Render a URL or supplied HTML and return selected page representations.

Check authoritative registration availability and pricing for up to 20 domains.

Tool to create a new DNS record within a specific zone. Requires write privileges and makes live changes to the zone. Use after obtaining the zone ID via CLOUDFLARE_LIST_ZONES to programmatically add DNS entries.

Create a new empty custom list for use in WAF rules and filters. Lists can contain IP addresses, hostnames, ASNs, or redirects. Once created, use separate actions to add items to the list. Note: List availability depends on plan (Free: 1 list, Pro/Business: 10 lists, Enterprise: 1000 lists). Example: CREATE_LIST(account_id="abc123", kind="ip", name="blocklist", description="Block malicious IPs")

Create a Cloudflare Pages deployment from a Git branch or Direct Upload manifest.

Create a Turnstile challenge widget for selected domains.

Create a user API token carrying supplied grants. Secure the one-time `result.value`; without `not_before` it is active immediately.

Create a beta Worker resource and configure its observability, previews, subdomain, tags, and tail consumers.

Deploy existing Worker versions immediately to live traffic by percentage. `force` can bypass rollback blocks after secret changes.

Upload code, assets, and configuration as a new Worker version without deploying it to production traffic. Bindings and settings are NOT copied from earlier versions. Pass every binding again, or pass {name, type: "inherit"} to carry an existing binding forward.

Creates a new DNS zone (domain) in Cloudflare. A zone represents a domain and its DNS records. Use this when adding a new domain to manage with Cloudflare. Requires account ID (obtainable via LIST_ACCOUNTS). The zone will be in 'pending' status until nameservers are updated at the domain registrar.

Tool to delete a DNS record within a specific zone. Deletion is immediate and irreversible. Use only after confirming both zone and record IDs. Requires write privileges on the zone. Example: "Delete DNS record 372e6795... from zone 023e105f4ecef..."

Tool to delete a WAF list. Use when you need to remove a list after verifying no filters reference it. Example: DELETE_LIST(account_id="<account_id>", list_id="<list_id>")

Delete a selected non-production Cloudflare Pages deployment.

Tool to delete a zone. Use after confirming the zone identifier to permanently remove a DNS zone and all its DNS records from your Cloudflare account. Example: DELETE_ZONE(zone_identifier="023e105f4ecef8ad9ca31a8372d0c353")

Retrieve metadata and policies for one account-owned API token.

Tool to retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management). Use after identifying the correct zone_id (e.g., via CLOUDFLARE_LIST_ZONES). This tool is the canonical way to audit bot-related configuration; firewall rules are adjacent controls but not equivalent to Bot Management settings.

Retrieve metadata for one Cloudflare Workers KV namespace.

Retrieve the stored bytes for a key in a Workers KV namespace.

Tool to fetch all WAF lists (no items) for an account. Results are paginated; iterate using page and per_page parameters until result_info.total_pages is reached to retrieve all lists. Use after confirming account ID.

Retrieve one Cloudflare Pages deployment and its current build status.

Retrieve one Cloudflare Pages project and its configuration.

Retrieve metadata and policies for one user-owned API token.

Retrieve a specific or latest deployment for a Worker Preview.

Retrieve the deployed content of one Cloudflare Worker script.

Inspect workers.dev and preview URL availability for a Worker script.

Retrieve detailed information for one classic Worker script version.

Retrieve one beta Worker version; optional code modules may add megabytes.

Return one page each of KV namespaces, Workflows, and D1 databases.

Lists all members of a Cloudflare account with their roles, permissions, and status. Returns detailed information about each account member including their user details (name, email, 2FA status), assigned roles with granular permissions, membership status (accepted/pending/rejected), and access policies. Supports filtering by status, sorting by various fields, and pagination for accounts with many members. Use this action when you need to: - View all users with access to a Cloudflare account - Audit account member permissions and roles - Check membership status of invited users - List members with specific roles or statuses Requires the account ID which can be obtained using the List Accounts action. Note: caller's account role may restrict visibility of some members if permissions are insufficient.

