Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Page Shield (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-page-shield.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-page-shield.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-page-shield.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Page Shield Cloudflare API token with Page Shield read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-page-shield.connectorbay.com/health · Tool schemas: https://byok-cloudflare-page-shield.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-page-shield · agent@connectorbay.com

What Cloudflare Page Shield (BYOK) is for

Cloudflare Page Shield (BYOK) lets an AI assistant read your own Cloudflare Page Shield data through the Cloudflare Page Shield API with a key you supply (Cloudflare API token with Page Shield read permission). Read-only: 8 tools (get_page_shield_settings, list_detected_scripts, get_detected_script, list_detected_connections, get_detected_connection, list_detected_cookies, get_detected_cookie, list_content_security_rules). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Page Shield. Cloudflare Page Shield and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Is Page Shield turned on for my zone?"
  • "Which third-party scripts load on my site and are any flagged as malicious?"
  • "Show details for detected script c9ef84a6bf5e47138c75d95e2f933e12"
  • "Which external hosts do my pages connect to?"
  • "Show details for detected connection c9ef84a6bf5e47138c75d95e2f933e12"
  • "Which cookies are set on my site and which lack the Secure flag?"

What it does

  • get_page_shield_settings: Show whether Page Shield is enabled for a zone and whether it uses Cloudflare's reporting endpoint and URL paths.
  • list_detected_scripts: List JavaScript files Page Shield saw loading on the zone's pages, with host, first and last seen, risk scores (malware, magecart, cryptomining, integrity) and malicious flags.
  • get_detected_script: Get one detected script: URL, host, hash, risk scores, malicious flags, seen dates and the pages it appears on.
  • list_detected_connections: List outbound connections (fetch, XHR, WebSocket targets) Page Shield observed from the zone's pages, with host, seen dates and malicious flags.
  • get_detected_connection: Get one detected connection: URL, host, seen dates, pages it was seen on and malicious flags.
  • list_detected_cookies: List cookies Page Shield detected on the zone's pages with name, host, type and the Secure, HttpOnly and SameSite attributes. Cookie values are not part of the answer.
  • get_detected_cookie: Get one detected cookie: name, host, type, attributes, seen dates and the pages it appeared on. Cookie values are not part of the answer.
  • list_content_security_rules: List the Page Shield content security (CSP) rules of a zone with action, expression, description and enabled flag.

BYOK key

You bring your own Cloudflare Page Shield Cloudflare API token with Page Shield read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Page Shield API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/page_shield/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Page Shield. Cloudflare Page Shield and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Page Shield account.

Built for: Worldwide. Languages: English.