How to integrate Cloudflare api key MCP with Grok Build

Connect Grok Build to Cloudflare api key MCP. Add new a record to your dns zone, delete outdated cname record from domain, and more from your terminal, with authentication handled for you.

Cloudflare api key logoCloudflare api key
Api Key

Cloudflare is a leading platform for website security, performance, and reliability. It helps protect and optimize your web infrastructure with robust API access.

25 Tools

How to integrate Cloudflare api key MCP with Grok Build

Grok Build is xAI's terminal coding agent. It runs on Grok 4.5, plans its work before it acts, and can run multiple sub-agents in parallel. It also reads Claude Code's MCP configuration, so any server you already have in a .mcp.json is picked up with no changes.

In this guide, I will show you how to connect your Cloudflare api key account to Grok Build through Composio, so it can add new A record to your DNS zone, delete outdated CNAME record from domain, create lockdown rule for admin URLs, and more without leaving the terminal. Composio holds the OAuth tokens for you, and Grok Build only calls the tools you approve.

Also integrate Cloudflare api key with

Why use Composio over a standalone MCP server?

  • Read and write access. Composio's Cloudflare api key integration lets Grok Build take real actions like creating drafts, sending updates, and labeling records, not just reading data.
  • 1,000+ SaaS toolkits out of the box. One endpoint gives you a full catalog of pre-built connectors, from Gmail and Slack to Notion, Linear, and Salesforce.
  • One MCP server for every app. Wire up a single Composio server instead of maintaining a separate MCP entry for each app.
  • Smart, context-aware tool loading. Grok Build caps how many tools it holds in a single request. Composio loads only the tools a task needs, so you do not spend that budget on tools you are not using.
  • Cross-app automation. Chain actions across apps in one run. Pull a thread, summarize it in Notion, and post the highlights to Slack from a single prompt.

Prerequisites

  • Grok Build installed and signed in. Install with curl -fsSL https://x.ai/cli/install.sh | bash on macOS or Linux, or irm https://x.ai/cli/install.ps1 | iex on Windows PowerShell. On first launch Grok opens a browser to authenticate; for headless or CI use, set an XAI_API_KEY environment variable instead (create the key at console.x.ai).
  • Access to the Cloudflare api key account you want to connect.
  • The Composio MCP endpoint. Composio's server is remote and hosted, so there is nothing to run locally and no tunnel to set up.

Step-by-step: Connect Cloudflare api key to Grok Build

1. Install and verify Grok Build

Install the CLI, then restart your shell so the grok binary lands on your PATH:

bash
curl -fsSL https://x.ai/cli/install.sh | bash
which grok

On Windows, install with PowerShell instead: irm https://x.ai/cli/install.ps1 | iex. If which grok returns a path, you are set. Grok Build runs on Grok 4.5 by default; you can switch models inside the session with /model <name>.

2. Add the Composio server

Add Composio as a remote HTTP MCP server with the grok mcp add command:

bash
grok mcp add --transport http composio https://connect.composio.dev/mcp

You can also add and manage servers from inside a session. Run /mcps to open the extensions modal on the MCP tab, then add a new server and paste the Composio URL. Added this way, Grok auto-detects the name from the URL and lists the server as connect:

bash
https://connect.composio.dev/mcp
Grok Build /mcps extensions modal listing MCP servers Grok Build adding the Composio MCP server with its URL

Grok also reads Claude Code-style config, so an entry in ~/.grok/config.toml or a project .mcp.json works the same way.

3. Authenticate

Composio uses OAuth. In the /mcps modal, select the Composio server and press i to authenticate (Grok also triggers this browser flow automatically the first time it uses a Composio tool). Click Allow to authorize access. Grok stores the tokens under ~/.grok/mcp_credentials.json, and /mcps shows Composio as connected.

Grok Build prompting to authenticate the Composio MCP server Composio authorization screen with the Allow button for Grok Build

4. Start building

Ask Grok to work with your Cloudflare api key account through Composio. On the first Cloudflare api key action, Composio prompts you to connect the account through OAuth. Approve the scopes once, and Composio handles token refresh from there.

What you can do after connecting Cloudflare api key

  • Add new A record to your DNS zone
  • Delete outdated CNAME record from domain
  • Create lockdown rule for admin URLs
  • Remove an old ruleset from your account

Security + privacy notes (important)

  • Use least-privilege access. Grant only the Cloudflare api key scopes you actually need.
  • Review OAuth scopes before approving. Check that the requested scopes match what you expect Composio and Grok Build to do.
  • Keep write actions human-reviewed. Grok Build proposes a plan before it acts. Leave that approval step on for actions like sending messages or editing records.
  • Keep secrets out of version control. Your XAI_API_KEY and any tokens should never be committed. Use environment variables or a secrets manager.
TOOLS

Supported Tools

Every Cloudflare api key action and event your agent gets out of the box.

Create DNS Record

Tool to create a new DNS record in a Cloudflare zone.

Create Zone Lockdown Rule

Tool to create a Zone Lockdown rule.

Create Rule in Ruleset

Tool to add a rule to an existing ruleset.

Create Ruleset

Creates a new Cloudflare ruleset at account or zone scope.

Delete DNS Record

Tool to delete a DNS record.

Delete DNSSEC

Tool to delete DNSSEC records for a zone.

Delete Rule from Ruleset

Tool to delete a specific rule from a ruleset.

Delete Ruleset

Tool to delete all versions of a ruleset.

Delete a zone

Tool to delete an existing zone.

Get Cloudflare IP Addresses

Tool to retrieve IP addresses used on the Cloudflare or JD Cloud network.

Get Entrypoint Ruleset Version

Retrieves a specific historical version of an entry point ruleset from Cloudflare.

Get Lockdown Rule

Tool to get a Zone Lockdown rule.

Get Regional Tiered Cache

Tool to get the regional tiered cache setting for a zone.

Get Ruleset

Tool to fetch the latest version of a ruleset by ID.

Get Zone Details

Tool to get details for a specific zone.

List DNS Records

List, search, sort, and filter DNS records for a Cloudflare zone.

List Cloudflare Zones

Tool to list, search, sort, and filter Cloudflare zones.

Overwrite DNS Record

Tool to completely overwrite a DNS record.

Rerun Zone Activation Check

Triggers a new activation check for a zone with 'pending' status.

Update DNSSEC Status

Tool to update DNSSEC configuration for a zone.

Update Lockdown Rule

Tool to update a zone lockdown rule.

Update Rule in Ruleset

Tool to update a specific rule in a ruleset.

Update Ruleset

Update a Cloudflare ruleset, creating a new version.

Update Cloudflare Zone

Tool to edit a Cloudflare zone.

Upload File to S3

Tool to upload arbitrary file content to temporary storage.

FAQ

Frequently asked questions

A standalone Cloudflare api key MCP server gives Grok Build a fixed set of Cloudflare api key tools tied to that one server. The Composio Tool Router lets Grok Build load tools from Cloudflare api key and many other apps on demand, based on the task, all through a single endpoint.

Yes. Grok Build ships with native MCP support. Add a server with the grok mcp add command, from the in-session /mcps modal, or by editing ~/.grok/config.toml. It also reads Claude Code-style .mcp.json files, so Grok Build discovers the tools automatically.

Yes. Grok Build has zero-migration compatibility with Claude Code's configuration, so the same Composio server entry works in both without edits.

Tokens, keys, and configuration are encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant, so your Cloudflare api key data and credentials are handled to that standard.

Start with Cloudflare api key.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Cloudflare api key tool your agent needs.Free to start.

Start building