Cloudflare CLI for AI Agents

GET STARTED FOR FREE
Framework Integration Gradient
Cloudflare Logo
CLI Logo
divider

Introduction

CLIs are eating MCPs. The industry is converging on the very same idea. MCPs for all their merit can be token hungry, slow, and unreliable for complex tool chaining. However, coding agents have become incredibly good at working with CLIs, and in fact they are far more comfortable working with CLI tools than MCP.

With Composio's Universal CLI, your coding agents can talk to over 850+ SaaS applications. With Cloudflare, agents can add new a record for your domain, list all firewall rules for zone, show members of your cloudflare account, and more — all without worrying about authentication.

This guide walks you through Composio Universal CLI and explains how you can connect it with coding agents like Claude Code, Codex, OpenCode, etc, for end-to-end Cloudflare automation.

Also integrate Cloudflare with

What is Universal CLI and why use it?

The idea behind building the universal CLI is to give agents a single command interface to interact with all your external applications. Here's what you'll get with it:

  • Agent-friendly: Coding agents like Claude Code, Codex, and OpenCode can use CLI tools natively — no MCP setup required.
  • Authentication handled: Connect once via OAuth or API Key, and all CLI commands work with your credentials automatically.
  • Tool discovery: Search, inspect, and execute 20,000+ tools across 850+ apps from one interface.
  • Trigger support: Use triggers to listen for events across your apps, powered by real-time webhooks or polling under the hood.
  • Type generation: Generate typed schemas for autocomplete and type safety in your projects.

Prerequisites

Install the Composio CLI, authenticate, and initialize your project:

bash
# Install the Composio CLI
curl -fsSL https://composio.dev/install | bash

# Authenticate with Composio
composio login

During login you'll be redirected to sign in page, finish the complete flow and you're all set.

Composio CLI authentication flow

Connecting Cloudflare to Coding Agents via Universal CLI

Once it is installed, it's essentially done. Claude Code, Codex, OpenCode, OpenClaw, or any other agent will be able to access the CLI. A few steps to give agents access to your apps.

  1. Launch your Coding Agent — Claude Code, Codex, OpenCode, anything you prefer.
  2. Prompt it to "Authenticate with Cloudflare"
  3. Complete the authentication and authorization flow and your Cloudflare integration is all set.
  4. Start asking anything you want.

Supported Tools & Triggers

Tools
Create DNS recordTool to create a new dns record within a specific zone.
Create WAF ListTool to create a new empty waf list for the account.
Create ZoneTool to create a new zone.
Delete DNS RecordTool to delete a dns record within a specific zone.
Delete WAF ListTool to delete a waf list.
Delete ZoneTool to delete a zone.
List WAF ListsTool to fetch all waf lists (no items) for an account.
List Account MembersTool to list members of a given cloudflare account.
List AccountsTool to list all accounts accessible to the user.
List Firewall RulesTool to list firewall rules for a specific zone.
List MonitorsTool to list all load-balancer monitors in a cloudflare account.
List PoolsTool to list all load balancer pools in a cloudflare account.
List ZonesThis tool lists, searches, sorts, and filters your zones.
Update DNS recordTool to update an existing dns record within a specific zone.
Update WAF ListTool to update the description of a waf list (cannot update items).
Update ZoneTool to update properties of an existing zone.

Universal CLI Commands for Cloudflare

You can also manually execute CLI commands to interact with your Cloudflare.

Connect your Cloudflare account

Link your Cloudflare account and verify the connection:

bash
# Connect your Cloudflare account (opens OAuth flow)
composio connected-accounts link cloudflare

# Verify the connection
composio connected-accounts list --toolkits cloudflare

Discover Cloudflare tools

Search and inspect available Cloudflare tools:

bash
# List all available Cloudflare tools
composio tools list --toolkit cloudflare

# Search for Cloudflare tools by action
composio tools search "cloudflare"

# Inspect a tool's input schema
composio tools info CLOUDFLARE_CREATE_DNS_RECORD

Common Cloudflare Actions

Create DNS record — Tool to create a new dns record within a specific zone

bash
composio tools execute CLOUDFLARE_CREATE_DNS_RECORD \
  --name "www.example.com" \
  --type "A" \
  --content "192.0.2.1" \
  --zone_identifier "023e105f4ecef8ad9ca31a8372d0c353"

