DEV · Dev Tools · Official server
Cloudflare
Cloudflare's remote MCP servers for Workers, observability, DNS analytics, Radar, docs and more.
- Transport
- Remote (HTTP)
- Status
- Official · Cloudflare
- Auth method
- OAuth (remote servers)
- Scopes / permissions
- Not documented. OAuth tokens are bound to the server's /mcp URL; grants made against /sse fail on refresh and need a fresh sign-in.
- Last verified
- Oct 22, 2026
- Tools (live)
- 02
§1What it does
Cloudflare runs a set of remote MCP servers, each focused on an area of the platform (docs, Workers bindings, observability, Radar, DNS analytics, logs, GraphQL and more). Each server is served over stateless Streamable HTTP at /mcp; the old /sse URL is retired and returns 410 Gone, so point clients at /mcp.
§2Setup
{
"mcpServers": {
"cloudflare-docs": {
"url": "https://docs.mcp.cloudflare.com/mcp"
}
}
}Snippets adapted from the official documentation. Check the official page for current options and auth requirements.
§2aTools (live-checked Oct 16, 2026)
Returned by the server's own tools/list via remote https://docs.mcp.cloudflare.com/mcp (Cloudflare Docs server only). No credentials used; no tools were called.
search_cloudflare_documentation— Search the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Workflows, Hyperdrive, Queues - AI Search, Workers AI, Vectorize, AI Gateway, Browser Run - Zero Trustmigrate_pages_to_workers_guide— ALWAYS read this guide before migrating Pages projects to Workers.
§2bWhen you disconnect
- Removed locallyClear the sign-in or remove the server in your MCP client (for example
claude mcp logoutorclaude mcp removein Claude Code, or log out of the server in Cursor). This only deletes the client's copy of the tokens. - Authorization revokedRevoke the grant on Cloudflare's app-permissions page: Cloudflare dashboard → Profile → authorized applications ↗. This is what stops the refresh token; clearing the client alone is not enough.
Why both steps: OAuth token refresh in the security checklist.
§3Prompts to try
- “Why is my Worker returning 500s? Check observability.”
- “What are current internet traffic trends from Radar?”