cloudflare-mcp-go is an MCP (Model Context Protocol) server written in Go, used to connect to the Cloudflare API v4. Its goal is to let any MCP-compatible client (including Claude and other MCP-compatible tools) inspect and investigate Cloudflare accounts through natural language.
Purpose and positioning: The repository description describes it as "read-focused", mainly aimed at security triage and investigation workflows. In other words, it is better suited for observing, querying, and analyzing configurations and security events on Cloudflare, rather than directly performing modification-type operations.
Main capabilities: According to the materials, the server covers the following areas: zones, DNS, WAF and firewall rules, rate limiting, HTTP request logs, Security Center insights, threat intelligence (IP/domain/ASN/WHOIS/passive DNS). It groups tools by area, containing a total of 117 read-only tools; in addition, there are optional write tools, and these write tools are only registered when the environment variable CLOUDFLARE_MCP_ENABLE_WRITE=true is set. The functional categories mentioned in the materials include "Firewall, WAF and Rate Limiting", "Security Events and Logs", "Security Center", "Threat Intelligence", "Account and Audit", and so on.
How to use: A Cloudflare API token and Go 1.25+ are required. The materials state that it can be added to Claude Code with a single command, without manually cloning or building; CLOUDFLARE_ACCOUNT_ID is an optional variable, needed only by a few tools (accounts, audit logs, KV, intel). The server communicates via stdio, and any MCP client can connect in the same pattern. If the repository has already been cloned locally, you can also build the binary and point the client's MCP configuration to it; on macOS, Claude Desktop's configuration is located at ~/Library/Application Support/Claude/claude_desktop_config.json. The materials also mention support for manual building and running, and that the project structure is described in doc/architecture.md.
Usage examples: After connecting, you can ask the MCP client questions such as: "List the DNS records for example.com", "A blocked request has Ray ID 8f1c2d3e4f5a6b7c, why was it blocked?", "Show the high-severity Security Center insights for this zone", "Is IP 203.0.113.10 known to be malicious? Which domains resolve to it?", "Which firewall rules are currently challenging traffic?"
Applicable scenarios: Mainly suitable for security operations and investigators, to quickly view a Cloudflare zone's DNS, firewall, WAF, rate limiting, request logs, security events, and threat intelligence in natural language, assisting with security triage and incident investigation.
Limitations and missing information: The materials clearly state that the server is read-focused, and write tools must be registered only after explicitly enabling the environment variable. A Cloudflare API token and Go 1.25+ are required. Regarding the specific installation command, the Claude Code add command, a complete JSON example of the client configuration, the functional details of each of the 117 tools, whether it is paid, performance, or usage quotas, the materials do not provide them and they are not yet available.
