Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare R2 (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-r2.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-r2.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-r2.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare R2 Cloudflare API token with R2 storage read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-r2.connectorbay.com/health · Tool schemas: https://byok-cloudflare-r2.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-r2 · agent@connectorbay.com

What Cloudflare R2 (BYOK) is for

Cloudflare R2 (BYOK) lets an AI assistant read your own Cloudflare R2 data through the Cloudflare R2 API with a key you supply (Cloudflare API token with R2 storage read permission). Read-only: 10 tools (list_buckets, get_bucket, get_account_metrics, list_objects, list_custom_domains, get_managed_domain, get_cors_policy, get_lifecycle_rules, get_bucket_lock_rules, get_event_notifications). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare R2. Cloudflare R2 and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which R2 buckets do I have and where are they located?"
  • "When was my R2 bucket my-bucket created and which storage class does it use?"
  • "How much data and how many objects do I store in R2?"
  • "What files are under the images/ prefix of my R2 bucket?"
  • "Which custom domains serve my R2 bucket and are they active?"
  • "Is the public r2.dev URL enabled for my R2 bucket?"

What it does

  • list_buckets: List the R2 buckets of an account with creation date, location hint and storage class. Pass the returned cursor to get the next page. Covers buckets in the default jurisdiction only.
  • get_bucket: Get one R2 bucket: creation date, location, storage class and jurisdiction. Covers buckets in the default jurisdiction only.
  • get_account_metrics: Get account-wide R2 storage metrics: object counts and payload and metadata bytes for the standard and infrequent access classes (uploaded and published).
  • list_objects: List object keys of an R2 bucket with size, storage class, last-modified time and ETag (no object contents). Use prefix and delimiter to walk folders and the cursor to page. Covers buckets in the default jurisdiction only.
  • list_custom_domains: List the custom domains attached to an R2 bucket with enabled flag, minimum TLS version and ownership and SSL status. Covers buckets in the default jurisdiction only.
  • get_managed_domain: Show whether the public r2.dev development URL is enabled for an R2 bucket and what it is. Covers buckets in the default jurisdiction only.
  • get_cors_policy: Get the CORS rules of an R2 bucket (allowed origins, methods and headers, max age). Covers buckets in the default jurisdiction only.
  • get_lifecycle_rules: Get the object lifecycle rules of an R2 bucket (prefix conditions, expiry and storage class transitions). Covers buckets in the default jurisdiction only.
  • get_bucket_lock_rules: Get the bucket lock (retention) rules of an R2 bucket. Covers buckets in the default jurisdiction only.
  • get_event_notifications: Get the event notification rules of an R2 bucket (queues receiving object events, with prefix and suffix filters and actions). Covers buckets in the default jurisdiction only.

BYOK key

You bring your own Cloudflare R2 Cloudflare API token with R2 storage read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare R2 API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/r2/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare R2. Cloudflare R2 and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare R2 account.

Built for: Worldwide. Languages: English.