How to connect Cloudflare to Claude

Connect Claude Web, Desktop and Cowork to Cloudflare MCP. Add new a record for your domain, list all firewall rules for zone, and more using natural language, with authentication handled for you.

Cloudflare logoCloudflare
Api Key

Cloudflare is a global network that secures and accelerates web traffic. It helps protect your sites and APIs from attacks while ensuring reliable performance.

127 Tools

Introduction

Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf.

This guide walks you through the easiest and most secure way to connect your Cloudflare account to Claude via Composio Connect, enabling it to add new A record for your domain, list all firewall rules for zone, show members of your Cloudflare account, and more such actions on your behalf without compromising your account security.

Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three.

Also integrate Cloudflare with

Connecting Cloudflare to Claude Web, Desktop, and Cowork

Two ways to add the Composio connector. Pick whichever you prefer.

1. Add with one click

Click the button. Claude opens with the Composio connector filled in. Click Add, then go to step 2.

Add to Claude

Add manually

In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top.

Claude Desktop connectors screen with Add custom connector selected

Click Add custom connector and paste in the Composio MCP server URL:

bash
https://connect.composio.dev/mcp
Add custom connector dialog with Composio MCP server URL

2. Authorize in your browser

Click Connect. You'll be redirected to a browser window where you can authorize Composio to continue.

Composio authorization screen for Claude Web, Desktop, and Cowork

3. Connect your Cloudflare account

Back in Claude, ask it to connect to Cloudflare or give it any Cloudflare-related task.

For example, ask Claude to:

  • "Add new A record for your domain"
  • "List all firewall rules for zone"
  • "Show members of your Cloudflare account"

It will prompt you to authenticate and authorize access.

That's it. Composio's tools are now available in Claude, and your Cloudflare account is ready to use.

What is the Cloudflare Claude Connector, and what's possible with it?

The Cloudflare MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Cloudflare account. It provides structured and secure access to your Cloudflare infrastructure, so your agent can perform actions like managing DNS records, configuring WAF lists, auditing firewall rules, and overseeing zones and account members—all on your behalf.

  • DNS record management: Effortlessly create or delete DNS records within any zone, allowing your agent to automate domain setup and maintenance tasks.
  • WAF list and firewall rule automation: Direct your agent to create, list, or delete Web Application Firewall (WAF) lists and audit firewall rules to enhance your site's security posture.
  • Zone administration: Enable your agent to create new zones when adding domains or delete zones that are no longer needed, streamlining domain onboarding and cleanup.
  • Account and member management: Let your agent list all Cloudflare accounts you have access to and enumerate members within each account for audit or collaboration purposes.
  • Comprehensive infrastructure visibility: Ask your agent to fetch and review your entire Cloudflare account structure, making it simple to monitor resources and configurations at scale.

Troubleshooting

1. Why does Claude not use the Composio connector for Cloudflare?

The connector can show as connected, but Claude must use it in each Cloudflare conversation.

  • Click + at the lower left of the chat, or type /.
  • Hover Connectors.
  • Turn on Composio.
  • Ask Claude to connect to Cloudflare again.

2. Why does Claude show an MCP server error before Cloudflare connects?

Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for Cloudflare.

  • Check that the connector URL is https://connect.composio.dev/mcp.
  • Connectors run from Anthropic's cloud, so your device network is usually not the problem.
  • Add the connector again from Customize > Connectors, then ask Claude to connect Cloudflare.
  • If it fails again, send the error and the ofid_ reference id to support@composio.dev.

3. Why does the Cloudflare authorization link not work?

The Composio connector is one server. Your Cloudflare account connects separately when Claude asks for it.

  • If the browser does not open, or the link expires, ask Claude to retry the Cloudflare connection.
  • Composio creates a fresh Cloudflare authorization link.
  • Open that link in your browser and finish the Cloudflare sign-in.

4. Why do Cloudflare actions fail after they worked before?

The Cloudflare connection can expire or lose permission.

