// SCAN REPORT

Cloudflare

92 tools. 6 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 12 Jun 2026

6 can modify or destroy data

86 read-only

92 tools total

Verified publisher · catalogue entry checked 12/06/2026

How to control Cloudflare ↓

TOOL MAP

What Cloudflare exposes to your agents

Read (86) Write / Execute (5) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Cloudflare tools

Destructive · High container_file_delete File deletion cannot be undone and permanently removes data. Execute · Critical container_exec The tool permits running arbitrary commands in a container, which can have unpredictable and severe side effects depending on what commands an AI agent chooses to execute. Execute · High container_initialize Starting/restarting a container is an Execute operation—it triggers an external system state change and enables code execution. Execute · High dex_create_remote_pcap This tool triggers an external operation (packet capture) on a real user device.

6 of Cloudflare's 92 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Cloudflare

PolicyLayer is an MCP gateway — it sits between your AI agents and Cloudflare, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "container_file_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "container_file_write": {
    "limits": [
      {
        "counter": "container_file_write_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "container_file_read": {
    "limits": [
      {
        "counter": "container_file_read_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Cloudflare — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON CLOUDFLARE →

Instant setup, no code required.

FULL CATALOGUE

All 92 Cloudflare tools

DESTRUCTIVE 1 tools

Destructive container_file_delete Delete file in the working directory

EXECUTE 4 tools

Execute container_exec Run a command in a container and return the results from stdout. If necessary, set a timeout. To debug, str Execute container_initialize Start or restart the container. Use this tool to initialize a container before running any python or node.j Execute dex_create_remote_pcap Create a remote packet capture (PCAP) for a device. This is a resource intensive and privacy-sensitive operati Execute dex_create_remote_warp_diag Create a remote Warp Diagnostic (WARP-diag) for a device. This is a resource intensive and privacy-sensitive o

WRITE 1 tools

Write container_file_write Create a new file with the provided contents in the working direcotry, overwriting the file if it already exis

