Cloudflare Connector
Read-safe Cloudflare connector for zones, DNS records, and Worker inventory.
Credential setup
bearerCreate a custom API token with Zone Read, DNS Read, and Workers Scripts Read only.
Setup docs: https://dash.cloudflare.com/profile/api-tokens
After adding this connector, attach the credential on the server page, then run astrail tools list.
Hosted MCP endpoint
/api/mcp/preset-cloudflarePrivate servers require an Astrail API key in the Authorization header.
MCP client snippets
ConnectClaude Desktop config
{
"mcpServers": {
"cloudflare-connector": {
"url": "/api/mcp/preset-cloudflare"
}
}
}cURL initialize
curl -sS -X POST "/api/mcp/preset-cloudflare" \
-H 'Content-Type: application/json' \
--data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'cURL tools/list
curl -sS -X POST "/api/mcp/preset-cloudflare" \
-H 'Content-Type: application/json' \
--data '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'cURL tools/call
curl -sS -X POST "/api/mcp/preset-cloudflare" \
-H 'Content-Type: application/json' \
--data '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"cloudflare_list_zones","arguments":{"account.id":1,"name":"example","page":"example","per_page":"example"}}}'Runtime behavior
healthynot_checkedsafe_rest_executionnot recordednot recordednot recordednonestructured fallbackstandardauth_required / oauth_requiredmapping_requiredAstrail does not evaluate generated TypeScript inside Next.js. Hosted calls are routed through stored tool metadata and endpoint maps.
Tools
4cloudflare_list_zonesList Cloudflare zones for an account.
cloudflare_get_zoneRetrieve a Cloudflare zone.
cloudflare_list_dns_recordsList DNS records in a Cloudflare zone.
cloudflare_list_worker_scriptsList Workers scripts in a Cloudflare account.
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
import { z } from "zod";
const server = new McpServer({ name: "Cloudflare Connector", version: "1.0.0" });
// Curated Astrail connector for: cloudflare_list_zones, cloudflare_get_zone, cloudflare_list_dns_records, cloudflare_list_worker_scripts.
// The hosted endpoint executes its verified deterministic endpoint map. Attach a least-privilege provider credential before calling private tools.
server.tool("connector_status", "Confirm this curated connector template is installed.", z.object({}), async () => ({
content: [{ type: "text", text: "Connector installed. Attach provider credentials to enable hosted API calls." }],
}));
const transport = new StdioServerTransport();
await server.connect(transport);