  • Ask Claude to inspect the Cloudflare connection.
  • If the connection is unhealthy, disconnect it when Claude prompts you.
  • Reconnect the Cloudflare account and retry the action.
  • If Claude shows a permission prompt, approve it before Claude changes data in Cloudflare.
  • If the action still fails with a permission error, check that the connected account has that permission in Cloudflare itself.

5. How do I switch to a different Cloudflare account?

Claude can manage the Cloudflare connection for you.

  • Ask Claude to disconnect or delete the current Cloudflare account.
  • Ask Claude to connect Cloudflare again.
  • Open the new Composio authorization link for Cloudflare.
  • Sign in with the other Cloudflare account in the browser.
  • After the account connects, ask Claude to retry the Cloudflare task.

6. Why is my Cloudflare connection missing in Claude Desktop or on a Team plan?

The connector belongs to your Claude account, so your Cloudflare connection works in Claude Web, Desktop, and Cowork.

  • In Claude Desktop, open Customize > Connectors.
  • Next to Composio, click ⋮ and click Clear cache.
  • If Cloudflare tools still do not appear, click ⋮, disconnect, remove the connector, and add it again.
  • On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect Cloudflare.
TOOLS

Supported Tools

Every Cloudflare action and event your agent gets out of the box.

Bulk Read KV Values

Read up to 100 text or JSON values from a Workers KV namespace.

Bulk Write Workers KV Entries

Create or overwrite up to 10,000 entries in one Workers KV namespace.

Capture Browser Snapshot

Render a URL or supplied HTML and return selected page representations.

Check Registrar Domains

Check authoritative registration availability and pricing for up to 20 domains.

Create Account API Token

Create an account-owned API token and return its one-time secret value.

Create Alert Policy

Create an account-level Cloudflare notification policy.

Create D1 Database

Create a D1 database with optional placement and replication settings.

Create DNS record

Tool to create a new DNS record within a specific zone.

Create Email Routing Address

Register an Email Routing destination; Cloudflare sends it a verification email.

Create KV Namespace

Create a classic or KV Instant namespace in a Cloudflare account.

Create WAF List

Create a new empty custom list for use in WAF rules and filters.

Create Pages Deployment

Create a Cloudflare Pages deployment from a Git branch or Direct Upload manifest.

Create Pages Project

Create a Cloudflare Pages project for a production branch.

Create Turnstile Widget

Create a Turnstile challenge widget for selected domains.

Create User API Token

Create a user API token carrying supplied grants.

Create Worker

Create a beta Worker resource and configure its observability, previews, subdomain, tags, and tail consumers.

Create Worker Deployment

Deploy existing Worker versions immediately to live traffic by percentage.

Create Worker Version

Upload code, assets, and configuration as a new Worker version without deploying it to production traffic.

Create Zone

Creates a new DNS zone (domain) in Cloudflare.

Delete Account API Token

Permanently and irreversibly revoke an account-owned Cloudflare API token.

Delete DNS Record

Tool to delete a DNS record within a specific zone.

Delete WAF List

Tool to delete a WAF list.

Delete Pages Deployment

Delete a selected non-production Cloudflare Pages deployment.

Delete User API Token

Permanently revoke one user-owned Cloudflare API token.

Delete Worker

Permanently delete a beta Worker and its versions and deployments.

Delete Worker Script

Delete a classic Worker script.

Delete Zone

Tool to delete a zone.

Deploy Worker Script

Upload or replace a JavaScript module Worker script and create its latest version.

Deploy Worker With Assets

Upload static assets, create a Worker version, and deploy all traffic to it.

Download Worker Script

Download the raw source or multipart module bundle for a Worker script.

Execute D1 Query

Execute SQL against one Cloudflare D1 database.

Get Account

Retrieve one Cloudflare account by its exact account ID.

Get Account Build Limits

Return whether an account has exhausted its Worker build minutes and when they refresh.

Get Account Member

Retrieve the identity, roles, policies, and status of an account member.

