Cloudflare MCP connector
The Cloudflare connector lets Claude, ChatGPT, Cursor, Microsoft Copilot, or any MCP client look up your Cloudflare accounts, zones, members, roles, firewall rules, rule sets, WAF overrides, and audit logs through one governed Elaichi endpoint, inside each person's own access.
- Connects with an API key
- Free 14-day trial
- No credit card
Claude
Elaichi connected
Which zones changed firewall rules in the last week?
Working in Cloudflare with Elaichi
-
List all Cloudflare accounts
-
-
Governance
/
Audit log
Last 24 hours
Claude · 9:41 AM
Done
Claude · 9:41 AM
Done
Claude · 9:41 AM
Done
ChatGPT · 9:38 AM
Done
Cursor · 9:35 AM
Done
How to connect Cloudflare to Claude, ChatGPT, Cursor or Microsoft Copilot
Step by step, for each AI app
Cloudflare MCP connector for Claude
-
1
Open Customize, then Connectors.
-
2
Press Add.
-
3
Name it, paste the MCP server URL, then Continue.
https://api.elaichi.ai/mcp -
4
Sign in and approve.
On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.
Cloudflare MCP connector for Claude Code
-
1
In a terminal, run
claude mcp addwith the endpoint.https://api.elaichi.ai/mcp -
2
Start Claude Code and run
/mcp. -
3
Pick elaichi, then sign in and approve in the browser.
Terminal
$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp
Use --scope project instead to share it with the repository through .mcp.json.
Cloudflare MCP connector for ChatGPT
-
1
Open Plugins, then press the + button.
-
2
Name it and paste the endpoint into Server URL.
https://api.elaichi.ai/mcp -
3
Leave Authentication on OAuth, then tick the risk acknowledgement.
-
4
Press Create, then sign in and approve.
Works on the web. The plugin directory lives at chatgpt.com/plugins.
Cloudflare MCP connector for Cursor
-
1
Open
~/.cursor/mcp.json. -
2
Add the endpoint under
mcpServers.https://api.elaichi.ai/mcp -
3
Reload Cursor, then sign in and approve.
~/.cursor/mcp.json
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
Set up per machine, so repeat it on each computer you work from.
Cloudflare MCP connector for Microsoft Copilot
-
1
In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.
-
2
Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.
https://api.elaichi.ai/mcp -
3
Create a new connection, sign in and approve, then press Add to agent.
-
4
Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.
- Server URL
- https://api.elaichi.ai/mcp
- Authentication
- OAuth 2.0
- Type
- Dynamic discovery
Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.
Connect Cloudflare to any MCP client
-
1
Add the endpoint as a remote MCP server.
https://api.elaichi.ai/mcp -
2
Sign in and approve.
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
The Elaichi Agent already has these tools, with nothing to set up.
What teams do with Cloudflare through Elaichi
Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Cloudflare is logged.
-
Security
Review firewall rules before a change window
Ask which firewall rules and rule sets are active on a zone and get them read back in plain language before anyone touches production.
-
IT
Check who still has access to Cloudflare
List every member across your Cloudflare accounts with their roles, then spot contractors and former staff who should no longer be there.
-
Compliance
Pull Cloudflare audit history for a review
When an auditor asks who changed what and when, have the agent read the Cloudflare audit log for the period and summarize it.
-
Support
Find the zone behind a customer domain
When a customer says their site is misbehaving, look up the zone it sits in and read its details without opening the Cloudflare dashboard.
-
Engineering
Compare rule sets across staging and production
Fetch the rule sets attached to two zones and ask where they differ before a release goes out.
-
Operations
Inventory every domain across accounts
List all zones across every Cloudflare account you manage for a quarterly ownership review, in one question instead of account by account.
Try asking
- “Which zones changed firewall rules in the last week?”
- “List members with admin roles on our production account.”
- “Show WAF overrides active across all Cloudflare zones.”
What connecting Cloudflare gets you
6 screens from Elaichi, each doing one job for your Cloudflare account.
Ask Elaichi to work across your apps.
Which zones changed firewall rules in the last week?
List members with admin roles on our production account.
Show WAF overrides active across all Cloudflare zones.
Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot
The agent
Ask about zones, get answers from Cloudflare.
Plain language questions return live zones, firewall rules and members.
ElaichiAI appsClaude
ChatGPT
Cursor
Microsoft Copilot
Copy the endpoint
AI apps
Claude, ChatGPT, Cursor and Microsoft Copilot reach Cloudflare.
One org MCP endpoint over OAuth, no SDK and no shared API key.
ElaichiToolsTool catalog
12 Cloudflare tools ready on connect.
Accounts, zones, members, roles, firewall rules and rule sets, no custom code.
ElaichiToolboxesToolboxes
Every team gets its own Cloudflare toolbox.
Curate one toolbox per team, from zone reads to WAF overrides.
