Cloudflare
Source: https://runstack.engineer/docs/toolkits/cloudflare
DNS records, zones, WAF lists, firewall, tunnels, and load balancing.
Tools (20):
| Tool | Description |
|---|---|
cloudflareCreateDnsRecord | Create a new DNS record in a zone. Makes live changes — get the zone ID first via cloudflareListZones. Confirm type, name, and content with the user before executing. |
cloudflareListDnsRecords | List and search DNS records in a zone. Use to find record IDs for update or delete operations, e.g. after a "record already exists" error. Supports filtering by type, name, and content with pagination. |
cloudflareUpdateDnsRecord | Update an existing DNS record. Only provided fields are modified. Confirm zone and record IDs first via cloudflareListZones and cloudflareListDnsRecords. Changes to records used by active tunnels take effect immediately. |
cloudflareDeleteDnsRecord | Delete a DNS record. Deletion is immediate and irreversible — confirm zone and record IDs with the user first. |
cloudflareListZones | List, search, and filter zones in the account. Paginate with page/perPage and check result_info.total_pages for all pages. Extract zone_id from results before calling zone-scoped tools. Only zones delegated to Cloudflare nameservers appear. |
cloudflareCreateZone | Create a new DNS zone (domain) in Cloudflare. The zone stays pending until nameservers are updated at the registrar. Get the account ID via cloudflareListAccounts when needed. |
cloudflareUpdateZone | Update one property of an existing zone (pause/unpause, type, or vanity nameservers). Changes apply immediately — confirm the zone ID and change with the user first. Exactly one of paused, type, or vanityNameServers must be provided per call. |
cloudflareDeleteZone | Delete a zone and all its DNS records. Permanent and irreversible — confirm the zone identifier with the user first. |
cloudflareListAccounts | List accounts you have access to. Use to discover account IDs required by account-scoped operations. Confirm the intended account_id before any write operations when multiple accounts are returned. |
cloudflareListAccountMembers | List members of an account with roles, permissions, and membership status. Use to audit who has access to an account or check invitation status. Supports status filtering, sorting, and pagination. |
cloudflareCreateList | Create a new empty custom list (IP, hostname, ASN, or redirect) for use in WAF rules and filters. Add items to the list separately afterwards. List limits depend on plan. |
cloudflareListWafLists | List WAF custom lists for an account (metadata only, no items). Iterate with page/perPage until result_info.total_pages is reached to retrieve all lists. |
cloudflareUpdateList | Update the description of a WAF list. Only the description can be changed — list items cannot be updated with this tool. |
cloudflareDeleteList | Delete a WAF list. Verify no filters reference the list first — confirm the account and list IDs with the user. |
cloudflareListFirewallRules | List firewall rules for a zone. Use to audit current firewall configuration. Does not expose Workers routes or other routing constructs. |
cloudflareGetBotManagementSettings | Get a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise settings). Use to audit bot protection for a zone. |
cloudflareListMonitors | List load balancer health-check monitors in an account. Paginate with page/perPage and check result_info.total_pages for all pages. |
cloudflareListPools | List load balancer pools in an account to discover pool IDs and origins. Optionally filter by health-check monitor ID. Paginate with page/perPage. |
cloudflareListTunnels | List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses. Use before tunnel operations like routing or debugging. |
cloudflareUpdateTunnelConfiguration | Replace the remotely-managed configuration (ingress rules and routing) of a Cloudflare Tunnel. This REPLACES the entire config — include all existing rules you want to keep plus a catch-all (service http_status:404) last. Incorrect config can break routing; confirm with the user first. |