Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
Cloudflare Threat Intel (BYOK) icon

Cloudflare Threat Intel (BYOK)

Look up domains, IP addresses, URLs, WHOIS records and passive DNS in Cloudflare's threat intelligence, and list your indicator feeds, with your own API token

Unify Dynamics LLC

Tools9read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderCloudflare Threat Intelunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

What risk categories does Cloudflare assign to example.com?
Tools called
get_domain_details
How was example.com categorized over time?
Tools called
get_domain_history
Who owns IP 93.184.216.34 and is it risky?
Tools called
get_ip_overview
Which subnets does AS13335 announce?
Tools called
get_asn_subnets
Which hostnames pointed to 93.184.216.34?
Tools called
get_passive_dns_by_ip
When does example.com expire and who is the registrar?
Tools called
get_whois_record

About

Cloudflare Threat Intel (BYOK) lets an AI assistant read your own Cloudflare Threat Intel data through the Cloudflare Threat Intel API with a key you supply (Cloudflare API token with Intel read permission). Read-only: 9 tools (get_domain_details, get_domain_history, get_ip_overview, get_asn_subnets, get_passive_dns_by_ip, get_whois_record, get_url_intelligence, list_indicator_feeds, list_ip_lists). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Threat Intel. Cloudflare Threat Intel and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the Cloudflare Threat Intel API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/intel/. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

9 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data9 tools
  • Get domain detailsGet Cloudflare's view of a domain: content categories, risk types, risk score, popularity rank and what it resolves to.
  • Get domain historyGet the history of content categorizations of a domain with start and end dates.
  • Get ip overviewGet Cloudflare's overview of an IPv4 or IPv6 address: the network that owns it and risk types.
  • Get asn subnetsList the subnets announced by an autonomous system number, with the total IP count.
  • Get passive dns by ipGet hostnames that Cloudflare saw resolving to an IPv4 address, with first and last seen times.
  • Get whois recordGet a domain's public WHOIS registration facts: registrar, creation, update and expiry dates, nameservers, status and DNSSEC.
  • Get url intelligenceGet Cloudflare's categories and risk types for a full URL.
  • List indicator feedsList the custom indicator feeds your account owns, with public and downloadable flags.
  • List ip listsList the managed IP lists available for Cloudflare Intel (id, name, description).

Information

PublisherUnify Dynamics LLC
CategorySafety
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-cloudflare-threat-intel.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Upcoach (BYOK)

Read your Upcoach coaching organization: programs, members, clients, events, tasks, courses, forum posts and smart documents with your own API token

Live · MCP + REST11 tools

Workyard (BYOK)

Read your Workyard crew time tracking: time cards, projects, customers, geofenced work sites, tasks, cost codes and forms with your own API token

Live · MCP + REST12 tools

QuickBooks Time (BYOK)

Read your QuickBooks Time (TSheets) crew time tracking: timesheets, job codes, projects, locations, groups and schedule events with your own access token

Live · MCP + REST7 tools

Shiftbase (BYOK)

Read your Shiftbase workforce schedule: locations, departments, teams, shifts, rosters, open shifts, timesheets and absences with your own API key

Live · MCP + REST10 tools

Housecall Pro (BYOK)

Read your Housecall Pro jobs, estimates, invoices, leads, customers, employees and company details with your own API key

Live · MCP + REST10 tools

Phorest US (BYOK)

Read your Phorest salon branches, services, products, appointments, reviews and packages on the US server with your own API login

Live · MCP + REST10 tools

Get Cloudflare Threat Intel (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own Cloudflare Threat Intel Cloudflare API token with Intel read permission. Create one at https://dash.cloudflare.com/profile/api-tokens, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to Cloudflare Threat Intel. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with Cloudflare Threat Intel.