Stop context-switching between dashboards to manage your infrastructure.

Cloudflare Control is an MCP server that lets your AI assistant manage DNS records, purge cache, inspect Workers, configure SSL, and pull analytics directly from Cloudflare, no browser required.

Quick Start

Add this to your mcpServers config:

{
  "mcpServers": {
    "cloudflare-control": {
      "url": "https://your-cloud-run-url/mcp",
      "env": {
        "CLOUDFLARE_API_TOKEN": "your_token_here"
      }
    }
  }
}

Generate your API token at Cloudflare dashboard > My Profile > API Tokens. Grant it Zone:Read, DNS:Edit, Cache Purge, and Workers Scripts:Read permissions.

Before / After

Before: Open Cloudflare dashboard, navigate to the right zone, find DNS records, identify the record ID, edit the value, wait for propagation confirmation.

After:

Prompt: "Update the A record for api.example.com to point to 203.0.113.42"

1. list_zones -> finds zone_id for example.com: "abc123xyz"
2. list_dns_records(zone_id: "abc123xyz", name: "api.example.com") -> finds record_id: "rec456"
3. update_dns_record(zone_id: "abc123xyz", record_id: "rec456", type: "A", name: "api.example.com", content: "203.0.113.42")

Result: { "message": "DNS record updated", "record": { "name": "api.example.com", "content": "203.0.113.42", "proxied": true } }

Tools

Tool	What it does
`list_zones`	List all domains in your Cloudflare account with IDs and status
`get_zone`	Get full metadata for a specific zone by ID
`list_dns_records`	List A, AAAA, CNAME, MX, TXT and other DNS records for a zone
`create_dns_record`	Create a new DNS record (A, CNAME, TXT, MX, etc.)
`update_dns_record`	Update an existing DNS record by record ID
`delete_dns_record`	Permanently remove a DNS record from a zone
`purge_cache`	Purge cached content for specific URLs or the entire zone
`get_zone_analytics`	Fetch request counts, bandwidth, threats, and cache stats over a time range
`list_workers`	List all deployed Cloudflare Workers scripts in an account
`get_ssl_settings`	Read SSL mode, minimum TLS version, and HSTS config for a zone
`set_ssl_mode`	Set SSL/TLS encryption mode (off, flexible, full, full_strict)
`list_page_rules`	List URL-based Page Rules including redirects and cache overrides

Who is this for?

Solo founders and indie hackers who manage multiple domains and want to make DNS changes without leaving their AI workflow.
Platform engineers who need to purge cache, audit Workers, or triage SSL errors fast during an incident.
Agencies managing client infrastructure who want to delegate Cloudflare operations to an AI assistant with read/write API access.

Health Check

GET /health

Returns:

{ "status": "ok", "server": "cloudflare-control", "version": "1.0.0", "tools": 12 }

Also available at GET /.

Environment Variables

Variable	Required	Description
`CLOUDFLARE_API_TOKEN`	Yes	Cloudflare API token with zone and DNS permissions
`PORT`	No	HTTP port (default: 8080)

Built by Mastermind HQ

MIT License

Cloudflare Control