// MCP TOOL REFERENCE

MCP CLOUDFLARE TOOLS

14 tools from the MCP Cloudflare MCP Server, categorised by risk level.

READ TOOLS

Cross-platform Works on Linux, macOS, and Windows 2/5 get_dns_record Get a single DNS record 2/5 get_zone Get zone details by ID or domain name 2/5 list_dns_records List DNS records with filtering 2/5 list_page_rules List all page rules for a zone 2/5 list_zones List all zones accessible by your API token 2/5 Production-ready Production-grade with signal handling and non-root defaults 2/5

WRITE TOOLS

create_dns_record Create A, AAAA, CNAME, MX, TXT, NS, SRV, or CAA records 5/5 create_page_rule Create page rules for redirects and cache settings 4/5 update_dns_record Update an existing DNS record 5/5 update_page_rule Update an existing page rule 4/5

DESTRUCTIVE TOOLS

delete_dns_record Delete a DNS record permanently 5/5 delete_page_rule Delete a page rule permanently 4/5 purge_cache Purge cache by URL, tag, host, prefix, or everything 5/5

// FAQ

How many tools does the MCP Cloudflare MCP server have? +

The MCP Cloudflare MCP server exposes 14 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on MCP Cloudflare tools? +

Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the MCP Cloudflare server.

What risk categories do MCP Cloudflare tools fall into? +

MCP Cloudflare tools are categorised as Read (7), Write (4), Destructive (3). Each category has a recommended default policy.

Enforce policies on MCP Cloudflare

Open source. One binary. Zero dependencies.

npx -y @policylayer/intercept

github.com/policylayer/intercept →