Cloudflare Mcp

通过 Cloudflare MCP 调用 Cloudflare API，支持管理 Workers、DNS、R2、D1、KV 等超过2500个端点。

Security Scan

The skill's requirements and instructions align with its stated purpose of calling Cloudflare's MCP API; it is an instruction-only integration that asks the user to add an MCP server to gateway config and perform OAuth authorization.

Purpose & Capability

Name/description (Cloudflare MCP access for Workers, DNS, R2, D1, KV, etc.) match the runtime instructions: configure an MCP server in openclaw.json and use Model Code Mode to call Cloudflare endpoints. No unrelated binaries, env vars, or installs are requested.

Instruction Scope

SKILL.md is focused on the MCP integration and lists only Cloudflare-related operations and the need to set up openclaw.json and OAuth. It does require modifying the gateway config (openclaw.json) and restarting the Gateway — this is expected for adding an MCP server but is a system-level change the user should be aware of. The instructions also state the model will auto-search and execute API endpoints via search()/execute(), which grants the agent broad ability to call Cloudflare endpoints (expected for this skill).

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is downloaded or written by an installer. Lowest-risk install posture.

Credentials

No environment variables, credentials, or config paths are required in the skill manifest. The skill relies on the gateway's MCP server configuration and OAuth authorization flow with Cloudflare, which is proportional to its purpose.

Persistence & Privilege

always:false (default) and model invocation is allowed (disable-model-invocation:false). Autonomous API invocation is necessary for the skill to function (it will call many Cloudflare endpoints via MCP). The only privilege-like action is instructing an edit to openclaw.json (gateway config)—this is normal for adding an MCP server but is a system-level change the user must consent to.

Assessment

This skill is coherent with its stated purpose: it expects you to add a Cloudflare MCP server entry to your gateway config (openclaw.json) and complete OAuth with Cloudflare. Before installing, be sure you are comfortable editing openclaw.json and restarting the Gateway, and understand that the model will be allowed to search and call many Cloudflare API endpoints via the MCP integration. If you want tighter control, verify the gateway configuration, review the OAuth scopes requested during authorization, and consider restricting autonomous invocation if you prefer manual approval for actions that modify DNS, Workers, or storage resources.

使用 Cloudflare Code Mode MCP 调用 Cloudflare API。支持 Workers、DNS、R2、D1、KV、Vectorize 等 2500+ 端点。

触发词

• "Cloudflare"
• "CF"
• "DNS"
• "Workers"
• "R2"
• "D1"
• "KV"

前置要求

在 openclaw.json 中配置 MCP：

{
  "mcpServers": {
    "cloudflare-api": {
      "url": "https://mcp.cloudflare.com/mcp"
    }
  }
}

然后重启 Gateway。首次使用时会跳转到 Cloudflare 授权页面。

可用操作

操作	说明
列出 Workers	列出所有 Workers 脚本
查看 DNS 记录	获取域名的 DNS 记录
创建 DNS 记录	添加新的 DNS 记录
创建 KV 命名空间	创建新的 KV 存储
创建 R2 存储桶	创建 R2 对象存储
查看账户信息	获取账户详情和配额

使用示例

• "列出我所有的 Workers"
• "查看 example.com 的 DNS 记录"
• "创建一个叫 my-cache 的 KV 命名空间"
• "给 api.example.com 添加一条 A 记录指向 1.2.3.4"

注意事项

• Code Mode 模式下，模型会自动搜索 API 端点并执行调用
• 首次使用需要 OAuth 授权
• 所有操作通过 Cloudflare MCP 的 search() 和 execute() 工具完成