The Cloudflare MCP server exposes every first-party Cloudflare product — zones, DNS, workers, R2, D1, KV, AI Gateway, Pages — as callable tools. With Open Think's `cloudflare-api-mcp` plugin pointed at it, Helm can provision infra, audit resources, and reason about your account in plain English. The rollback registry covers the destructive mutations so you can undo safely.

Install

1 · Config

Append to ENABLED_PLUGINS in wrangler.toml:

cloudflare-api-mcp

Append to ALLOWED_HOSTS:

api.cloudflare.com,mcp.cloudflare.com

2 · Secrets

Run each from your Worker project:

• wrangler secret put CLOUDFLARE_API_TOKEN Scoped token — we suggest Workers Scripts:Edit + D1:Edit + Zone:Edit at minimum. · must match ^[A-Za-z0-9_\-]{20,}$

CLOUDFLARE_API_TOKEN=Scoped token — we suggest Workers Scripts:Edit + D1:Edit + Zone:Edit at minimum.

Tags

Related

• MCP Client — Connect to any MCP server — Cloudflare, Notion, Linear, or custom.
• Cloudflare MCP Server — Every Cloudflare product as callable tools.
• GitHub MCP Server — Issues, PRs, files, and searches from your agent.