English Français العربية

Cloudflare MCP Go

مجتمعي أدوات المطورين

Cloudflare API v4 server: 28 tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center insights, and threat intelligence (IP/domain/ASN/WHOIS/passive DNS). Currently read-only. Install with go run github.com/M-Yamashita01/cloudflare-mcp-go@latest.

الشيفرة المصدرية التوثيق

التثبيت

خطوات التثبيت موجودة في التوثيق أدناه. التوثيق

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. cloudflare-mcp-go
  2. Quick start
  3. Tools
  4. Usage examples
  5. Configuration
  6. Build & run manually
  7. Project structure

cloudflare-mcp-go

An MCP (Model Context Protocol) server for the Cloudflare API v4, written in Go.

It lets any MCP client (Claude, and other MCP-compatible tools) inspect and investigate your Cloudflare account through natural language: zones, DNS, WAF and firewall rules, rate limits, HTTP request logs, Security Center insights, and threat intelligence. The server is read-focused and geared toward security triage and investigation workflows.

Quick start

Requires a Cloudflare API token and Go 1.25+.

Add it to Claude Code with a single command:

claude mcp add cloudflare \
  -e CLOUDFLARE_API_TOKEN=your-api-token \
  -- go run github.com/M-Yamashita01/cloudflare-mcp-go@latest

That is all — no manual clone or build required. CLOUDFLARE_ACCOUNT_ID is optional and only needed by a few tools (accounts, audit logs, KV, intel).

Tools

117 read-only tools grouped by domain, plus optional write tools (marked below) that are registered only when CLOUDFLARE_MCP_ENABLE_WRITE=true.