Get Account Token

Retrieve metadata and policies for one account-owned API token.

Get Bot Management Settings

Tool to retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management).

Get Current User

Retrieve identity and account-membership details for the current user.

Get D1 Database

Get details for one D1 database, optionally selecting response fields.

Get KV Namespace

Retrieve metadata for one Cloudflare Workers KV namespace.

Get KV Value

Retrieve the stored bytes for a key in a Workers KV namespace.

List WAF Lists

Tool to fetch all WAF lists (no items) for an account.

Get MCP Server

Retrieve one Access AI Controls MCP server and its synchronization state.

Get Pages Deployment

Retrieve one Cloudflare Pages deployment and its current build status.

Get Pages Deployment Logs

Retrieve build log lines for one Cloudflare Pages deployment.

Get Pages Project

Retrieve one Cloudflare Pages project and its configuration.

Get Pages Upload Token

Request a short-lived JWT for Cloudflare Pages Direct Upload assets.

Get Tunnel Configuration

Retrieve the current configuration of a remotely managed Cloudflare Tunnel.

Get User API Token

Retrieve metadata and policies for one user-owned API token.

Get Worker

Retrieve one beta Worker resource by its exact ID or name.

Get Worker Preview Deployment

Retrieve a specific or latest deployment for a Worker Preview.

Get Workers AI Model Schema

Retrieve the input and output JSON Schemas for a Workers AI model.

Get Worker Script Content

Retrieve the deployed content of one Cloudflare Worker script.

Get Worker Script Settings

Retrieve a Worker script's metadata and runtime configuration.

Get Worker Script Subdomain

Inspect workers.

Get Worker Script Version

Retrieve detailed information for one classic Worker script version.

Get Worker Service Environment Content

Retrieve deployed content for a legacy Worker service environment.

Get Workers Subdomain

Return the workers.

Get Worker Version

Retrieve one beta Worker version; optional code modules may add megabytes.

Get Workflow

Retrieve one Workflow's configuration, metadata, schedules, and counts.

Get Workflow Instance

Retrieve logs, status, and execution details for one Workflow instance.

Get Zone

Retrieve one Cloudflare zone and its configuration, status, and metadata.

Get Zone Ruleset Phase Entrypoint

Retrieve the latest active zone entrypoint ruleset for a Rulesets phase.

Get Zone Setting

Fetch one setting for a Cloudflare zone by setting name.

Inventory Developer Resources

Return one page each of KV namespaces, Workflows, and D1 databases.

List Account Members

Lists all members of a Cloudflare account with their roles, permissions, and status.

List Accounts

List all Cloudflare accounts you have ownership or verified access to.

List Account Subscriptions

List billing subscriptions and plan details for one Cloudflare account.

List Account Tokens

List account-owned API token metadata and policies with pagination.

List D1 Databases

List one page of D1 databases in an account.

List DNS records

Tool to list and search DNS records in a Cloudflare zone.

List Email Routing Addresses

List Email Routing destination addresses configured for an account.

List Firewall Rules

Tool to list firewall rules for a specific DNS zone.

List KV Keys

List key names and metadata in a Cloudflare Workers KV namespace.

List KV Namespaces

List Workers KV namespaces in a Cloudflare account.

List MCP Portals

List Cloudflare Access AI Controls MCP portals with pagination and search.

List Monitors

Tool to list all load-balancer monitors in a Cloudflare account.

List Pages Deployments

List production or preview deployments for a Cloudflare Pages project.

List Pages Project Domains

List custom domains attached to a Cloudflare Pages project, including their validation and verification state.

List Pages Projects

List Pages projects in a Cloudflare account.

List Pools

Tool to list all load balancer pools in a Cloudflare account.

List Queues

List queues owned by a Cloudflare account.

List Registrar Registrations

List domains registered through Cloudflare Registrar.

List Rule List Entries

List entries in one Cloudflare account rule list.

List Web Analytics Sites

List Cloudflare Web Analytics sites for an account.

List Tunnels

List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses.