ElaichiConnectionsShared connections
Teammates use Cloudflare without touching the token.
See who connected each account and which teams and members share it.
ElaichiAudit logAudit log
Every Cloudflare call has a name on it.
When, who, what happened, type and resource, appended and never edited.
From answering questions to doing the work
A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.
Cloudflare digest
Run 418 · started 2 minutes ago · on behalf of Emily Carter
-
✓
Schedule
Every weekday at 8:00 AM
0.2s -
✓
Fetch zones
Cloudflare
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Jake Morgan
Approve Deny -
Post the digest
Cloudflare
Queued
Automations
A schedule fires, a Cloudflare digest ships.
Fetch zones and firewall rules, group them, draft, approve, post back.
Cloudflare health
Refreshed 4 minutes ago · every 15 minutes · from the zones collection
Zones
1,284 ↓ 12%
Firewall rules
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Zones created
Last 14 days
By team
Share of activity
Production 34%
Staging 27%
Security 21%
Marketing sites 18%
Collections and dashboards
Cloudflare zone health, counted on a schedule.
Four metrics, 14 days of records created, split by team, no model involved.
For IT and engineering
Elaichi vs Zapier MCP vs Composio for Cloudflare
All three can connect Cloudflare to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.
| What to check | Elaichi | Zapier MCP | Composio |
|---|---|---|---|
| Where the AI connects |
One address for the whole organization.
https://api.elaichi.ai/mcp
|
A server per member, created at sign-in. | An MCP endpoint per team, or an SDK. |
| Control over Cloudflare tools | Allow or restrict single Cloudflare tools, per role or user. | App and action restrictions on the account. | Role permissions, down to the action. |
| Record of calls | One audit entry per Cloudflare call. | A History tab of tool calls. | A log of every tool call. |
| Single sign-on | SAML or OIDC, plus SCIM, on Gold. | SAML on Enterprise. | SAML and OIDC on Enterprise. |
| Price | Free for one person; $15 per user per month on Gold. | 2 tasks per successful call. | Billed per tool call. |
Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.
Longer take: Zapier MCP alternative and when you don't need an MCP gateway.
Cloudflare tools for your AI agents
12 tools are ready to call through Elaichi's MCP endpoint the moment you connect Cloudflare, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
No tools match your search.
Questions, answered
How do I connect Cloudflare to Claude?
Connect Cloudflare in Elaichi first, then open Claude, go to Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp. Cloudflare connects with an API key, so the sign-in step is pasting a key from your Cloudflare account into Elaichi. There is no OAuth application to register and no client ID or secret to generate.
Does Cloudflare work with ChatGPT and Cursor as well as Claude?
Yes. Once Cloudflare is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client, and the Elaichi Agent. You connect Cloudflare once and every client you use sees it.
What can an AI agent actually do with my Cloudflare data?
With the Cloudflare connector, an agent can list your accounts, zones, members and their roles, firewall rules, rule sets, WAF overrides, and audit logs, and look up any one of them by ID. That means you can ask in plain language which firewall rules protect a domain, who has access to an account, or what changed last week, and get an answer from live Cloudflare records. This connector reads Cloudflare; it does not change settings.
Does connecting Cloudflare give the AI access to every account and zone?
No. Everything the agent sees in Cloudflare follows the access of the person who signed in with their key, so it can only read the accounts and zones that person can already read in Cloudflare. Elaichi can narrow that further with restrictions per action, and it can never widen it beyond what Cloudflare itself allows.
Can I stop an agent from deleting or changing things in Cloudflare?
The Cloudflare connector in Elaichi only lists and looks up records such as zones, firewall rules, and members, so there is nothing here that deletes or changes a Cloudflare setting. On top of that, Elaichi restrictions work per action, so you can turn off any individual capability for a role. A restricted action still appears in Elaichi's tool search, flagged as restricted, but Claude, ChatGPT, Cursor or Microsoft Copilot cannot run it, whatever the prompt says.
What happens to a Cloudflare connection when someone leaves?
Offboarding a person in Elaichi ends their access to Cloudflare through Elaichi at once, across every client they used. A shared Cloudflare connection keeps working for everyone else on the team. If you want to remove Cloudflare entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, Microsoft Copilot, and every other client at the same time.
Does the Cloudflare MCP connector work with Gemini, Codex, Claude Code or other MCP clients?
Yes. Cloudflare is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.
Is Elaichi an alternative to Zapier MCP for Cloudflare?
Yes. Both let Claude, ChatGPT or Cursor use Cloudflare. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Cloudflare call.
How is Elaichi different from Composio for Cloudflare?
Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Cloudflare: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.
Put Cloudflare in front of your team
14 days of Black, no credit card. Connect it once and pick what each team can call.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
- ChatGPT
- Claude
- Cursor
- Microsoft Copilot