---
title: Cloudflare | Keycard
description: Cloud platform for networking, security, and developer tools
---

Access Cloudflare’s full suite of cloud services via AI. Manage DNS zones, Workers scripts, security configurations, analytics, and account resources. The Cloudflare MCP ecosystem includes specialized sub-servers for documentation, observability, Radar insights, browser rendering, AI Gateway, and more.

Adding Cloudflare provisions three things in your zone: an upstream resource pointing at `https://mcp.cloudflare.com/mcp` (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with Cloudflare’s OAuth issuer.

When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream Cloudflare token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s [identity provider](/admin/identity-providers/index.md), [access policies](/admin/access-policies/index.md), and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.

## Tools

TOOLS

Tools the upstream server exposes through the Keycard MCP Gateway.

Cloudflare exposes 2 tools through the gateway:

- Search across content in the workspace

  Search the Cloudflare OpenAPI spec.

- execute

  Run JavaScript code against the Cloudflare API

## Install

INSTALL

Add Cloudflare to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.

1. **Open the catalog**

   In your zone’s [Keycard Console](https://console.keycard.ai), go to **Applications** → **Add Application** → **Explore MCP Servers**.

2. **Find and install Cloudflare**

   Search for `Cloudflare` in the catalog and click **Install**.

3. **Connect your development tool**

   Once installed, Cloudflare appears on the **Applications** page with a **Keycard MCP Gateway URL**. Use the **Install** dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.

## Related

RELATED

- [Catalog overview](/admin/catalog/index.md) - browse other MCP and API servers
- [Access policies](/admin/access-policies/index.md) - control who can use Cloudflare
- [Identity providers](/admin/identity-providers/index.md) - control who can sign in

[PreviousClose](/admin/catalog/mcp-servers/close-crm/index.md)[NextGitHub](/admin/catalog/mcp-servers/github/index.md)