READ 86 tools

Read container_file_read Read a specific file or directory. Use this tool if you would like to read files or display them to the user. Read container_files_list List working directory file tree. This just reads the contents of the current working directory Read container_ping Ping the container for liveliness. Use this tool to check if the container is running. Read dex_analyze_warp_diag Analyze successful WARP-diag remote captures for common issues. This should be the first place you start when Read dex_explore_remote_warp_diag_output Explore the contents of remote capture WARP diag archive filepaths returned by the dex_list_remote_warp_diag_c Read dex_fleet_status_live Retrieve details about the real-time status of the fleet of devices broken down by dimension (mode, status, co Read dex_fleet_status_logs Retrieve raw fleet status device logs with a variety of levels of granularity and filtering. Use Read dex_fleet_status_over_time Retrieve aggregate time series details about the status of the fleet of devices, or performance metrics for a Read dex_http_test_details Retrieve detailed time series results for an HTTP DEX test by id. Read dex_list_colos View a list of Cloudflare colos sorted alphabetically or by frequency encountered in fleet status or DEX test Read dex_list_remote_capture_eligible_devices Retrieve a list of devices eligible for remote captures. You Read dex_list_remote_captures Retrieve a list of remote captures for device debugging, like PCAPs or WARP Diags. Read dex_list_remote_warp_diag_contents Given a WARP diag remote capture id and device_id, returns a list of the files contained in the archive. Read dex_list_tests Retrieve a list of all Cloudflare DEX Tests configured. Read dex_list_warp_change_events View logs of events when users toggle WARP on or off, or change configurations. Read dex_test_statistics Analyze Cloudflare DEX Test Results by quartile given a Test ID Read dex_traceroute_test_details Retrieve detailed time series results for a Traceroute DEX test by id. Read dex_traceroute_test_network_path Retrieve aggregate network path data for a Traceroute DEX test by id. Use the dex_traceroute_test_result_netwo Read dex_traceroute_test_result_network_path Retrieve the hop-by-hop network path for a specific Traceroute DEX test result by id. Read dns_report Fetch the DNS Report for a given zone since a date Read get_ai_data Retrieves AI-related data, including traffic from AI user agents, as well as popular models and model tasks sp Read get_annotations Retrieve annotations including Internet events, outages, and anomalies from various Cloudflare data sources. Read get_as_details Get Autonomous System details by ASN Read get_as_relationships Get AS-level relationships for an Autonomous System. Shows peer, upstream, and downstream relationships with o Read get_as_set Get IRR AS-SETs that an Autonomous System is a member of. AS-SETs are used in routing policies. Read get_as112_data Retrieve AS112 DNS sink hole data. AS112 handles reverse DNS lookups for private IP addresses (RFC 1918). Usef Read get_bgp_hijacks Retrieve BGP hijack events. BGP hijacks occur when an AS announces routes it does not own, potentially redirec Read get_bgp_ip_space_timeseries Retrieve announced IP address space time series data. Shows the count of announced IPv4 /24s and IPv6 /48s ove Read get_bgp_leaks Retrieve BGP route leak events. Route leaks occur when an AS improperly announces routes learned from one peer Read get_bgp_moas Get Multi-Origin AS (MOAS) prefixes. MOAS occurs when a prefix is announced by multiple ASes, which can indica Read get_bgp_pfx2as Get prefix-to-ASN mapping. Useful for looking up which AS announces a given IP prefix. Read get_bgp_route_stats Retrieve BGP routing table statistics including number of routes, origin ASes, and more. Read get_bgp_routes_realtime Get real-time BGP routes for a specific IP prefix using public route collectors (RouteViews and RIPE RIS). Sho Read get_bgp_routing_table_ases List all ASes in global routing tables with routing statistics (prefix counts, IPv4/IPv6 address count, RPKI v Read get_bgp_rpki_aspa_changes Retrieve RPKI ASPA changes over time, including additions, removals, and modifications of ASPA objects. Read get_bgp_rpki_aspa_snapshot Retrieve a snapshot of current or historical RPKI ASPA (Autonomous System Provider Authorization) objects. ASP Read get_bgp_rpki_aspa_timeseries Retrieve a timeseries of RPKI ASPA object counts over time. Read get_bgp_timeseries Retrieve BGP updates time series data. Shows BGP announcement and withdrawal patterns over time. Read get_bgp_top_ases Get top Autonomous Systems by BGP update count. Read get_bgp_top_ases_by_prefixes Get top ASes ordered by announced prefix count. Useful for understanding which networks have the largest routi Read get_bgp_top_prefixes Get top IP prefixes by BGP update count. Read get_bot_details Get detailed information about a specific bot by its slug identifier. Read get_bots_crawlers_data Retrieve web crawler HTTP request data. Shows crawler traffic patterns by client type, user agent, referrer, a Read get_bots_data Retrieve bot traffic data including trends by bot name, operator, category, and kind. Covers AI crawlers, sear Read get_certificate_transparency_data Retrieve Certificate Transparency (CT) log data. CT provides visibility into SSL/TLS certificates issued for d Read get_ct_authority_details Get details for a specific Certificate Authority by its SHA256 fingerprint. Read get_ct_log_details Get details for a specific Certificate Transparency log by its slug. Read get_dns_queries_data Retrieve trends in DNS queries to the 1.1.1.1 resolver. Read get_domain_rank_details Get domain rank details Read get_domains_ranking Get top or trending domains Read get_domains_ranking_timeseries Get domain ranking timeseries data. Track how specific domains rank over time. Read get_email_routing_data Retrieve Email Routing trends. Read get_email_security_data Retrieve Email Security trends. Read get_geolocation_details Get details for a specific geolocation by its GeoNames ID. Read get_http_data Retrieve HTTP traffic trends. Read get_internet_quality_data Retrieves a summary or time series of bandwidth, latency, or DNS response time percentiles from the Radar Inte Read get_internet_services_ranking Get top Internet services Read get_internet_services_timeseries Track internet service ranking changes over time. Useful for monitoring how services like ChatGPT, Google, etc Read get_internet_speed_data Retrieve summary of bandwidth, latency, jitter, and packet loss, from the previous 90 days of Cloudflare Speed Read get_ip_details Get IP address information including full ASN details (name, country, population estimates from APNIC). Read get_l3_attack_data Retrieve network layer (L3/DDoS) attack trends. Read get_l7_attack_data Retrieve application layer (L7) attack trends. Read get_leaked_credentials_data Retrieve trends in HTTP authentication requests and compromised credential detection. Shows distribution by co Read get_netflows_data Retrieve NetFlows traffic data showing network traffic patterns. Supports filtering by ADM1 (administrative le Read get_origin_details Get details for a specific cloud provider origin, including all available regions. Read get_origins_data Retrieve cloud provider (AWS, GCP, Azure, OCI) performance metrics. Supports timeseries, summaries grouped by Read get_outages Retrieve Internet outages and anomalies. Provides information about detected connectivity issues across ASes a Read get_outages_by_location Get outage counts aggregated by location. Useful for identifying which countries have the most Internet outage Read get_robots_txt_data Retrieve robots.txt analysis data. Shows how websites configure crawler access rules, particularly for AI craw Read get_speed_histogram Get speed test histogram data. Shows distribution of speed test results for bandwidth, latency, or jitter. Read get_tcp_resets_timeouts_data Retrieve TCP connection quality metrics including resets and timeouts. Useful for understanding connection rel Read get_tld_details Get detailed information about a specific top-level domain (TLD). Read get_traffic_anomalies Get traffic anomalies and outages Read get_traffic_anomalies_by_location Get traffic anomalies aggregated by location. Shows which countries have the most detected outage signals, aut Read graphql_api_explorer Generate a Cloudflare GraphQL API Explorer link Use this tool when: - A user asks for any GraphQL queri Read list_autonomous_systems List Autonomous Systems Read list_bots List known bots with their details. Includes AI crawlers, search engines, monitoring bots, and more. Filter by Read list_ct_authorities List Certificate Authorities (CAs) tracked in Certificate Transparency logs. Read list_ct_logs List Certificate Transparency logs. Read list_geolocations List available geolocations (ADM1 - administrative divisions like states/provinces). Use this to find GeoNames Read list_origins List cloud provider origins (hyperscalers) available in Cloud Observatory. Returns Amazon (AWS), Google (GCP), Read list_tlds List top-level domains (TLDs) including generic, country-code, and sponsored TLDs. Filter by type or manager. Read mcp_demo_day_info Get information about Cloudflare Read migrate_pages_to_workers_guide ALWAYS read this guide before migrating Pages projects to Workers. Read search_cloudflare_documentation Search the Cloudflare documentation. You should use this tool when: - A user asks questions about Cloudfl Read show_zone_dns_settings Show DNS settings for a zone

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Cloudflare

Can an AI agent delete data through the Cloudflare MCP server? +

Yes. The Cloudflare server exposes 1 destructive tools including container_file_delete. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Cloudflare? +

The Cloudflare server has 1 write tools including container_file_write. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Cloudflare.

How many tools does the Cloudflare MCP server expose? +

92 tools across 4 categories: Destructive, Execute, Read, Write. 86 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on Cloudflare? +

Register the Cloudflare MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Cloudflare tool call.

Deterministic rules across all 92 Cloudflare tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON CLOUDFLARE →

Instant setup, no code required.

92 Cloudflare tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Cloudflare's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →