MCP Server

Network & Access Control

pf-cloudflare

Network and access control on Cloudflare for the data and security agent — DNS, Zero Trust access apps and policies, audit logs, security rulesets, and certificates.

A work in progress

We've published these resources in the hope they're useful — you're welcome to copy or use anything you find on this site. We're still working through each record to optimise it for completeness and accuracy, so some entries are fuller than others for now.

What it does

Network and access control on Cloudflare for the data and security agent — DNS, Zero Trust access apps and policies, audit logs, security rulesets, and certificates.

Tools it exposes

Connects to Cloudflare. Each tool below is a single, well-defined capability — described in plain language.

Token_VerifyCheck that the access token is valid.Connects to: Cloudflare
Zone_ListList the DNS zones.Connects to: Cloudflare · zones
Zone_GetRead one zone's configuration.Connects to: Cloudflare · zones
DNS_ListList DNS records in a zone.Connects to: Cloudflare · DNS
DNS_GetRead one DNS record.Connects to: Cloudflare · DNS
DNS_CreateCreate a DNS record.Connects to: Cloudflare · DNS
DNS_UpdateChange parts of a DNS record.Connects to: Cloudflare · DNS
DNS_OverwriteFully replace a DNS record.Connects to: Cloudflare · DNS
DNS_DeleteDelete a DNS record.Connects to: Cloudflare · DNS
DNS_BatchMake several DNS changes at once, with rollback on failure.Connects to: Cloudflare · DNS
Access_App_ListList Zero Trust access applications.Connects to: Cloudflare · Access
Access_App_GetRead one access application.Connects to: Cloudflare · Access
Access_App_CreateCreate an access application.Connects to: Cloudflare · Access
Access_App_UpdateUpdate an access application.Connects to: Cloudflare · Access
Access_App_DeleteDelete an access application.Connects to: Cloudflare · Access
Access_Policy_ListList reusable access policies.Connects to: Cloudflare · Access
Access_Policy_GetRead one access policy.Connects to: Cloudflare · Access
Access_Policy_CreateCreate an access policy.Connects to: Cloudflare · Access
Access_Policy_UpdateUpdate an access policy.Connects to: Cloudflare · Access
Access_Policy_DeleteDelete an access policy.Connects to: Cloudflare · Access
Access_Group_ListList access groups.Connects to: Cloudflare · Access
Access_Group_GetRead one access group.Connects to: Cloudflare · Access
Access_Group_CreateCreate an access group.Connects to: Cloudflare · Access
Access_Group_UpdateUpdate an access group.Connects to: Cloudflare · Access
Access_Group_DeleteDelete an access group.Connects to: Cloudflare · Access
Audit_Logs_ListRead account audit-log entries.Connects to: Cloudflare · audit
Rulesets_ListList security rulesets (WAF, rate-limit, redirects).Connects to: Cloudflare · rulesets
Ruleset_GetRead one ruleset and its rules.Connects to: Cloudflare · rulesets
SSL_Settings_GetRead a zone's SSL/TLS configuration.Connects to: Cloudflare · SSL
Certs_ListList a zone's edge certificates.Connects to: Cloudflare · SSL

Built and maintained by the MCP agent

This server was built with FastMCP and Python by our MCP agent, to spec. In practice it takes well under thirty minutes of hands-on direction — agents are genuinely good at building these. The value is in the design: each server exposes only the endpoints we want, with clear descriptions and parameters tuned to our goals.

Meet the MCP agent

You don't need all of this to start

Most of what these agents rely on has a simpler equivalent. Anywhere we use a database, you can usually start with a spreadsheet or a document — whatever you're comfortable with. Anywhere we built a custom MCP server, you can reach for a prebuilt AI connector instead of building your own.

We go further because it's where our experience pays off. Years of hands-on database work make a custom data layer feasible for us, and purpose-built MCP servers let us hand each agent a short, sharp instruction file and exactly the tools it needs — custom descriptions, only the endpoints we want, and the occasional extra gate — instead of a long manifesto or playbook. Nothing more, nothing less.

Back to Agent Infrastructure All resources

Ready to build technology that works for your mission?

Tell us where your organisation is and what's slowing your team down. We respond personally.