Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Email Security (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-email-security.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-email-security.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-email-security.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Email Security Cloudflare API token with Email Security read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-email-security.connectorbay.com/health · Tool schemas: https://byok-cloudflare-email-security.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-email-security · agent@connectorbay.com

What Cloudflare Email Security (BYOK) is for

Cloudflare Email Security (BYOK) lets an AI assistant read your own Cloudflare Email Security data through the Cloudflare Email Security API with a key you supply (Cloudflare API token with Email Security read permission). Read-only: 7 tools (list_protected_domains, list_content_policies, list_trusted_domains, list_blocked_senders, list_sending_domain_restrictions, list_url_ignore_patterns, get_monthly_report). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Email Security. Cloudflare Email Security and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which of my email domains does Cloudflare Email Security protect and is DMARC good?"
  • "Which content policies are active in Cloudflare Email Security?"
  • "Which email domains are trusted in Cloudflare Email Security?"
  • "Which senders are blocked in Cloudflare Email Security?"
  • "Which sending domain restrictions does Cloudflare Email Security have?"
  • "Which URLs does Cloudflare Email Security ignore?"

What it does

  • list_protected_domains: List the email domains protected by Email Security with delivery modes, status, SPF and DMARC status, inbox provider and processed email counts. Needs the Cloudflare Email Security product.
  • list_content_policies: List the content policies (pattern-based rules with targets) with name, enabled flag, expiry and notes. Needs the Cloudflare Email Security product.
  • list_trusted_domains: List trusted email domains with whether each is a recently registered domain exception or a similarity (proximity) exception. Needs the Cloudflare Email Security product.
  • list_blocked_senders: List blocked sender patterns (email, domain or IP) with regex flag and expiry. Patterns are whatever your admins entered; comments are left out. Needs the Cloudflare Email Security product.
  • list_sending_domain_restrictions: List sending domain restrictions (domains allowed to send with exclusions). Needs the Cloudflare Email Security product.
  • list_url_ignore_patterns: List URL patterns that Email Security does not rewrite or scan. Needs the Cloudflare Email Security product.
  • get_monthly_report: Get the Email Security monthly report: counts by month. The shape of the by_month object is returned as the API sends it. Needs the Cloudflare Email Security product.

BYOK key

You bring your own Cloudflare Email Security Cloudflare API token with Email Security read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Email Security API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/email_security/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Email Security. Cloudflare Email Security and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Email Security account.

Built for: Worldwide. Languages: English.