List Turnstile Widgets

List Turnstile widgets configured for a Cloudflare account.

List User API Tokens

List metadata for API tokens created by the connected Cloudflare user without returning token secrets.

List Worker Builds

List one page of Workers CI builds associated with an immutable Worker tag.

List Worker Build Triggers

List Workers Builds trigger configurations associated with one Worker tag.

List Worker Deployments

List deployment history for a classic Worker script.

List Worker Routes

List Worker route patterns and script assignments for a Cloudflare zone.

List Workers

List account Workers with optional sorting and page-based pagination.

List Workers Build Tokens

List Workers Builds authentication token metadata without returning token secrets.

List Worker Scripts

List uploaded classic Worker scripts, optionally filtering by tag rules.

List Worker Script Versions

List classic Worker script versions, optionally filtering to deployable versions.

List Workers Domains

List custom domains routed to Workers in a Cloudflare account.

List Worker Secrets

List the names and types of secrets bound to one Worker script.

List Worker Telemetry Values

List unique values observed for a Workers telemetry field.

List Worker Versions

List paginated versions of a Cloudflare Worker.

List Workflow Instances

List Workflow executions with state, UTC date, and cursor filters.

List Workflows

List and search account Workflows.

List Zones

Lists, searches, sorts, and filters zones in the authenticated account.

Manage Worker Schedules

Get a Worker's Cron Triggers, or replace all triggers when schedules is supplied.

Query Analytics SQL

Execute a parameterized Cloudflare Analytics SQL SELECT statement.

Query GraphQL Analytics

Run a read-only query against Cloudflare's GraphQL Analytics API.

Query Worker Telemetry

Run a saved or ad-hoc Workers Observability telemetry query.

Replace Rules List Items

Replace every item in a Rules List and wait for the bulk operation outcome.

Rerun Zone Activation Check

Trigger a fresh activation check for a pending Cloudflare zone.

Roll Account Token

Irreversibly rotate an Account Owned API token secret.

Roll Back Pages Deployment

Promote a previous successful Pages deployment back to production.

Run Workers AI Model

Run a Workers AI model and return non-streaming JSON; streaming is unsupported.

Scrape Page Elements

Render a URL or supplied HTML and return elements matching CSS selectors.

Start Worker Asset Upload Session

Register a Worker static-asset manifest and return a one-hour JWT and hash buckets for later asset-upload calls; this action does not upload asset bytes.

Update DNS record

Tool to update an existing DNS record within a specific zone.

Update WAF List

Tool to update the description of a WAF list (cannot update items).

Update Pages Project

Rename a Pages project or update its production branch, build configuration, deployment environments, or source repository settings.

Update Tunnel Configuration

Tool to update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing).

Update Worker Preview Deployment

Create a new Preview deployment by merge-patching bindings or annotations on an existing Preview deployment.

Update Worker Script Settings

Patch Worker configuration and metadata, creating a new version.

Update Worker Script Subdomain

Enable or disable a Worker script and its previews on workers.

Update Zone

Tool to update properties of an existing zone; changes apply immediately to the live zone.

Update Zone Ruleset Phase Entrypoint

Replace a zone phase entrypoint ruleset.

Upload Pages Assets

Upload static assets and register their hashes for a Pages deployment.

Upload Worker Assets

Upload one bucket of base64-encoded Worker static assets.

Upload Worker Script Version

Upload a module-syntax classic Worker version without deploying it.

Upsert Worker Secret

Add or replace one secret binding, creating a new Worker version.

Write KV Value

Create or replace a UTF-8 value in a Cloudflare Workers KV namespace.

FAQ

Frequently asked questions

With a standalone Cloudflare MCP server, the agents and LLMs can only access a fixed set of Cloudflare tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Cloudflare and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Cloudflare tools.

Yes, absolutely. You can configure which Cloudflare scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Cloudflare data and credentials are handled as safely as possible.

Start with Cloudflare.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Cloudflare tool your agent needs.Free to start.

Start building