Create WAF List — Tool to create a new empty waf list for the account

bash
composio tools execute CLOUDFLARE_CREATE_LIST \
  --kind "<string>" \
  --name "<string>" \
  --account_id "<string>"

Create Zone — Tool to create a new zone

bash
composio tools execute CLOUDFLARE_CREATE_ZONE \
  --name "example.com" \
  --account "<object>"

Delete DNS Record — Tool to delete a dns record within a specific zone

bash
composio tools execute CLOUDFLARE_DELETE_DNS_RECORD \
  --identifier "372e67954025e0ba6aaa6d586b9e0b59" \
  --zone_identifier "023e105f4ecef8ad9ca31a8372d0c353"

Generate Type Definitions

Generate typed schemas for Cloudflare tools to get autocomplete and type safety in your project:

bash
# Auto-detect language
composio generate --toolkits cloudflare

# TypeScript
composio ts generate --toolkits cloudflare

# Python
composio py generate --toolkits cloudflare

Tips & Tricks

  • Always inspect a tool's input schema before executing: composio tools info <TOOL_NAME>
  • Pipe output with jq for better readability: composio tools execute TOOL_NAME -d '{}' | jq
  • Set COMPOSIO_API_KEY as an environment variable for CI/CD pipelines
  • Use composio dev logs tools to inspect execution logs and debug issues

Next Steps

  • Try asking your coding agent to perform various Cloudflare operations
  • Explore cross-app workflows by connecting more toolkits
  • Set up triggers for real-time automation
  • Use composio generate for typed schemas in your projects

How to build Cloudflare MCP Agent with another framework

OpenAI Agents SDK

OpenAI Agents SDK

Use Cloudflare MCP with OpenAI Agents SDK

Claude Agent SDK

Claude Agent SDK

Use Cloudflare MCP with Claude Agent SDK

Claude Code

Claude Code

Use Cloudflare MCP with Claude Code

Codex

Codex

Use Cloudflare MCP with Codex

OpenClaw

OpenClaw

Use Cloudflare MCP with OpenClaw

Google ADK

Google ADK

Use Cloudflare MCP with Google ADK

LangChain

LangChain

Use Cloudflare MCP with LangChain

Vercel AI SDK

Vercel AI SDK

Use Cloudflare MCP with Vercel AI SDK

Mastra AI

Mastra AI

Use Cloudflare MCP with Mastra AI

LlamaIndex

LlamaIndex

Use Cloudflare MCP with LlamaIndex

CrewAI

CrewAI

Use Cloudflare MCP with CrewAI

FAQ

What is the Composio Universal CLI?

The Composio Universal CLI is a single command-line interface that lets coding agents and developers interact with 850+ SaaS applications. It handles authentication, tool discovery, action execution, and trigger setup — all from the terminal, without needing to configure MCP servers.

Which coding agents work with the Composio CLI?

Any coding agent that can run shell commands works with the Composio CLI — including Claude Code, Codex, OpenCode, OpenClaw, and others. Once the CLI is installed, agents automatically discover and use the composio commands to interact with Cloudflare and other connected apps.

How is the CLI different from using an MCP server for Cloudflare?

MCP servers require configuration and can be token-heavy for complex workflows. The CLI gives agents a direct, lightweight interface — no server setup needed. Agents simply call composio commands like any other shell tool. It's faster to set up, more reliable for multi-step tool chaining, and works natively with how coding agents already operate.

How safe is my Cloudflare data when using the Composio CLI?

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Cloudflare data and credentials are handled as safely as possible. You can also bring your own OAuth credentials for full control.

Used by agents from

Context
Letta
glean
HubSpot
Agent.ai
Altera
DataStax
Entelligence
Rolai
Context
Letta
glean
HubSpot
Agent.ai
Altera
DataStax
Entelligence
Rolai
Context
Letta
glean
HubSpot
Agent.ai
Altera
DataStax
Entelligence
Rolai

Never worry about agent reliability

We handle tool reliability, observability, and security so you never have to second-guess an agent action.

Book a call↗Get started for free