Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare API token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare.connectorbay.com/health · Tool schemas: https://byok-cloudflare.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare · agent@connectorbay.com

What Cloudflare (BYOK) is for

Cloudflare (BYOK) lets an AI assistant read your own Cloudflare data through the Cloudflare API with a key you supply (API token). Read-only: 7 tools (verify_token, list_accounts, list_zones, get_zone, list_dns_records, get_dns_record, list_worker_scripts). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare. Cloudflare and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Is my Cloudflare API token still active?"
  • "Which Cloudflare accounts can I access?"
  • "Which domains do I have on Cloudflare?"
  • "What are the Cloudflare name servers for zone 023e105f4ecef8ad9ca31a8372d0c353?"
  • "What DNS records does my Cloudflare zone have?"
  • "Show Cloudflare DNS record 372e67954025e0ba6aaa6d586b9e0b59 of my zone"

What it does

  • verify_token: Check whether a Cloudflare user API token is valid: returns its status (for example active), ID and validity window. Does not work for account-owned tokens.
  • list_accounts: List the Cloudflare accounts the token can access, with ID, name and type.
  • list_zones: List the Cloudflare zones (domains) the token can access, with status, type, name servers and account. Up to 50 per page.
  • get_zone: Get one Cloudflare zone: status, type, name servers, account and activation date.
  • list_dns_records: List a zone's DNS records (type, name, content, proxied flag, TTL, comment), filtered by type or searched by text.
  • get_dns_record: Get one DNS record of a zone by ID: type, name, content, proxied flag, TTL and timestamps.
  • list_worker_scripts: List the Cloudflare Workers scripts of an account with name, usage model, handlers, compatibility date and modified time.

BYOK key

You bring your own Cloudflare API token (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare. Cloudflare and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare account.

Built for: Worldwide. Languages: English.