cloudflare_list_zones

What cloudflare_list_zones does on Integrations MCP

AI agents call cloudflare_list_zones to retrieve information from Integrations MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cloudflare_list_zones is rated Low

The 'list' verb indicates a retrieval operation that queries Cloudflare zones without modifying, deleting, or executing anything. This is a Read operation with low blast radius—even if misused, it only exposes metadata about which zones exist in the account, not their configurations or data. The empty description lowers confidence slightly, but the verb semantics are clear.

From the tool's definition Tool name 'cloudflare_list_zones' follows the 'list_*' pattern, which is a standard Read operation that retrieves data without side effects. No description provided, but the naming convention is unambiguous.

The rule that runs cloudflare_list_zones safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Integrations MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cloudflare_list_zones, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cloudflare_list_zones": {}
  }
}

Questions about cloudflare_list_zones