Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare Zone Settings (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-zone-settings.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-zone-settings.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-zone-settings.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare Zone Settings Cloudflare API token with Zone Settings read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-zone-settings.connectorbay.com/health · Tool schemas: https://byok-cloudflare-zone-settings.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-zone-settings · agent@connectorbay.com

What Cloudflare Zone Settings (BYOK) is for

Cloudflare Zone Settings (BYOK) lets an AI assistant read your own Cloudflare Zone Settings data through the Cloudflare Zone Settings API with a key you supply (Cloudflare API token with Zone Settings read permission). Read-only: 9 tools (list_zone_settings, get_zone_setting, get_tiered_caching, get_smart_tiered_cache, get_regional_tiered_cache, get_cache_reserve, get_argo_smart_routing, get_origin_post_quantum_encryption, get_zone_hold). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Zone Settings. Cloudflare Zone Settings and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "What are the security and TLS settings of my Cloudflare zone?"
  • "What is the SSL mode of my zone?"
  • "Is Tiered Caching enabled on my zone?"
  • "Is Smart Tiered Cache enabled on my zone?"
  • "Is Regional Tiered Cache enabled on my zone?"
  • "Is Cache Reserve enabled on my zone?"

What it does

  • list_zone_settings: List all settings of a zone with id, current value, editable flag and last modification time (SSL mode, minimum TLS version, always use HTTPS, security level, caching and more).
  • get_zone_setting: Get one zone setting by name, such as ssl, min_tls_version, always_use_https, security_level, browser_cache_ttl or development_mode.
  • get_tiered_caching: Show whether Tiered Caching is on or off for a zone.
  • get_smart_tiered_cache: Show whether Smart Tiered Cache topology is on or off for a zone.
  • get_regional_tiered_cache: Show whether Regional Tiered Cache is on or off for a zone.
  • get_cache_reserve: Show whether Cache Reserve is on or off for a zone.
  • get_argo_smart_routing: Show whether Argo Smart Routing is on or off for a zone.
  • get_origin_post_quantum_encryption: Show the origin post-quantum encryption mode (preferred, supported or off) of a zone.
  • get_zone_hold: Show whether a zone hold is active (blocking others from adding the domain) with the hold-after time and whether subdomains are included.

BYOK key

You bring your own Cloudflare Zone Settings Cloudflare API token with Zone Settings read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare Zone Settings API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/zones/subresources/settings/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare Zone Settings. Cloudflare Zone Settings and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare Zone Settings account.

Built for: Worldwide. Languages: English.