Base44
Build and edit Base44 apps from an AI assistant, and query data your app's users submit.
Cloudflare Developer Platform
Manage Workers KV, R2, D1 and Hyperdrive from your AI assistant.
Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.
Paste it into any MCP client. Setup docs
What the Cloudflare Developer Platform connector does
The Cloudflare Developer Platform MCP server connects Cloudflare storage and compute to Claude, ChatGPT and any MCP-compatible agent. It exposes 24 tools for managing Workers KV namespaces, R2 buckets, D1 databases and Hyperdrive configurations, plus reading Worker source code. Sign-in is OAuth. This is one of seventeen separate Cloudflare MCP servers, each on its own hostname.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Cloudflare Developer Platform tools (24)
- accounts_list
- set_active_account
- kv_namespaces_list
- kv_namespace_create
- kv_namespace_delete
- kv_namespace_get
- kv_namespace_update
- workers_list
- workers_get_worker
- workers_get_worker_code
- r2_buckets_list
- r2_bucket_create
- r2_bucket_get
- r2_bucket_delete
- d1_databases_list
- d1_database_create
- d1_database_delete
- d1_database_get
- d1_database_query
- hyperdrive_configs_list
- hyperdrive_config_create
- hyperdrive_config_delete
- hyperdrive_config_get
- hyperdrive_config_edit
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Frequently asked questions
Which Cloudflare MCP server is the Cloudflare Developer Platform connector?
The Workers Bindings server. Cloudflare publishes seventeen managed MCP servers on separate hostnames, and this listing is the one at bindings.mcp.cloudflare.com. Its siblings cover documentation, observability, Radar, browser rendering, audit logs and more, each with a different tool set. Connecting this one gives you storage and compute primitives only.
Can the Cloudflare MCP server delete a KV namespace, and can you get it back?
It can delete one, and Cloudflare publishes no way to get it back. The kv_namespace_delete tool is annotated destructive in the server's own source, and Cloudflare's Workers KV documentation describes no trash, undelete or restore path for a namespace. There is no inverse tool on this server either.
Does D1 Time Travel let you recover a database an agent deleted?
No. Time Travel restores an existing database to an earlier minute within the last thirty days on Workers Paid, or seven on Workers Free. Every command names a database that must still exist, so it recovers bad writes rather than dropped databases. Cloudflare recommends exporting to R2 for anything longer.
Can an AI agent run arbitrary SQL against a Cloudflare D1 database?
Yes. The d1_database_query tool takes a free-text sql parameter and passes it to Cloudflare's D1 query API unchanged. Nothing on this server restricts statements to reads, so DROP TABLE and DELETE reach production the same way SELECT does. The tool is not annotated destructive in Cloudflare's source.
How does the Cloudflare MCP server choose which account to act on?
Automatically, per request. Cloudflare removed the set_active_account and accounts_list tools in workers-bindings 0.5.0. An AccountManager now resolves the account from your token when it covers one account, then a cf-account-id header you set in client config, then an optional account_id argument. No selection persists between calls.
What permissions does the Cloudflare MCP connector ask for?
Account read, Workers write and D1 write, plus user read and refresh tokens. Cloudflare defines that set in the server's published source and shows it on the authorization page, where you also scope the grant to one account. The OAuth descriptor omits scopes_supported entirely, so no client can discover them before you consent.
Can the Cloudflare MCP server spend money on your account?
Yes, indirectly. D1 bills rows read and written, and Cloudflare states dashboard and CLI queries count as billable usage, so agent queries do too. Creating R2 buckets and D1 databases adds billable storage. R2 also requires a subscription added through checkout before any bucket exists.
Can the Cloudflare MCP connector deploy a Worker?
No. Anthropic's directory description offers deploying code to production as an example prompt, but no deploy tool exists in its own tool list or in Cloudflare's published reference. The three Workers tools all read: they list Workers, fetch details and fetch source code. Deployment stays with Wrangler or the dashboard.
Sources
- Cloudflare's own MCP servers (retrieved 2026-08-18, read as Markdown at the
index.mdsuffix the host advertises in itsllms.txt; page dated 2026-07-28). Source for the seventeen-server table, the endpoints, and the Cloudflare API server's two-tool Code Mode figures. · retrieved 2026-08-18 - Cloudflare MCP server source,
apps/workers-bindings(read 2026-08-18; this exact folder is the support URL Anthropic's directory publishes for the listing). Tool registrations, safety annotations, the scope definitions, theAccountManagerresolution order, the unregisteredhyperdrive_config_create, the rawsqlpassthrough, and the Hyperdrive origin credential schemas were all read here. The 0.5.0 removal ofaccounts_listandset_active_accountis recorded in the app'sCHANGELOG.md. · retrieved 2026-08-18 - Anthropic connector directory (snapshot dated 2026-08-16). Source for the 24 tool names, the
partnertier, the endpoint, and the "Read and write" permissions field. · retrieved 2026-08-16 - Live OAuth probe of
https://bindings.mcp.cloudflare.com/mcp— 2026-08-18. Anonymous POST returned HTTP 401 with aBearerchallenge; the RFC 9728 resource descriptor and the authorization-server document both returned HTTP 200 and both omitscopes_supported, checked by key presence rather than by reading the printed output. · retrieved 2026-08-18 - D1 Time Travel and backups (retrieved 2026-08-18; page dated 2026-04-21). The thirty-day and seven-day windows, the in-place overwrite behaviour, and the R2 export recommendation. · retrieved 2026-08-18
- D1 FAQs and D1 pricing — and (both retrieved 2026-08-18). Billable dashboard and CLI queries, the free-plan daily limits, the 10 GB per-database cap, and the 5,000-row table-scan example. · retrieved 2026-08-18
- R2 delete buckets and R2 pricing — and (retrieved 2026-08-18). The empty-first requirement and the statement that removed objects cannot be recovered. · retrieved 2026-08-18
- Workers KV limits and KV documentation — and (retrieved 2026-08-18). The namespace and storage caps, and the absence of any documented namespace recovery path. · retrieved 2026-08-18
- Visual Studio Code detailed walkthrough (retrieved 2026-08-18). The authorization page's Read only / Full access / Custom choice, the single-account scoping, the demo-account advice, and the Connected Applications revocation path. This page documents the Cloudflare API server rather than this one; the account-level grant and revocation mechanism are Cloudflare-account features shared across its servers. · retrieved 2026-08-18
https://developers.cloudflare.com/robots.txt(retrieved 2026-08-18) permits all crawling and carriesContent-Signal: ai-train=yes, search=yes, ai-input=yes— all three axes granted, so synthesising this documentation into an AI-facing page is expressly permitted by the publisher. Anthropic's directory publisheshttps://www.support.cloudflare.com/as the documentation URL for this listing; that host is a general support homepage with no MCP content, and the documentation above was reached instead through Cloudflare's ownllms.txtmachine index. · retrieved 2026-08-18
More Developer Tools connectors
CircleCI
Diagnose failed builds, read job logs, inspect test results and rerun or roll back deployments from your AI assistant.
Claude Managed Agents
Create, run, monitor and debug Anthropic's Claude Managed Agents from inside Claude itself.
Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.
Use it in an agent
Put Cloudflare Developer Platform to work.
Connect Cloudflare Developer Platform once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.