Integration · Developer tools

Connect Claude & ChatGPT to Cloudflare

Ask your AI where a subdomain points, when a certificate expires, or to clear the cache after a deploy. It reads your zones, DNS records, rules, SSL certificates and Workers, and can add, change and delete DNS records, purge the cache and change zone settings. Routine domain chores get done without opening the dashboard.

Connect Cloudflare free

Free plan, no credit card. Takes about a minute.

Try asking

“What DNS records does example.com have?”
The AI finds the zone and lists its DNS records with type, name, content and whether they are proxied.
“Add a CNAME for shop.example.com pointing to shops.myshopify.com, not proxied.”
It creates the CNAME record in the example.com zone with proxying off. The record takes effect within minutes.
“Clear the cache for example.com/pricing and example.com/about.”
It purges only those two URLs, so the rest of the cache stays in place.

What your AI can do

DNS and zones

List zones and DNS records, and add, change or delete records. Read zone status, plan and name servers.

Cache and settings

Purge single URLs or the whole cache. Read and change zone settings such as Always Use HTTPS and development mode.

Rules, SSL and Workers

Read page rules, rulesets, IP access rules and SSL certificates. List Workers with their settings, deployments, routes and domains, plus Pages projects.

“Turn on development mode for example.com.”
It changes the development_mode setting to on. The change applies to the live site right away.
“When do the SSL certificates for example.com expire?”
It lists the certificates for the zone with their status and expiry dates.
“Which Workers do we run, and which routes use them?”
It lists the Workers in your account, their recent deployments and the URL routes in the zone that run them.

26 tools for Cloudflare

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

create_dns_recordChanges dataAdd a DNS record to a zone. In `body` pass type, name, content, and optionally ttl (1 = automatic), proxied (true to route through Cloudflare), priority (MX) and comment. Takes effect on the live domain within minutes.
delete_dns_recordDeletesDelete one DNS record by `dns_record_id`. This cannot be undone and can take a website or email offline; list the records first and confirm with the user.
get_accountGet one account by `account_id`, including its name and settings.
get_dns_recordGet one DNS record by `zone_id` and `dns_record_id`.
get_page_ruleGet one page rule by `pagerule_id`.
get_worker_settingsGet a Worker's settings by `script_name`, including bindings, compatibility date and logging.
get_zoneGet one zone by `zone_id`, including status, plan and assigned name servers.
get_zone_rulesGet all rules for one phase of a zone, for example http_request_dynamic_redirect for redirect rules, http_request_firewall_custom for WAF custom rules or http_request_cache_settings for cache rules.
get_zone_settingRead one zone setting by `setting_id`, for example ssl, always_use_https, development_mode, security_level or cache_level.
list_account_membersList the members of an account with their email, roles and status.
list_accountsList the Cloudflare accounts this API token can access, with their ids.
list_dns_recordsList DNS records in a zone. Filter by `type` (A, CNAME, MX, TXT ...), `name` or `content`.
list_ip_access_rulesList IP access rules for a zone (IPs, ranges or countries that are blocked, challenged or allowed).
list_page_rulesList a zone's page rules (URL forwarding and per-URL cache or security settings).
list_pages_projectsList the Cloudflare Pages projects in an account with their domains and latest deployment.
list_rulesetsList the rulesets in a zone (redirect, cache, firewall and transform rules), with the phase each belongs to.
list_ssl_certificatesList the SSL/TLS certificates for a zone with their status and expiry.
list_worker_deploymentsList recent deployments of a Worker by `script_name`, showing which versions are live.
list_worker_domainsList the custom domains attached to Workers in an account.
list_worker_routesList the URL routes in a zone that run a Worker.
list_workersList the Workers scripts in an account.
list_zonesList zones (domains) on Cloudflare with their id, status and name servers. Filter by `name` to find one domain.
purge_cacheChanges dataClear Cloudflare's cached copies for a zone. In `body` pass files (a list of URLs), or purge_everything: true to clear everything. Clearing everything briefly slows the site while the cache refills.
update_dns_recordChanges dataChange a DNS record by `dns_record_id`. In `body` pass only the fields to change (content, name, ttl, proxied, comment). A wrong value can take a website or email offline.
update_zone_settingChanges dataChange one zone setting by `setting_id`, passing {"value": ...} in `body`, for example development_mode on/off or always_use_https on/off. Takes effect on the live site right away.
verify_api_tokenCheck that the connected API token is valid and active. Useful when other calls fail with permission errors.

Set up in three steps

1
Pick the app
Create a free PipMCP account and choose Cloudflare from the app list.
2
Paste your key
Paste a Cloudflare API token. In the Cloudflare dashboard, go to My Profile > API Tokens, click Create Token, pick a template such as Edit zone DNS or set custom permissions, and copy the token.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
Click your name, then Settings › Connectors › Add custom connector. Paste your link as the Remote MCP server URL. Switch it on from the + menu in a chat.

Questions

What can the AI do in Cloudflare?

The AI can read accounts, members, zones, DNS records, zone settings, page rules, rulesets, IP access rules, SSL certificates, Workers and Pages projects. It can add, change and delete DNS records, purge the cache and change zone settings. It only reaches what your API token allows.

What permissions should my API token have?

Only what you want the AI to do. A template such as Edit zone DNS lets it manage DNS records, while a custom token can be limited to read access and to specific zones. Cloudflare rejects any call the token is not allowed to make.

Does the AI see my Cloudflare API key?

No. Your Cloudflare API token is encrypted at rest and never shown to the AI. Once saved, it is not shown again, not even to you. The AI only works through the tools you switch on.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start read-only. Deleting a DNS record cannot be undone and can take a website or email offline, and changes to records and settings hit the live site. These actions can require your approval before they run. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT, go to Settings › Apps & Connectors › Advanced, turn on Developer mode and add your PipMCP link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link works in Claude under Settings › Connectors › Add custom connector, and in Cursor.

What does it cost?

PipMCP has a free plan, and you do not need a credit card to start. Paid plans bill per completed task, so you pay for work the AI actually finishes. You also need your own Cloudflare account.