Connect Cloudflare to Andromity with the Cloudflare MCP server

Cloudflare runs an official MCP server at https://mcp.cloudflare.com/mcp. It covers the full Cloudflare API, more than 2,500 endpoints across products such as DNS, Workers, R2 and Zero Trust, plus the Cloudflare developer documentation. It replaces the separate Workers Bindings, Workers Builds and Observability servers, which Cloudflare has deprecated.

Instead of listing thousands of tools, the server uses a search-and-execute pattern: the agent writes JavaScript to find endpoints and to call them, and the code runs in an isolated sandbox on Cloudflare. Sign-in is OAuth: Cloudflare opens in your browser and you choose which permissions the agent gets.

What the agent can do with Cloudflare

• Search the Cloudflare API for endpoints (search).
• Call Cloudflare API endpoints with JavaScript the agent writes (execute).
• Search Cloudflare developer documentation (docs).
• Check which user or account the connection is authenticated as (whoami).
• Work with products across the API, such as DNS, Workers, R2 and Zero Trust, within the permissions you grant.

Example prompts

Ask for the work in plain language. Naming the server helps, for example “use the Cloudflare MCP server”.

• Check the DNS records for example.com against the ones in infra/dns.md and list any that differ.
• Look up the Workers limits for my plan in the Cloudflare docs and check whether the bundle size in this repo's wrangler config is within them.
• List the R2 buckets in my account and tell me which one this repository's storage code should point at.
• Find the API endpoint that lists a Worker's routes and use it to compare the routes with the ones in wrangler.toml.

Connect Cloudflare

1. In VS Code, open Andromity Hub → MCP Servers → Discover. In the terminal app, open /settings → MCP → + Connect an app. Find Cloudflare and select Connect.
2. Sign in with Cloudflare in your browser and choose the permissions to grant.
3. Andromity saves Cloudflare to ~/.andromity/mcp.json and connects it.

See Connect an app for how Andromity stores connectors and tokens.

Access and safety

• Cloudflare asks you to select the permissions the agent gets when you authorize. Grant only what you need.
• For automation, Cloudflare supports a user or account API token sent as a bearer token. Account tokens need the Account Resources : Read permission. Tokens with Client IP Address Filtering are not supported. To use one, add the server by hand in mcp.json.
• Because execute can call any API endpoint your permissions allow, Andromity's permission modes matter here.

In an untrusted folder, MCP servers don’t start at all. Read workspace trust and permission modes for the full model.

Limits to know

• Each tool result is capped at about 6,000 tokens by default, and cut content is marked --- TRUNCATED ---.
• Adding ?codemode=false to the URL registers about 2,500 individual tools instead, at roughly 244,000 tokens against about 1,000 for code mode. Cloudflare advises doing this only when necessary.
• Some features may require a paid Workers plan.

Questions

Does Cloudflare have an official MCP server?

Yes. The Cloudflare API MCP server at https://mcp.cloudflare.com/mcp covers the Cloudflare API and documentation, and Cloudflare recommends it for most people.

What happened to the Cloudflare Workers Bindings, Builds and Observability MCP servers?

Cloudflare lists them as deprecated and asks users to migrate to the Cloudflare API MCP server.

Why does the Cloudflare MCP server have so few tools?

It uses code mode: the agent searches the API spec and runs JavaScript to call endpoints, which Cloudflare says takes about 1,000 tokens regardless of endpoint count.

Sources

This guide is based on Cloudflare’s own documentation. The app controls its server, so tools can change; check the source for the current list.

• Cloudflare MCP servers
• cloudflare/mcp

Cloudflare is a trademark of its owner. Andromity is not affiliated with or endorsed by Cloudflare.