FerentinFerentin
Cloudflare logo

Cloudflare

Generally Available

With OAuth2 authorization granted, an AI agent can search and execute across Cloudflare's API to manage DNS, Workers, and security resources, or connect to a product-specific Cloudflare MCP server for observability, Radar, logs, and analytics.

  • Infrastructure
  • DNS & Networking
  • Developer Platform
Configure CloudflareBrowse the 3 tools
Authentication
OAuth 2.0
Hosting
Vendor-hosted endpoint
Data actions
Read and write
MCP tools
3

How it works

Every agent request passes through Ferentin policy before it reaches Cloudflare.

  1. AI agentAsks for something
  2. Ferentin policies
    • OAuth 2.0 consent
    • Scoped API tokens
    • Least privilege
    • Audit logging
  3. Cloudflare MCP serverAuthorized connection
  4. Governed resultMasked, logged, returned

What agents can do

3 tools · you choose which ones agents may call

Every tool this server exposes. You choose which ones agents may call.

  • Cloudflare Docs Search
  • Cloudflare API Spec Search
  • Cloudflare API Code Executor

Before you connect

  • The default endpoint (mcp.cloudflare.com/mcp) is the unified API server: it surfaces 2,500+ Cloudflare API endpoints via a search-then-execute tool pattern rather than one tool per endpoint.
  • Cloudflare publishes many product-specific MCP servers, each at its own host (e.g. observability.mcp.cloudflare.com, radar.mcp.cloudflare.com). Point a per-instance connection at one by overriding the endpoint URL.
  • Agent-mode bearer tokens are accepted only by the main API server; product-specific servers require the OAuth (user) flow — the one exception is the Documentation server (docs.mcp.cloudflare.com/mcp), which is public and unauthenticated.
  • Scope API tokens to least privilege — a Cloudflare API token can be created with narrow permissions and specific zone/account resources.
1 more technical note
  • The tool catalog populates on first live connection (tools/list against the upstream).

About Cloudflare

Cloudflare is a connectivity cloud spanning CDN, DNS, security (Zero Trust/WAF), and the Workers developer platform, all managed through a large public API.

WebsiteDeveloper docs

Frequently asked about Cloudflare

What can AI agents do with Cloudflare through Ferentin?
Through Ferentin, agents can use Cloudflare for dns management, workers platform, zero trust security, observability and analytics and radar. Every call is checked against your Ferentin policies first.
How is Cloudflare access secured?
Requests through the Cloudflare integration are covered by OAuth 2.0 consent, scoped API tokens, least privilege and audit logging. These controls are applied by Ferentin, not by Cloudflare, so they hold across every connected agent.
How do I connect Cloudflare to Ferentin?
Open the Ferentin admin console, add Cloudflare as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
Is the Cloudflare integration generally available?
Yes. The Cloudflare integration is generally available on Ferentin, including the free tier.

Related integrations

3
GitHub logo
GA

GitHub

Development platform for version control, collaboration, and CI/CD workflows.

MCP Servers
View
Vercel logo
GA

Vercel

Inspect deployments, projects, and domains so an agent can monitor and manage your frontend cloud infrastructure.

MCP Servers
View
Datadog logo
Beta

Datadog

Observability platform for logs, metrics, traces, monitors, incidents, security signals, and synthetic tests.

MCP ServersEnterprise-managed
View