Zones & DNS
ToolDescription
list_zonesList zones in your account (ID, name, status, plan).
get_zoneGet details of a specific zone.
get_zone_settingsGet a zone's configuration settings (SSL mode, min TLS, cache level, security level).
purge_cachePurge a zone's cache: everything, or by file/tag/host/prefix (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
list_dns_recordsList DNS records for a zone (type, name, content, TTL, proxy status).
get_dns_recordGet a single DNS record by ID (type, name, content, TTL, proxy status, comment).
get_dns_analyticsDNS query analytics: query counts, response codes, query type distribution.
get_dns_analytics_bytimeDNS query analytics grouped by time interval (time-series).
export_dns_recordsExport all DNS records for a zone as a BIND zone file.
get_dns_record_usageDNS record usage counts for a zone (toward plan limits).
get_dns_settingsGet a zone's DNS settings (Foundation DNS, multi-provider, nameservers, zone mode).
get_dnssecGet DNSSEC details for a zone (status, DS record, digest, key tag, algorithm).
list_dnssec_zskList DNSSEC Zone Signing Keys (ZSKs) for a zone (multi-signer DNSSEC).
list_scanned_dns_recordsList DNS records discovered by a scan, pending review.
create_dns_recordCreate a DNS record (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_dns_recordUpdate a DNS record, partial fields (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_dns_recordDelete a DNS record by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
overwrite_dns_recordOverwrite (fully replace) a DNS record by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
batch_dns_recordsApply a batch of DNS record changes atomically (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
import_dns_recordsImport DNS records from a BIND zone file (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
scan_dns_recordsScan a zone for DNS records at common names (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
trigger_dns_record_scanTrigger an async DNS record scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
review_scanned_dns_recordsAccept/reject DNS records found by a scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_dns_settingsUpdate a zone's DNS settings (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
edit_dnssecEdit a zone's DNSSEC status (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_dnssecDelete a zone's DNSSEC records (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
Firewall, WAF & rate limiting
ToolDescription
list_ip_access_rulesIP access rules that block, challenge, or allow IPs, CIDRs, ASNs, or countries.
create_ip_access_ruleCreate an IP access rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_ip_access_ruleUpdate an IP access rule's mode/notes (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_ip_access_ruleDelete an IP access rule by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
list_waf_managed_rulesetsWAF managed rulesets entrypoint and which managed rulesets are enabled.
list_firewall_rulesCustom firewall rules with expressions, actions, and priorities.
get_firewall_ruleFull configuration of a specific firewall rule by ID.
list_rulesetsAll rulesets for a zone (metadata only).
get_rulesetA specific ruleset with all its rules.
create_rulesetCreate a ruleset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_rulesetUpdate a ruleset's name/description/rules (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_rulesetDelete a ruleset by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
list_rate_limitsRate limiting rules: thresholds, match criteria, actions.
get_rate_limitFull configuration of a specific rate limiting rule by ID.
create_rate_limitCreate a rate limit rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_rate_limitUpdate a rate limit rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_rate_limitDelete a rate limit rule by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
Security events & logs
ToolDescription
query_security_eventsQuery security events via the GraphQL Analytics API for triage.
get_log_by_rayidLook up an HTTP request log entry by Cloudflare Ray ID.
list_received_logsRetrieve HTTP request logs for a time range (max 1h, data ≥5min old).
list_log_fieldsList available HTTP request log fields.
list_logpush_jobsList Logpush jobs for a zone (dataset, destination, enabled).
get_logpush_jobGet a specific Logpush job in a zone by ID.
list_logpush_dataset_jobsList Logpush jobs for a specific dataset in a zone.
list_logpush_dataset_fieldsList available Logpush fields for a dataset in a zone.
list_instant_logs_jobsList Instant Logs (edge) jobs for a zone.
get_log_retention_flagGet a zone's log retention flag.
list_log_datasetsList Logs Explorer datasets for a zone.
list_available_log_datasetsList available Logs Explorer datasets for a zone.
get_log_datasetGet a Logs Explorer dataset for a zone by ID.
query_logs_sqlRun a Logs Explorer SQL query for a zone (GET).
list_account_logpush_jobsList Logpush jobs for an account.
get_account_logpush_jobGet a specific Logpush job in an account by ID.
list_account_logpush_dataset_jobsList Logpush jobs for a dataset in an account.
list_account_logpush_dataset_fieldsList available Logpush fields for a dataset in an account.
list_account_logpush_transformersList Logpush transformers for an account.
get_account_logpush_transformerGet a Logpush transformer in an account by ID.
get_account_logpush_transformer_contentGet a Logpush transformer's content in an account.
list_account_logpush_transformer_versionsList versions of a Logpush transformer in an account.
get_account_audit_logs_v2Get account audit logs (v2) with since/before/limit.
list_account_audit_log_product_categoriesList product categories for account audit logs (v2).
get_account_audit_log_historyGet change history for an account audit log entry (v2).
get_cmb_configGet the Customer Metadata Boundary (CMB) config for an account.
list_account_log_datasetsList Logs Explorer datasets for an account.
list_available_account_log_datasetsList available Logs Explorer datasets for an account.
get_account_log_datasetGet a Logs Explorer dataset for an account by ID.
query_account_logs_sqlRun a Logs Explorer SQL query for an account (GET).
list_account_log_filesList stored log files for an account (start/end/bucket).
retrieve_account_logsRetrieve stored log entries (NDJSON) for an account.
create_account_logpush_jobCreate an account Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_logpush_jobUpdate an account Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_account_logpush_jobDelete an account Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
get_account_logpush_ownership_challengeRequest an account Logpush ownership challenge (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_account_logpush_ownershipValidate an account Logpush ownership challenge (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_account_logpush_transformerCreate an account Logpush transformer (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
preview_account_logpush_transformerPreview an account Logpush transformer (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_logpush_transformerUpdate an account Logpush transformer (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_account_logpush_transformerDelete an account Logpush transformer (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_account_logpush_destinationValidate an account Logpush destination (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
check_account_logpush_destination_existsCheck an account Logpush destination exists (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_account_logpush_originValidate account Logpush origin options (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_cmb_configUpdate the Customer Metadata Boundary config (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_cmb_configDelete the Customer Metadata Boundary config (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_account_log_datasetCreate an account Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_log_datasetUpdate an account Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_account_log_datasetDelete an account Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
run_account_logs_sql_queryRun an account Logs Explorer SQL query (POST) (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_logpush_jobCreate a zone Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_logpush_jobUpdate a zone Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_logpush_jobDelete a zone Logpush job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_instant_logs_jobCreate a zone Instant Logs job (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
get_logpush_ownership_challengeRequest a zone Logpush ownership challenge (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_logpush_ownershipValidate a zone Logpush ownership challenge (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_logpush_destinationValidate a zone Logpush destination (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
check_logpush_destination_existsCheck a zone Logpush destination exists (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
validate_logpush_originValidate zone Logpush origin options (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_log_retention_flagEnable/disable zone log retention (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_log_datasetCreate a zone Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_log_datasetUpdate a zone Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_log_datasetDelete a zone Logs Explorer dataset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
