Cloudflare MCP server: scoped account access for every agent

Start with endpoint discovery and identity. An agent can find the API operation relevant to a zone or Worker, then show which authenticated account it will use. Do not let a familiar resource name substitute for an account ID. Infrastructure names are often repeated across development and production.

Code mode reduces the visible tool surface by making execution a programmable operation. That is useful for joining several API reads, but it also means a gateway cannot put separate switches around every internal endpoint the JavaScript calls. The review unit is the complete execute invocation.

For diagnosis, ask the agent to collect relevant documentation, identify the intended API requests and explain the expected result before execution. Repeatable production changes are usually better expressed as infrastructure configuration in version control, with a diff and deployment process you can review.

Official Cloudflare MCP servers vs AIPx

The official Cloudflare MCP project describes the current code-mode surface. The Cloudflare MCP documentation explains the protocol and hosting options, while the server repository covers another official implementation. These references do not mean every server exposes identical tools.

A direct official connection avoids another service processing infrastructure requests. AIPx is useful when Cloudflare shares an agent with GitHub, Supabase or other services, but provider permissions and account limits still apply.

Connect Cloudflare to Claude Code, Cursor or Codex

Connect Cloudflare with OAuth and inspect the authenticated account and discovered code-mode tools before granting execution.

1. Open the AIPx dashboard, choose Cloudflare under Integrations and complete its connection form or authorization.
2. Create an MCP agent, enable that connection and choose the tools this particular agent needs. Save the rules before opening your AI client.
3. Copy the agent’s complete URL. The examples below use AGENT_ID; replace it with the actual value from your dashboard.

An endpoint identifies the AIPx agent, not a provider API key. Client authentication to AIPx is separate from connecting Cloudflare; adding the URL does not grant extra provider permissions. Our MCP gateway guide explains how several approved connections can share that endpoint.

Connect Claude to Cloudflare

In Claude, open Customize → Connectors and add a custom connector with your AIPx URL. Continue through AIPx sign-in, then check the tools available in a conversation. Custom connector access depends on account and workspace policy; administrators can restrict it. The Claude MCP setup guide covers the current controls. A direct vendor connection can be simpler when Cloudflare is the only service you need.

Cloudflare MCP in Claude Code

claude mcp add --transport http aipx https://dash.aipx.run/mcp/AGENT_ID

Run /mcp to authorize, then use whoami and documentation search before account execution. Review the complete JavaScript for any later execute call. See Claude Code MCP setup for scope and login.

Cloudflare MCP in Cursor

Add this server to .cursor/mcp.json for the project or ~/.cursor/mcp.json for your user:

{
  "mcpServers": {
    "aipx": { "url": "https://dash.aipx.run/mcp/AGENT_ID" }
  }
}

Sign in to AIPx from Cursor and inspect Cloudflare account identity before diagnostics. Code-mode execute deserves approval even for a planned read. The Cursor MCP guide covers those client controls.

Cloudflare MCP in Codex

codex mcp add aipx --url https://dash.aipx.run/mcp/AGENT_ID
codex mcp login aipx
codex mcp list

Codex uses the HTTP endpoint and browser OAuth; it does not need a copy of the Cloudflare credential in its config. See Codex MCP setup for TOML configuration and project trust requirements.

A ChatGPT account with custom MCP access can inspect Cloudflare documentation through this URL. Hide execute if the job needs no account API calls. ChatGPT MCP setup describes current account and administrative restrictions.

Scope Cloudflare per agent: changes on Confirm

A documentation assistant can have docs and search on Allow with execute hidden. An infrastructure investigator may also need whoami. An operator who needs execution can use Confirm, but must review the full JavaScript and keep approvals enabled in the client.

This recommendation applies even to a script containing only reads, because the same tool can write. The product’s general read/write defaults cannot split that mixed tool into many internal API permissions. If your client ignores approval hints, Hide is the useful restriction. See MCP access control.

Cloudflare MCP gateway vs an MCP gateway like AIPx

Cloudflare provides tools and infrastructure for building and hosting MCP services. AIPx is an MCP gateway that presents already connected service tools through an agent-specific endpoint. Connecting the Cloudflare integration grants access to its discovered account tools; it does not deploy a new MCP gateway into your Cloudflare account.

You can use Sentry for error context and PostHog for product evidence while Cloudflare supplies infrastructure context. Keep those connections independently restricted so reading an incident does not also enable infrastructure changes.

Cloudflare account and execution limits

The OAuth user’s Cloudflare access is still decisive. AIPx does not create a resource-scoped authorization boundary inside an execute call. Use appropriately restricted provider access when a zone or account must remain unreachable, then choose the gateway tool modes for the task.

An endpoint search result is a plan, not a completed operation. Keep the API response and error context in the diagnosis so a failed execution is not presented as a successful change. For production infrastructure, preserve the deployment workflow and reviewable configuration rather than treating an interactive MCP session as a replacement for it.

Browse all MCP integrations to choose another connection for this agent.

The Cloudflare connection can use AIPx Free with 3 active accounts and 1 agent; check AIPx pricing for gateway plans and keep provider or client charges separate.