Cloudflare DNS Services (BYOK): Read your Cloudflare DNS settings, DNSSEC status, DNS analytics, DNS Firewall clusters, secondary DNS and custom nameservers, with your own API token

Try asking

Real questions, and the tools your agent calls to answer them.

How is DNS configured for my Cloudflare zone?

Tools called

get_zone_dns_settings

What DNS defaults does my Cloudflare account apply to new zones?

Tools called

get_account_dns_settings

Is DNSSEC active on my Cloudflare zone?

Tools called

get_dnssec

How many DNS queries did my Cloudflare zone get by record type yesterday?

Tools called

get_dns_analytics_report

Show hourly DNS query counts for my Cloudflare zone.

Tools called

get_dns_analytics_by_time

Which DNS Firewall clusters do I have on Cloudflare?

Tools called

list_dns_firewall_clusters

About

Cloudflare DNS Services (BYOK) lets an AI assistant read your own Cloudflare DNS Services data through the Cloudflare DNS Services API with a key you supply (Cloudflare API token with DNS read permission). Read-only: 11 tools (get_zone_dns_settings, get_account_dns_settings, get_dnssec, get_dns_analytics_report, get_dns_analytics_by_time, list_dns_firewall_clusters, get_dns_firewall_cluster, list_secondary_dns_peers, list_secondary_dns_acls, get_secondary_zone_config, list_custom_nameservers). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare DNS Services. Cloudflare DNS Services and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the Cloudflare DNS Services API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/dns/. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

Privacy policy Terms

What it can do

11 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI

Read your data11 tools

Get zone dns settingsGet the DNS settings of a zone: zone mode, CNAME flattening, multi-provider, secondary overrides, NS TTL and SOA values.
Get account dns settingsGet the account-level DNS defaults applied to new zones: zone mode, flattening, NS TTL, SOA and whether DNS-only is enforced.
Get dnssecGet the DNSSEC status of a zone with algorithm, digest type, key tag, DS record and flags (public key and DS record are public data).
Get dns analytics reportGet a DNS analytics report for a zone: query metrics grouped by dimensions over a period.
Get dns analytics by timeGet a DNS analytics report for a zone broken down by time interval (hour, day and so on).
List dns firewall clustersList the DNS Firewall clusters of an account with upstream IPs, Cloudflare-assigned IPs, cache TTLs, rate limit and attack mitigation.
Get dns firewall clusterGet one DNS Firewall cluster with upstream IPs, assigned IPs, cache TTLs, rate limit and attack mitigation settings.
List secondary dns peersList the secondary DNS peers of an account with IP, port, IXFR setting and the linked TSIG id (never the TSIG secret).
List secondary dns aclsList the secondary DNS ACLs of an account with name and allowed IP range.
Get secondary zone configGet the incoming zone transfer (secondary) configuration of a zone: peers, refresh interval, SOA serial and last check time.
List custom nameserversList the account custom nameservers with name, set number, verification status and glue records.

Information

PublisherUnify Dynamics LLC

CategoryDeveloper tools

LanguagesEnglish

Built forWorldwide

CompatibilityAny MCP client · any agent · REST

Version0.1.0

MCP endpointhttps://byok-cloudflare-dns-services.connectorbay.com/mcp

REST APIopenapi.json

SupportGet help · Status

CountryWorldwide

FunctionOther

LayerDeep connectors

More like this

Cloudflare Zone Settings (BYOK)

Read a Cloudflare zone's settings such as SSL mode, minimum TLS, security level and caching options, plus tiered caching, Argo and cache reserve switches, with your own API token

Live · MCP + REST9 tools

Cloudflare Custom Hostnames (BYOK)

Read your Cloudflare for SaaS custom hostnames, their certificate status, fallback origin, quota and per-hostname TLS settings with your own API token

Live · MCP + REST6 tools

Cloudflare DLP (BYOK)

Read your Cloudflare Zero Trust data loss prevention profiles, entries, datasets, data classes, validators and usage limits with your own API token

Live · MCP + REST10 tools

Cloudflare Email Security (BYOK)

Read your Cloudflare Email Security protected domains, content policies, trusted domains, blocked sender patterns and URL ignore patterns with your own API token

Live · MCP + REST7 tools

Cloudflare Security Center (BYOK)

Read your Cloudflare Security Center insights and their counts by class, severity and type, scan status and security.txt settings with your own API token

Live · MCP + REST9 tools

Cloudflare API Shield (BYOK)

Read your Cloudflare API Shield endpoint inventory, discovered operations, labels, session identifiers and schema validation settings with your own API token

Live · MCP + REST10 tools