Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Security Center (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-security-center.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-security-center.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-security-center.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Security Center Cloudflare API token with Security Center read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-security-center.connectorbay.com/health · Tool schemas: https://byok-cloudflare-security-center.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-security-center · agent@connectorbay.com

What Cloudflare Security Center (BYOK) is for

Cloudflare Security Center (BYOK) lets an AI assistant read your own Cloudflare Security Center data through the Cloudflare Security Center API with a key you supply (Cloudflare API token with Security Center read permission). Read-only: 9 tools (list_account_insights, list_zone_insights, count_account_insights_by_class, count_account_insights_by_severity, count_account_insights_by_type, count_zone_insights_by_severity, get_recent_scans, get_account_state, get_security_txt). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Security Center. Cloudflare Security Center and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "What security issues does Cloudflare Security Center report for my account?"
  • "What security insights does Cloudflare have for my zone?"
  • "How many Security Center insights per class does my account have?"
  • "How many critical Security Center insights are open on my account?"
  • "Which types of Security Center insights are most common on my account?"
  • "How severe are the Security Center insights on my zone?"

What it does

  • list_account_insights: List security insights found for the account's domains (misconfigurations, exposed infrastructure, email security gaps) with class, type, severity, subject and status. Each issue also carries a payload object.
  • list_zone_insights: List security insights for one zone with class, type, severity, subject and status. Each issue also carries a payload object.
  • count_account_insights_by_class: Count the account's security insights by issue class, for example how many domains lack DMARC.
  • count_account_insights_by_severity: Count the account's security insights by severity (Low, Moderate, Critical).
  • count_account_insights_by_type: Count the account's security insights by issue type, for example insecure configuration or exposed infrastructure.
  • count_zone_insights_by_severity: Count one zone's security insights by severity (Low, Moderate, Critical).
  • get_recent_scans: Show recent Security Center scans of the account (id, start time, status) and the scan quota used and available.
  • get_account_state: Show whether Security Center scans are enabled for the account and whether a dormant account was recently reactivated.
  • get_security_txt: Get the zone's security.txt settings: enabled flag, contacts, policy links, canonical URLs, expiry and preferred languages.

BYOK key

You bring your own Cloudflare Security Center Cloudflare API token with Security Center read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Security Center API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/security_center/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Security Center. Cloudflare Security Center and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Security Center account.

Built for: Worldwide. Languages: English.