Live survey286 models · 13 providers · 17,592 auditsAudited Using Git Worktrees · SAFE →What changedHow we verifyllms.txt

MCP servers · publisher

MCP servers by cloudflare

cloudflare publishes 5 MCP servers in the atlas. 0 are SAFE, 2 CAUTION and 3 BLOCK. Each was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “MCP servers by cloudflare”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/cloudflare

Verdicts · 5 servers

✓SAFE0!CAUTION2✕BLOCK3

Transports

  • stdio, runs locally2
  • Streamable HTTP, remote3
  • SSE, legacy remote1
  • Not declared1

A server can list more than one transport.

Tool risk

2

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 29 tools.

Servers with no destructive tools →

5 servers by cloudflare

1–5 of 5 · ranked by trust score, then stars

Workers

cloudflare/workers-mcp

!CAUTION B

Talk to a Cloudflare Worker from Claude Desktop!

★ 6451 readstdio

Cloudflare Playwright

cloudflare/playwright-mcp

!CAUTION B

Playwright MCP fork that works with Cloudflare Browser Rendering

★ 2581 destructivesse

Cloudflare

cloudflare/mcp

✕BLOCK D

MCP server for the Cloudflare API

★ 8911 writestreamable-http

Cloudflare

cloudflare/mcp-server-cloudflare

✕BLOCK F
★ 4,2602 writestreamable-http

Cloudflare AI

cloudflare/ai

✕BLOCK F
★ 1,1712 destructive

More from cloudflare

Skills by cloudflare →cloudflare as a publisher →

Questions

Which cloudflare MCP server has the best trust score?
Workers (cloudflare/workers-mcp) and Cloudflare Playwright (cloudflare/playwright-mcp), ranked by trust score and then stars.
Are cloudflare's MCP servers read-only?
1 of 5 declare only read tools; 2 expose at least one destructive tool; 0 build their tool list at runtime, so we cannot read it from the source.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.