run_logs_sql_queryRun a zone Logs Explorer SQL query (POST) (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
Security Center
ToolDescription
list_security_insightsSecurity Center insights with severity, type, and classification.
list_account_security_insightsSecurity Center insights for an account (account scope).
get_account_insight_countsAccount insight counts by dimension (class/severity/type).
get_account_insights_audit_logAccount Security Center insights audit log.
get_account_partner_insight_countAccount partner-provided insight count.
get_account_recent_scansRecent Security Center scans for an account.
get_account_issue_audit_logAudit log for an account Security Center insight.
get_account_insight_contextContext (affected resources) for an account insight.
get_partner_integration_settingsPartner integration settings for an account.
list_partner_shadow_zonesPartner-discovered shadow zones for an account.
list_partner_shadow_zone_hostsHosts in a partner-discovered shadow zone.
get_account_security_center_stateSecurity Center state for an account.
get_zone_insights_audit_logZone Security Center insights audit log.
get_zone_partner_insight_countZone partner-provided insight count.
get_zone_recent_scansRecent Security Center scans for a zone.
get_zone_issue_audit_logAudit log for a zone Security Center insight.
list_zone_partner_shadow_hostsPartner-discovered shadow hosts for a zone.
get_securitytxtGet a zone's security.txt configuration.
update_account_insight_classificationUpdate an account insight classification (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
dismiss_account_insightDismiss/archive an account insight (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
start_account_scanStart an on-demand account Security Center scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_partner_integration_settingsUpdate Security Center partner integration settings for an account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_security_center_stateUpdate the Security Center state for an account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
start_zone_scanStart an on-demand zone Security Center scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_zone_insight_classificationUpdate the classification of a Security Center insight in a zone (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
dismiss_zone_insightDismiss or un-dismiss a Security Center insight in a zone (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_securitytxtCreate or update the security.txt for a zone (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_securitytxtDelete the security.txt for a zone (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
get_insight_countsAggregated insight counts by severity, class, or type.
Threat intelligence
ToolDescription
get_ip_intelThreat intelligence for an IP: geolocation, ASN, infrastructure, threat categories.
get_domain_intelSecurity intelligence for a domain: risk scores, categories, DNS info.
get_domain_intel_bulkThreat intelligence for multiple domains at once.
get_domain_historyHistorical threat data and classifications for a domain.
list_passive_dnsDomains that have resolved to a given IP (passive DNS).
get_whoisWHOIS registration data for a domain.
get_asn_intelASN overview and subnet allocations.
list_attack_surface_issue_typesSecurity Center attack-surface issue types.
list_attack_surface_issuesSecurity Center attack-surface issues (misconfigurations, exposures).
get_attack_surface_issue_counts_by_classAttack-surface issue counts by class.
get_attack_surface_issue_counts_by_severityAttack-surface issue counts by severity.
get_attack_surface_issue_counts_by_typeAttack-surface issue counts by type.
get_ip_listsAvailable threat-intelligence IP lists for an account.
get_bulk_domain_detailsThreat intel details for multiple domains (GET bulk).
get_url_intelThreat intelligence for a URL (risk, categories).
list_indicator_feedsList indicator feeds owned by an account.
list_indicator_feed_permissionsList indicator feed view permissions for an account.
get_indicator_feedGet indicator feed metadata by ID.
get_indicator_feed_dataGet raw indicator feed data by ID (STIX/CSV).
download_indicator_feed_dataDownload latest indicator feed snapshot by ID.
get_indicator_feed_upload_statusGet status of an indicator feed upload.
list_sinkholesList DNS sinkholes owned by an account.
get_sinkholeGet a DNS sinkhole by ID.
list_sinkhole_ingressesList ingress rules for a sinkhole.
dismiss_security_center_insightDismiss/archive a Security Center insight (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_indicator_feedCreate an indicator feed (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
grant_indicator_feed_permissionGrant indicator feed view permission (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_indicator_feed_providerCreate an indicator feed provider (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
revoke_indicator_feed_permissionRevoke indicator feed view permission (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_indicator_feedUpdate indicator feed metadata (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_indicator_feed_dataUpload a new indicator feed snapshot (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_miscategorizationReport a domain/IP/URL miscategorization (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_sinkholeCreate a DNS sinkhole (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_sinkholeUpdate a DNS sinkhole (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_sinkholeDelete a DNS sinkhole by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
Account & audit
ToolDescription
list_accountsCloudflare accounts accessible with the current token.
get_account_detailsGet details of a specific account by ID.
list_account_membersList members of an account (user, roles, status).
get_account_memberGet an account member by ID (user, roles, policies).
list_account_rolesList roles available in an account.
get_account_roleGet an account role by ID (name, permissions).
list_account_subscriptionsList subscriptions for an account.
get_account_subscriptionGet an account subscription by ID.
get_subscription_cancel_reasonGet a subscription's cancellation reason.
list_account_tokensList account-owned API tokens.
list_token_permission_groupsList permission groups for account API tokens.
verify_account_tokenVerify the account API token is valid and active.
get_account_tokenGet an account API token by ID (name, policies, status).
create_accountCreate a new account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_accountUpdate an account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_accountDelete an account by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
add_account_memberAdd a member to an account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_memberUpdate an account member (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
remove_account_memberRemove a member from an account (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_account_subscriptionCreate an account subscription (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
cancel_delayed_downgradeCancel a pending subscription downgrade (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_subscriptionUpdate an account subscription (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_account_subscriptionDelete an account subscription (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
append_subscription_actionAppend an action to a subscription (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_subscription_cancel_reasonRecord a subscription cancellation reason (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_account_tokenCreate an account API token (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
update_account_tokenUpdate an account API token (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_account_tokenDelete an account API token by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
roll_account_tokenRoll (regenerate) an account API token value (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
list_audit_logsAccount audit log entries (who changed what and when).
list_user_audit_logsUser-scoped audit log entries.
list_kv_namespacesWorkers KV namespaces in an account.
get_kv_namespaceGet a KV namespace by ID.
get_kv_pairs_bulkGet multiple KV pairs at once (read-only; POST bulk/get).
list_kv_keysList keys in a KV namespace (prefix filter, cursor pagination).
get_kv_valueRead the raw stored value for a key in a KV namespace.
get_kv_metadataRead the metadata associated with a key in a KV namespace.
write_kv_pairWrite a key-value pair, optional TTL (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_kv_pairDelete a key-value pair by key (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
create_kv_namespaceCreate a KV namespace (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_kv_namespaceDelete a KV namespace by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
rename_kv_namespaceRename a KV namespace (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
write_kv_pairs_bulkWrite multiple KV pairs at once (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_kv_pairs_bulkDelete multiple KV pairs at once, DELETE bulk (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).
delete_kv_pairs_bulk_postDelete multiple KV pairs at once, POST bulk/delete (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true).

