Cloudflare MCP Go
by M-Yamashita01
Cloudflare API v4 server: 28 tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center insights, and threat intelligence (IP/domain/ASN/WHOIS/passive DNS). Currently read-only. Install with go run github.com/M-Yamashita01/cloudflare-mcp-go@latest.
Install Cloudflare MCP Go
Pick your client, then add it in one click or paste the config.
No confirmed install command yet
We only publish a config when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for M-Yamashita01/cloudflare-mcp-go, and we’d rather show nothing than a guess you’d paste into your client.
Open setup steps on GitHubOverview
From the project README
cloudflare-mcp-go
An MCP (Model Context Protocol) server for the Cloudflare API v4, written in Go.
It lets any MCP client (Claude, and other MCP-compatible tools) inspect and investigate your Cloudflare account through natural language: zones, DNS, WAF and firewall rules, rate limits, HTTP request logs, Security Center insights, and threat intelligence. The server is read-focused and geared toward security triage and investigation workflows.
Quick start
Requires a Cloudflare API token and Go 1.25+.
Add it to Claude Code with a single command:
claude mcp add cloudflare \
-e CLOUDFLARE_API_TOKEN=your-api-token \
-- go run github.com/M-Yamashita01/cloudflare-mcp-go@latest
That is all — no manual clone or build required. CLOUDFLARE_ACCOUNT_ID is optional and only needed by a few tools (accounts, audit logs, KV, intel).
Tools
117 read-only tools grouped by domain, plus optional write tools (marked below) that are registered only when CLOUDFLARE_MCP_ENABLE_WRITE=true.
Zones & DNS
| Tool | Description |
|---|---|
list_zones | List zones in your account (ID, name, status, plan). |
get_zone | Get details of a specific zone. |
get_zone_settings | Get a zone's configuration settings (SSL mode, min TLS, cache level, security level). |
purge_cache | Purge a zone's cache: everything, or by file/tag/host/prefix (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
list_dns_records | List DNS records for a zone (type, name, content, TTL, proxy status). |
get_dns_record | Get a single DNS record by ID (type, name, content, TTL, proxy status, comment). |
get_dns_analytics | DNS query analytics: query counts, response codes, query type distribution. |
get_dns_analytics_bytime | DNS query analytics grouped by time interval (time-series). |
export_dns_records | Export all DNS records for a zone as a BIND zone file. |
get_dns_record_usage | DNS record usage counts for a zone (toward plan limits). |
get_dns_settings | Get a zone's DNS settings (Foundation DNS, multi-provider, nameservers, zone mode). |
get_dnssec | Get DNSSEC details for a zone (status, DS record, digest, key tag, algorithm). |
list_dnssec_zsk | List DNSSEC Zone Signing Keys (ZSKs) for a zone (multi-signer DNSSEC). |
list_scanned_dns_records | List DNS records discovered by a scan, pending review. |
create_dns_record | Create a DNS record (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
update_dns_record | Update a DNS record, partial fields (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
delete_dns_record | Delete a DNS record by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
overwrite_dns_record | Overwrite (fully replace) a DNS record by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
batch_dns_records | Apply a batch of DNS record changes atomically (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
import_dns_records | Import DNS records from a BIND zone file (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
scan_dns_records | Scan a zone for DNS records at common names (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
trigger_dns_record_scan | Trigger an async DNS record scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
review_scanned_dns_records | Accept/reject DNS records found by a scan (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
update_dns_settings | Update a zone's DNS settings (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
edit_dnssec | Edit a zone's DNSSEC status (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
delete_dnssec | Delete a zone's DNSSEC records (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
Firewall, WAF & rate limiting
| Tool | Description |
|---|---|
list_ip_access_rules | IP access rules that block, challenge, or allow IPs, CIDRs, ASNs, or countries. |
create_ip_access_rule | Create an IP access rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
update_ip_access_rule | Update an IP access rule's mode/notes (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
delete_ip_access_rule | Delete an IP access rule by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
list_waf_managed_rulesets | WAF managed rulesets entrypoint and which managed rulesets are enabled. |
list_firewall_rules | Custom firewall rules with expressions, actions, and priorities. |
get_firewall_rule | Full configuration of a specific firewall rule by ID. |
list_rulesets | All rulesets for a zone (metadata only). |
get_ruleset | A specific ruleset with all its rules. |
create_ruleset | Create a ruleset (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
update_ruleset | Update a ruleset's name/description/rules (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
delete_ruleset | Delete a ruleset by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
list_rate_limits | Rate limiting rules: thresholds, match criteria, actions. |
get_rate_limit | Full configuration of a specific rate limiting rule by ID. |
create_rate_limit | Create a rate limit rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
update_rate_limit | Update a rate limit rule (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
delete_rate_limit | Delete a rate limit rule by ID (write; requires CLOUDFLARE_MCP_ENABLE_WRITE=true). |
Security events & logs
Tools80
What Cloudflare MCP Go lets your agent do. Expand a tool for its parameters.
Security & health
What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.
ActiveLast checked 1d ago
Recent health check succeeded.
Adoption & maintenance
Factual signals from GitHub, npm, and our automated checks — not a rating.
Last commit1d agoMost recent push to the default branch.
Tools exposed80Callable tools this server registers over MCP.
Reviews
No reviews yet — be the first to share how it worked for you.
Frequently Asked Questions about Cloudflare MCP Go
We don't have a confirmed install command for M-Yamashita01/cloudflare-mcp-go yet, so we don't publish a generated one — a guessed package name would point at the wrong package or none at all. Follow the project's own README or setup instructions (https://github.com/M-Yamashita01/cloudflare-mcp-go) for the current steps.
Cloudflare API v4 server: 28 tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center insights, and threat intelligence (IP/domain/ASN/WHOIS/passive DNS). Currently read-only. Install with go run github.com/M-Yamashita01/cloudflare-mcp-go@latest.
We don't have confirmed pricing for M-Yamashita01/cloudflare-mcp-go. Listing it on AllMCPs is free, but that says nothing about what the server itself costs — check the project's own site for current pricing.
Related MCP servers
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.
AllMCPs Directory Badge
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
Badge Style:
Live Dynamic SVG Preview
Markdown (GitHub README)
[](https://allmcps.com/mcp/m-yamashita01-cloudflare-mcp-go)HTML Embed
<a href="https://allmcps.com/mcp/m-yamashita01-cloudflare-mcp-go"><img src="https://allmcps.com/api/badge/m-yamashita01-cloudflare-mcp-go?style=directory" alt="Cloudflare MCP Go on AllMCPs" /></a>