Cloud · 1 skill
Cloudflare MCP and Claude skills
Pull Workers requests and errors, zone traffic, cache and firewall events from Cloudflare's GraphQL Analytics API, and report what changed this week.
Connect Cloudflare to your agent (MCP)
- Cloudflare API MCP server, Cloudflare's official remote server at
https://mcp.cloudflare.com/mcp. In Claude Code runclaude mcp add --transport http cloudflare https://mcp.cloudflare.com/mcp, in Codexcodex mcp add cloudflare --url https://mcp.cloudflare.com/mcp, and in Cursor add the URL tomcp.json; you then authorize through Cloudflare and choose the permissions to grant. It reaches the whole API through two tools,searchto find endpoints andexecuteto call them (GraphQL analytics queries included), plus a docs tool (docs). The older per-product servers, such as Observability and GraphQL, are deprecated in its favor. - The same server with an API token, for unattended runs: create a token at dash.cloudflare.com/profile/api-tokens and send it as
Authorization: Bearer. An account token also needs Account Resources: Read so the server can find the account ID. - API and Wrangler. The skill reads
CLOUDFLARE_API_TOKENandCLOUDFLARE_ACCOUNT_ID(the names Wrangler uses too) and posts GraphQL queries;wrangler tail <worker>streams live logs when you need to watch an error happen.
Create the token with only Account Analytics: Read, Zone Analytics: Read and Workers Scripts: Read on the accounts and zones in the report; with no Edit permissions, execute can't change anything.
1 Cloudflare skill
What agents do with Cloudflare
Most Cloudflare reporting goes through the GraphQL Analytics API at https://api.cloudflare.com/client/v4/graphql, with datasets under an account or a zone. workersInvocationsAdaptive gives requests, errors, subrequests and CPU time per Worker script, httpRequestsAdaptiveGroups gives requests, bytes, cache status and response codes per zone with dimensions such as country and path, and firewallEventsAdaptive lists security events with the action taken and the rule that matched. Workers Observability adds queryable logs and invocation traces, and the REST API covers everything else, from DNS records to Workers and Pages deployments.
Developers and ops teams schedule Workers error rates with the scripts and routes behind a spike, daily requests and CPU time against plan limits, weekly zone traffic with cache hit ratio and top countries, and blocked or challenged requests by rule.
Teams that use these
Your Cloudflare numbers, on one board with everything else
Skills are free to use with any agent. Briefkin is where their results land: one board for every report, number and question your agents send, with a ping when something needs you.
Free during the open beta. No card.