Cloudflare · works today

Let Claude read your Cloudflare analytics, DNS and settings

“Which of my sites had errors this week?” “What’s the SSL mode on shop.example.com?” Ask your agent, and keep the API token on your Mac.

The short answer

You can let Claude read your Cloudflare account safely by connecting it to MoltenRock Connect instead of handing it an API token. Add a read-only Cloudflare token to Connect once; Claude Code, Claude Desktop or Cursor then ask Connect over MCP, and Connect answers from Cloudflare’s API: zones, DNS records, settings, Pages and Workers, plus analytics through read-only queries. The token never reaches the agent.

The problem

Cloudflare questions take a dozen dashboard clicks

  • Answers are scattered
    Traffic in one place, DNS in another, settings per zone.
  • Tokens in configs
    Pasting an API token into an agent’s config puts your whole account one leak away.
  • Write tokens by accident
    A token created “to be safe” with edit rights can change DNS.

How MoltenRock handles it

Read-only answers, token kept

  • Reads across your account
    Zones, DNS records, settings, Pages, Workers and analytics.
  • Token stays in Connect
    In your Mac’s Keychain, or MoltenRock’s vault with MoltenRock Pro.
  • Every read logged
    Each request is recorded on your Mac.

How it works

Set it up

  1. 01
    Create a read-only token
    The Cloudflare card in Connect lists the permissions it expects.
  2. 02
    Add Cloudflare in Connect
    Paste the token once, Test, Save.
  3. 03
    Ask your agent
    Over MCP from Claude Code, Claude Desktop or Cursor.

Straight answer

Today and next

Stays on your Mac

  • Your Cloudflare API token
  • Any ability to change your account: reads only today
  • The log of every request

Leaves your Mac

  • Read calls from your Mac straight to Cloudflare’s API
  • Answers, to your agent and its AI model
  • Changes come with the Human Queue for Cloudflare, coming soon

Questions

What people ask first

Can my agent change anything in Cloudflare?

Not today. Connect offers Cloudflare reads. Changes arrive with the Human Queue for Cloudflare: your agent will propose, and you’ll approve.

Which token should I use?

A read-only API token. The Cloudflare card in Connect says which permissions it expects.

Does anything go through a MoltenRock server?

No. Connect calls Cloudflare’s API directly from your Mac.

What does it cost?

Connect is free for two platforms; Cloudflare can be one of them.

Your Cloudflare, answered. Your token, kept.

MoltenRock Connect is free for Mac.