Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Secrets Store (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-secrets-store.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-secrets-store.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-secrets-store.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Secrets Store Cloudflare API token with Secrets Store read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-secrets-store.connectorbay.com/health · Tool schemas: https://byok-cloudflare-secrets-store.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-secrets-store · agent@connectorbay.com

What Cloudflare Secrets Store (BYOK) is for

Cloudflare Secrets Store (BYOK) lets an AI assistant read your own Cloudflare Secrets Store data through the Cloudflare Secrets Store API with a key you supply (Cloudflare API token with Secrets Store read permission). Read-only: 5 tools (list_stores, get_store, list_secrets, get_secret, get_quota). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Secrets Store. Cloudflare Secrets Store and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Secrets Stores does my Cloudflare account have?"
  • "When was my Secrets Store created?"
  • "Which secrets are stored in my Cloudflare Secrets Store and what are they scoped to?"
  • "Is the secret STRIPE_KEY active and which scopes can use it?"
  • "How many Secrets Store secrets can I still add?"

What it does

  • list_stores: List the Secrets Stores of an account with id, name and dates.
  • get_store: Get one Secrets Store by id.
  • list_secrets: List the secrets in a store with name, comment, scopes, status and dates. Secret values are never returned by the API.
  • get_secret: Get the metadata of one secret (name, comment, scopes, status, dates); the value is never returned.
  • get_quota: Show how many secrets the account has used out of its Secrets Store quota.

BYOK key

You bring your own Cloudflare Secrets Store Cloudflare API token with Secrets Store read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Secrets Store API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/secrets_store/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Secrets Store. Cloudflare Secrets Store and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Secrets Store account.

Built for: Worldwide. Languages: English.