Usage examples

Once connected, ask your MCP client things like:

  • "List the DNS records for example.com."
  • "A request was blocked with Ray ID 8f1c2d3e4f5a6b7c — why?"
  • "Show me the high-severity Security Center insights for this zone."
  • "Is IP 203.0.113.10 known to be malicious? What domains resolve to it?"
  • "Which firewall rules are currently challenging traffic?"

Configuration

The server communicates over stdio and can be connected from any MCP client.

VariableRequiredPurpose
CLOUDFLARE_API_TOKENYesAuthenticates all Cloudflare API calls.
CLOUDFLARE_ACCOUNT_IDNoNeeded by account, audit log, KV, and intel tools.
CLOUDFLARE_MCP_ENABLE_WRITENoEnables write (mutation) tools when set to exactly true. Unset or empty keeps them disabled (default); any other value is rejected (logged to stderr) and the server stays read-only.
Claude Code
claude mcp add cloudflare \
  -e CLOUDFLARE_API_TOKEN=your-api-token \
  -- go run github.com/M-Yamashita01/cloudflare-mcp-go@latest

Or, if you have the repository cloned locally:

claude mcp add cloudflare -e CLOUDFLARE_API_TOKEN=your-api-token -- go run .
Claude Desktop / other MCP clients

Build the binary and point your client's MCP config at it. On macOS the Claude Desktop config lives at ~/Library/Application Support/Claude/claude_desktop_config.json:

go build -o cloudflare-mcp-go .
{
  "mcpServers": {
    "cloudflare": {
      "command": "/path/to/cloudflare-mcp-go",
      "env": {
        "CLOUDFLARE_API_TOKEN": "your-api-token"
      }
    }
  }
}

Any MCP-compatible client can connect via stdio transport using the same pattern.

Build & run manually

go build -o cloudflare-mcp-go .
export CLOUDFLARE_API_TOKEN="your-api-token"
./cloudflare-mcp-go

Project structure

main.go                  # Entry point
internal/
  cfapi/                 # Shared Cloudflare API client
  tool/
    zone/                # Zone management tools
    dns/                 # DNS record & analytics tools
    account/             # Account management tools
    audit/               # Audit log tools
    kv/                  # Workers KV tools
    security/            # Firewall, WAF & rate limiting tools
    securitycenter/      # Security Center insight tools
    intel/               # Threat intelligence tools
    logs/                # HTTP request log tools
doc/
  architecture.md        # Architecture documentation

See doc/architecture.md for detailed design documentation.

الأسئلة الشائعة

ما هو Cloudflare MCP Go؟

Cloudflare API v4 server: 28 tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center insights, and threat intelligence (IP/domain/ASN/WHOIS/passive DNS). Currently read-only. Install with go run github.com/M-Yamashita01/cloudflare-mcp-go@latest.

كيف أثبّت Cloudflare MCP Go؟

اتبع خطوات التثبيت في توثيقه المعروض في هذه الصفحة وفي مستودعه.

هل Cloudflare MCP Go مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون Cloudflare MCP Go؟

ينشره M-Yamashita01. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من القوائم المجتمعية awesome-mcp-servers ومستودع المشروع على GitHub. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.