Cloudflare for AI agents
DNS records, cache purges, Workers, and zone settings. Add an API key once and every agent you run can use it.
- Connects with an API key
- Ready to connect
- Any MCP client
- No card required
The route from an agent to Cloudflare
Once Cloudflare is set up in your workspace, any agent you run can reach it: a Spinrun agent, or Claude, ChatGPT and Cursor through one MCP endpoint. Every call passes through the Spinrun gateway, which sorts it by risk and writes it to the activity log.
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app read, write and destructive rules at the gateway on Free and Pro.
Cloudflare in the catalog
DNS records, cache purges, Workers, and zone settings. · Developer Tools & DevOps
- An agent gets a jobFrom chat, a schedule, or your own AI client
- Spinrun checks the callSorted as a read, a write or a destructive call
- Cloudflare does the workThrough the connection you set up in your workspace
- Every call is loggedTool, outcome and duration, in one activity log
From Spinrun recipes
Jobs to hand an agent in Cloudflare
Each one is a real prompt from a Spinrun recipe or team page, ready to adapt to your own work.
“Our auditor wants SOC2 evidence for Q1: put the WAF settings from Cloudflare and the access reviews on one Notion page.”
Audit pack
Three steps
From connection to first call
Connect an app once
Sign in from your workspace with OAuth or an API key. Spinrun keeps the credential in an encrypted vault, never in an agent's config.
Decide what it may do
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app rules for reads, writes and destructive calls on Free and Pro.
Let any agent use it
Claude, ChatGPT, Cursor or a Spinrun agent reach the app through one MCP endpoint, and every call is written to the same activity log.
What it can do
Every Cloudflare action, sorted by risk
Spinrun sorts every Cloudflare action into one of three tiers. By default, agents ask before a write; on Free and Pro, the rules you set decide which tiers run.
- Reads
Read actions
Fetch and search. Cannot change anything.
- Writes
Write actions
Create and update. Changes data but does not remove it.
- Destructive
Destructive actions
Delete, revoke, or overwrite. Hard or impossible to undo.
Paired in recipes
Apps agents use with Cloudflare
These appear next to Cloudflare in Spinrun's templates, recipes and team pages.
Same category
Other Developer Tools & DevOps apps
Other apps in this category that your agents can use.
Questions about Cloudflare
You paste an Cloudflare API key once. Spinrun keeps it in an encrypted vault rather than in an agent's config, and you can revoke it in one click.
Put Cloudflare to work. Start free.
Connect Cloudflare, decide what it may do, and give an agent its first job.