#Cloudflare

Zones, DNS, R2, Workers, KV via Cloudflare's official MCP server.

#Get a token

Generate a Custom API token at https://dash.cloudflare.com/profile/api-tokens.

#Recommended scopes

• Use Custom Token with only the permissions you need.
• Zone:Read at minimum; add Workers/R2/DNS as needed.

#Add it to the vault

bash
mcpvault add cloudflare

Example session:

text
$ mcpvault add cloudflare
Label: main
API Token: ••••
Account id: optional
✓ Validated (status: active)
✓ Saved.

#Tools exposed

• see upstream — zones, DNS, R2, Workers, KV, Cache, more

#Switch to this account

In any chat client wired to mcpvault, ask:

Switch to my <label> Cloudflare account.

The vault server's activate_account tool flips the active label. Wrappers re-read it on the next call — no restart.