Let Claude read your Cloudflare analytics, DNS and settings
“Which of my sites had errors this week?” “What’s the SSL mode on shop.example.com?” Ask your agent, and keep the API token on your Mac.
The short answer
You can let Claude read your Cloudflare account safely by connecting it to MoltenRock Connect instead of handing it an API token. Add a read-only Cloudflare token to Connect once; Claude Code, Claude Desktop or Cursor then ask Connect over MCP, and Connect answers from Cloudflare’s API: zones, DNS records, settings, Pages and Workers, plus analytics through read-only queries. The token never reaches the agent.
The problem
Cloudflare questions take a dozen dashboard clicks
- Answers are scatteredTraffic in one place, DNS in another, settings per zone.
- Tokens in configsPasting an API token into an agent’s config puts your whole account one leak away.
- Write tokens by accidentA token created “to be safe” with edit rights can change DNS.
How MoltenRock handles it
Read-only answers, token kept
- Reads across your accountZones, DNS records, settings, Pages, Workers and analytics.
- Token stays in ConnectIn your Mac’s Keychain, or MoltenRock’s vault with MoltenRock Pro.
- Every read loggedEach request is recorded on your Mac.
How it works
Set it up
- 01Create a read-only tokenThe Cloudflare card in Connect lists the permissions it expects.
- 02Add Cloudflare in ConnectPaste the token once, Test, Save.
- 03Ask your agentOver MCP from Claude Code, Claude Desktop or Cursor.
Straight answer
Today and next
Stays on your Mac
- Your Cloudflare API token
- Any ability to change your account: reads only today
- The log of every request
Leaves your Mac
- Read calls from your Mac straight to Cloudflare’s API
- Answers, to your agent and its AI model
- Changes come with the Human Queue for Cloudflare, coming soon
Questions
What people ask first
Can my agent change anything in Cloudflare?
Not today. Connect offers Cloudflare reads. Changes arrive with the Human Queue for Cloudflare: your agent will propose, and you’ll approve.
Which token should I use?
A read-only API token. The Cloudflare card in Connect says which permissions it expects.
Does anything go through a MoltenRock server?
No. Connect calls Cloudflare’s API directly from your Mac.
What does it cost?
Connect is free for two platforms; Cloudflare can be one of them.
Your Cloudflare, answered. Your token, kept.
MoltenRock Connect is free for Mac.