Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Rulesets (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-rulesets.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-rulesets.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-rulesets.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Rulesets Cloudflare API token with Zone WAF / Account Rulesets read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-rulesets.connectorbay.com/health · Tool schemas: https://byok-cloudflare-rulesets.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-rulesets · agent@connectorbay.com

What Cloudflare Rulesets (BYOK) is for

Cloudflare Rulesets (BYOK) lets an AI assistant read your own Cloudflare Rulesets data through the Cloudflare Rulesets API with a key you supply (Cloudflare API token with Zone WAF / Account Rulesets read permission). Read-only: 12 tools (list_zone_rulesets, get_zone_ruleset, get_zone_entrypoint, list_zone_entrypoint_versions, list_account_rulesets, get_account_ruleset, get_account_entrypoint, get_zone_ruleset_version, list_snippet_rules, list_snippets, get_managed_transforms, get_url_normalization). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Rulesets. Cloudflare Rulesets and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which rulesets are deployed on my Cloudflare zone?"
  • "What rules are in ruleset 2f2feab2?"
  • "What are my zone's custom WAF rules?"
  • "How many versions of my zone's custom WAF rules exist?"
  • "Which account-level rulesets exist?"
  • "What rules are in account ruleset 2f2feab2?"

What it does

  • list_zone_rulesets: List the rulesets of a zone (custom, managed, root) with name, kind, phase, version and last update. Rules are not included; use get_zone_ruleset.
  • get_zone_ruleset: Get one zone ruleset with all its rules (action, expression, description, enabled flag).
  • get_zone_entrypoint: Get the entry point ruleset of a zone for one phase, with its rules. This is the list of rules that actually run for that phase (for example custom WAF rules or rate limits).
  • list_zone_entrypoint_versions: List the saved versions of the zone entry point ruleset for a phase.
  • list_account_rulesets: List the rulesets of an account (managed, custom, root) with name, kind, phase, version and last update.
  • get_account_ruleset: Get one account ruleset with all its rules.
  • get_account_entrypoint: Get the entry point ruleset of an account for one phase, with its rules.
  • get_zone_ruleset_version: Get one saved version of a zone ruleset with its rules.
  • list_snippet_rules: List the zone snippet rules that decide when each Cloudflare Snippet runs (expression, snippet name, enabled).
  • list_snippets: List the Cloudflare Snippets of a zone with name and dates (code is not returned).
  • get_managed_transforms: List the Managed Transforms of a zone (request and response header transforms) with enabled and conflict flags.
  • get_url_normalization: Get the URL normalization settings of a zone: normalization type and scope.

BYOK key

You bring your own Cloudflare Rulesets Cloudflare API token with Zone WAF / Account Rulesets read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Rulesets API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/rulesets/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Rulesets. Cloudflare Rulesets and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Rulesets account.

Built for: Worldwide. Languages: English.