Cloudflare, managed from your AI assistant
Connect your Cloudflare account once and ask - “is my SSL set up right?”, “am I under attack?”, “add a DNS record for my new subdomain” - the AI audits, explains and, with your OK, fixes it.
- Paste one API token
- Read-only or full control - your choice
- Pay only for successful calls
cloudflare_audit_zone2 creditsScore 61/100 (C). The top issues on example.com:
| Severity | Issue |
|---|---|
| High | SSL/TLS is Flexible |
| High | Always Use HTTPS is off |
| Medium | No DMARC record |
Flexible SSL causes redirect loops with WordPress. Want me to switch SSL to Full (strict) and turn on Always Use HTTPS?
https://toolkitbackend-j69m.onrender.com/api/v1/cloudflare/mcpClick "Open Claude connectors" below - claude.ai opens on Settings → Connectors.
Click "Add custom connector". Name: Cloudflare. URL: use the Copy button above and paste it.
Click Add, then Connect. Sign in to 500Toolbox and click Allow. Done.
In a chat, open the tools menu (the + / sliders icon) and switch Cloudflare on.
A connector added on claude.ai also appears in the Claude desktop and mobile apps. On Team and Enterprise plans an owner adds it once under Organization settings → Connectors; members then click Connect.
Why ask your assistant
A Cloudflare expert in every chat
An audit that explains itself
SSL, HTTPS, TLS, HSTS, exposed origin IPs, SPF, DMARC and DNSSEC - ranked by severity, each with the exact fix.
Traffic and attacks, in words
Cache hit ratio, bandwidth, errors and countries, plus what the firewall blocked and whether it is an attack.
Changes without the dashboard
Add DNS records, switch SSL mode, purge the cache or turn on “Under Attack” mode by asking - always confirmed first.
How it works
Set up once in about two minutes
Create an API token
In Cloudflare, create a token (read-only, or with edit rights) and paste it on the setup page.
Add one URL to your AI app
Paste the server URL as a custom connector in Claude, ChatGPT, Cursor or VS Code and click Connect.
Ask in plain language
The assistant picks the right tool, reads Cloudflare and explains - and asks before it changes anything.
What you can ask
Questions it answers from your Cloudflare account
“Is my Cloudflare set up correctly? Fix what is safe to fix.”
“Why is my cache hit ratio so low?”
“Am I being attacked right now? Who is being blocked?”
“Add a CNAME for blog pointing to my host and proxy it.”
“Are my SPF and DMARC records correct?”
“Purge the cache for my homepage and style.css.”
12 tools
Everything your assistant can do on Cloudflare
Audits, analytics and security events to read, and DNS, settings and cache tools to act. Every tool name starts with cloudflare_.
Health & security
SSL mode, HTTPS, TLS, HSTS, dev mode, exposed origin IP, SPF, DMARC, DNSSEC - ranked with fixes and a score.
cloudflare_audit_zoneStatus, plan, name servers and every key setting of a domain.
cloudflare_get_zone_overviewAll records with proxy status, filterable by type or name.
cloudflare_list_dns_recordsTraffic & attacks
Requests, visitors, bandwidth, cache hit ratio, 4xx/5xx errors and countries by day.
cloudflare_get_analyticsWhat the firewall, WAF and bot rules blocked - by action, country, path and IP.
cloudflare_get_security_eventsManage (needs edit permission)
SSL mode, Always Use HTTPS, TLS, dev mode, security level, caching and more.
cloudflare_update_settingClear specific URLs or the whole zone.
cloudflare_purge_cacheA, AAAA, CNAME, TXT, MX and more, proxied or not.
cloudflare_create_dns_recordChange value, TTL or the orange-cloud proxy.
cloudflare_update_dns_recordRemoves a record - the AI confirms first.
cloudflare_delete_dns_recordAccount
Every domain the token can see.
cloudflare_list_zonesCredit balance, connection and the price of every tool.
cloudflare_get_account_statusOne-click reports
Built-in prompts
Apps that support MCP prompts (Claude shows them in the + menu) get complete Cloudflare workflows.
Health check
Audit + traffic check with fixes in priority order, applied one by one on your OK.
Traffic & cache report
Visitors, bandwidth, cache hit ratio, errors and countries for a period.
Am I under attack?
Security events and spikes explained, with the recommended response.
Security & privacy
You decide what it may do
Scoped by your token
The AI can only do what the token allows. A read-only token cannot change anything.
Encrypted at rest
Your token is encrypted with AES-256-GCM and never sent to the AI app.
Confirm before changes
Write tools are flagged, so AI apps ask you before they run, and the AI shows what will change.
Disconnect anytime
Delete the stored token from your dashboard, or roll it in Cloudflare.
Pricing
Pay per call, from 1 credit
Free credits every month, plus a welcome grant when you sign up. Failed calls are refunded automatically, and purchased credits never expire.
FAQ
Questions people ask
How do I connect Cloudflare?
Create an API token in the Cloudflare dashboard (My Profile → API Tokens) and paste it on the setup page. Read-only is enough for audits and analytics; add edit permissions only if you want the AI to change DNS, settings or the cache.
Which token permissions do I need?
For reading: Zone → Zone → Read, Zone → Zone Settings → Read, Zone → DNS → Read, Zone → Analytics → Read. To make changes add Zone → DNS → Edit, Zone → Zone Settings → Edit and Zone → Cache Purge → Purge. Limit it to the zones you want.
Can the AI break my site?
Write tools are marked as such, so your AI app asks before running them, and the AI is instructed to show exactly what will change first. With a read-only token nothing can change at all.
Why is some analytics data missing?
Cloudflare keeps less history on the Free plan (about 30 days of daily traffic and 24-72 hours of security events). Longer periods need a paid plan.
What does it cost?
Listing zones and the account status are free; most tools cost 1 credit; the audit, analytics and security events cost 2. You are only charged when a call succeeds.
Is my token safe?
It is checked with Cloudflare, stored encrypted (AES-256-GCM), used only on our server and never sent to your AI app. Disconnecting deletes it; you can also roll or delete the token in Cloudflare at any time.
Your Cloudflare account, one question away
Connect it once - every chat after that can use it.