Cloudflare
Cloudflare's official MCP for Workers, KV, R2, Pages. They also host Remote MCP — your agent can connect over HTTPS without local install.
Delv Safety Grade: A
Score 84/100 · assessed 2026-04-28
Cloudflare's official MCP server provides direct API access to Workers, KV, R2, and Pages from Claude. As a major vendor implementation, maintainer trust is excellent. The server requires an API token with account-level scope, granting write access across multiple Cloudflare services—Workers can execute arbitrary code at the edge, KV and R2 allow data manipulation, and Pages enables deployment changes. Permissions are broader than read-only tools but appropriately scoped to Cloudflare's ecosystem. Supply chain score reflects the lack of npm/PyPI packaging; users must clone and build from GitHub. Transparency is strong with open source code, official documentation, and Cloudflare's developer resources. No known security incidents. The Remote MCP option (HTTPS connection) reduces local attack surface but still requires the same API credentials. Suitable for developers comfortable granting Claude programmatic control over their Cloudflare infrastructure.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREEDNS, sites, workers — broad outbound. Private API tokens. Add a fetch MCP and you have a trifecta.
Green flags
- Official Cloudflare implementation with vendor backing
- Open source repository with clear documentation
- Remote MCP option eliminates local installation requirements
- Scoped to Cloudflare ecosystem, not general filesystem or shell
- Active maintenance from major cloud infrastructure provider
Red flags
- API token grants account-wide access to Workers, KV, R2, and Pages
- Workers can execute arbitrary JavaScript code at Cloudflare edge
- No npm/PyPI package; requires manual clone-and-build installation
- Broad write permissions across multiple Cloudflare service domains
Permissions requested
Review
Install if you deploy Cloudflare Workers or manage KV/R2 regularly and want to skip the dashboard. Remote MCP is the real win here, no local setup needed. Skip if you're not already invested in Cloudflare's edge platform.
Good at
- Remote MCP hosted by Cloudflare means zero local setup, just add credentials and connect.
- Direct API access to Workers, KV, R2, and Pages from chat saves constant dashboard tab-switching.
- Official vendor support means it tracks API changes and won't bitrot like community projects.
- Prototyping edge functions in conversation is genuinely faster than wrangler CLI for small scripts.
Watch out
- Pages deployments are read-only, so you can't trigger builds or rollbacks from Claude.
- KV's eventual consistency can trip you up if you chain write-then-read operations in one prompt.
- Error messages from the Cloudflare API pass through unfiltered, often cryptic without context.
- Large R2 uploads need chunked handling that the MCP doesn't abstract, so you're back to the CLI.
Getting started
Works with
Similar MCPs
- ESXi MCPManages VMware ESXi and vCenter for VM lifecycle and real-time performance monitoring via REST and SSE.
- TerraformHashiCorp's official Terraform MCP. Connects agents to the Terraform Registry for module discovery and infrastructure-as-code automation.
- HerokuHeroku's official MCP. Manage apps, databases, dynos, and pipelines through the platform CLI from inside an agent.
- AWS LabsAWS Labs ships a growing family of MCPs for S3, Lambda, EKS, CDK, etc. Modular install — pick the services you actually use.