List all Cloudflare accounts you have ownership or verified access to. Retrieves a paginated list of accounts with their details including account ID, name, type, settings, and creation date. An empty or partial result may indicate insufficient API token scope or permissions, not the absence of accounts. When multiple accounts are returned, confirm the intended account_id before performing any write operations to avoid acting on unintended environments. Use this when you need to: - Discover available accounts before performing account-specific operations - Find an account ID for other API calls that require an account identifier - Audit account configurations and settings - Filter accounts by name or paginate through large account lists

List one page of D1 databases in an account. Increment `page` until `result_info` shows all matching databases have been retrieved.

Tool to list and search DNS records in a Cloudflare zone. Use when you need to find existing DNS record IDs for update or delete operations, especially after a "record already exists" error during creation. Returns matching records with their IDs, names, types, content, and other properties.

List Email Routing destination addresses configured for an account.

Tool to list firewall rules for a specific DNS zone. Use after confirming the zone ID to retrieve and audit current firewall rules. Does not expose Workers routes or other routing constructs.

List key names and metadata in a Cloudflare Workers KV namespace.

List Workers KV namespaces in a Cloudflare account. Sort by namespace `id` or `title` with `order` and `direction`, and paginate with `page` and `per_page`. The response preserves additional namespace fields returned by Cloudflare.

List Cloudflare Access AI Controls MCP portals with pagination and search.

Tool to list all load-balancer monitors in a Cloudflare account. Use after creating or updating monitors to retrieve a paginated list. Response includes `result_info.total_pages` to determine when all pages have been fetched.

List production or preview deployments for a Cloudflare Pages project. Use `environment` to filter by deployment type and `page` with `per_page` to traverse results; inspect `result_info.total_pages` to determine whether another page is available.

List custom domains attached to a Cloudflare Pages project, including their validation and verification state.

Tool to list all load balancer pools in a Cloudflare account. Use after confirming account ID to discover pool IDs. Paginate using `page` and `per_page`; check `result_info.total_pages` in the response to determine if additional pages exist.

List entries in one Cloudflare account rule list.

List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses. Use when you need to find a tunnel_id before performing tunnel operations like routing, DNS configuration, or debugging.

List Workers Builds trigger configurations associated with one Worker tag.

List uploaded classic Worker scripts, optionally filtering by tag rules.

List the names and types of secrets bound to one Worker script.

List unique values observed for a Workers telemetry field.

Lists, searches, sorts, and filters zones in the authenticated account. Use `page`/`per_page` to paginate; check `result_info.total_pages` in the response to iterate all pages. Does not return DNS records — extract `zone_id` from results before passing to zone-scoped tools (DNS, firewall, etc.). Only zones delegated to Cloudflare nameservers appear; empty results indicate scope or delegation constraints, not errors.

Get a Worker's Cron Triggers, or replace all triggers when schedules is supplied.

Run a read-only query against Cloudflare's GraphQL Analytics API.

Run a saved or ad-hoc Workers Observability telemetry query.

Replace every item in a Rules List and wait for the bulk operation outcome.

Promote a previous successful Pages deployment back to production.

Run a Workers AI model and return non-streaming JSON; streaming is unsupported.

Register a Worker static-asset manifest and return a one-hour JWT and hash buckets for later asset-upload calls; this action does not upload asset bytes.

Tool to update an existing DNS record within a specific zone. Use after confirming both zone and record identifiers; only provided fields are modified. Updates to records used by active tunnels take effect immediately and can disrupt live traffic.

Tool to update the description of a WAF list (cannot update items). Use after confirming list metadata.

Rename a Pages project or update its production branch, build configuration, deployment environments, or source repository settings.

Tool to update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing). Use when you need to programmatically configure hostname-to-origin mappings for a tunnel. WARNING: This operation REPLACES the entire configuration - incorrect configuration can break routing and make services unreachable. Best practice: fetch current configuration first (if patching) to preserve existing rules. At least one ingress rule is required, and the last rule should typically be a catch-all (hostname='*' or omitted) with service='http_status:404'.

Create a new Preview deployment by merge-patching bindings or annotations on an existing Preview deployment.

Tool to update properties of an existing zone; changes apply immediately to the live zone. Confirm zone ID and intended change with the user before calling. Only one field can be modified per call.

Upload static assets and register their hashes for a Pages deployment.

Create or replace a UTF-8 value in a Cloudflare Workers KV namespace.