes.
• Cleanup: If you find stale or unnecessary connections, cleanup_connections removes them; if you don't give it a client ID, it cleans up all connectors.

Fine-Tuning Configuration

• Updates: You can add or overwrite the entire configuration for a remotely-managed tunnel using put_configuration. This lets you modify ingress rules and origin settings without leaving your IDE. You can also modify the configuration for a specific tunnel's connection using get_tunnel_token and get_connector.
• Specific Details: To get all detailed information for one tunnel, use get_tunnel. If you just want to check the connection's status, get_connector fetches that info. If you need to update the tunnel's connection parameters, you'll use update_tunnel and update_route together.

Deep Dive into Tunnel Management

Your agent handles private network routes (CIDR) and IP-based routing, connecting your internal resources. You can manage these private routes using create_route to establish a new connection, or delete them with delete_route. You'll always know where your traffic is going because get_route_by_ip lets you look up a route by its IP address.

The whole process gives you total control over your cloud networking stack, straight from your chat window.