How do I connect Cloudflare to Operator?

You authorize Cloudflare once from your Operator dashboard. Operator holds the connection and refreshes the access token for you, so your agent keeps working with Cloudflare without you signing in again.

Can my agent work with issues and pull requests in Cloudflare?

Yes. It can open and comment on issues, review pull requests, manage labels, and read project details when you ask. Teams use it to triage incoming work, draft release notes, and post a summary of what changed without leaving chat.

Do I need to write code or manage Cloudflare API keys?

No code and no API keys. You authorize Cloudflare through a normal sign in and Operator handles the connection, so there is nothing to wire up or host.

Can my agent use Cloudflare together with my other apps?

Yes. The same agent reaches every app you connect, so it can move between Cloudflare and tools like GitHub, Supabase, Pagerduty in one job, reading from one and acting in another without you wiring anything between them.

← All integrations

Connect Cloudflare to OpenClaw on Operator.io

Cloudflare is a global network that secures and accelerates web traffic. It helps protect your sites and APIs from attacks while ensuring reliable performance.

Developer Tools & DevOps20 actions

Try for free

Automate Cloudflare with AI

Operator runs your personal agent on OpenClaw, the open source agent framework, and points it straight at Cloudflare. You message the agent on Telegram or Discord, tell it what you need in plain language, and it operates Cloudflare on its own, running actions like create dns record, create waf list, create zone.

Your agent reaches Cloudflare directly or through connectors like Composio MCP and Pipedream MCP, which handle the sign in and token refresh for you, so there is nothing to wire up and no API keys to paste.

What your agent can do with Cloudflare

Your agent can call any of these Cloudflare actions by name as part of a larger task. Ask for the outcome you want and it picks the right ones.

Create DNS record

Tool to create a new DNS record within a specific zone. Requires write privileges and makes live changes to the zone. Use after obtaining the zone ID via CLOUDFLARE_LIST_ZONES to programmatically add DNS entries.

Create WAF List

Create a new empty custom list for use in WAF rules and filters. Lists can contain IP addresses, hostnames, ASNs, or redirects. Once created, use separate actions to add items to the list. Note: List availability depends on plan (Free: 1...

Create Zone

Creates a new DNS zone (domain) in Cloudflare. A zone represents a domain and its DNS records. Use this when adding a new domain to manage with Cloudflare. Requires account ID (obtainable via LIST_ACCOUNTS). The zone will be in 'pending'...

Delete DNS Record

Tool to delete a DNS record within a specific zone. Deletion is immediate and irreversible. Use only after confirming both zone and record IDs. Requires write privileges on the zone. Example: "Delete DNS record 372e6795... from zone 023e...

Delete WAF List

Tool to delete a WAF list. Use when you need to remove a list after verifying no filters reference it. Example: DELETE_LIST(account_id="<account_id>", list_id="<list_id>")

Delete Zone

Tool to delete a zone. Use after confirming the zone identifier to permanently remove a DNS zone and all its DNS records from your Cloudflare account. Example: DELETE_ZONE(zone_identifier="023e105f4ecef8ad9ca31a8372d0c353")

Get Bot Management Settings

Tool to retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management). Use after identifying the correct zone_id (e.g., via CLOUDFLARE_LIST_ZONES). This tool is the canonical way to au...

List WAF Lists

Tool to fetch all WAF lists (no items) for an account. Results are paginated; iterate using page and per_page parameters until result_info.total_pages is reached to retrieve all lists. Use after confirming account ID.

List Account Members

Lists all members of a Cloudflare account with their roles, permissions, and status. Returns detailed information about each account member including their user details (name, email, 2FA status), assigned roles with granular permissions,...

List Accounts

List all Cloudflare accounts you have ownership or verified access to. Retrieves a paginated list of accounts with their details including account ID, name, type, settings, and creation date. An empty or partial result may indicate insuf...

List DNS records

Tool to list and search DNS records in a Cloudflare zone. Use when you need to find existing DNS record IDs for update or delete operations, especially after a "record already exists" error during creation. Returns matching records with...

List Firewall Rules

Tool to list firewall rules for a specific DNS zone. Use after confirming the zone ID to retrieve and audit current firewall rules. Does not expose Workers routes or other routing constructs.

List Monitors

Tool to list all load-balancer monitors in a Cloudflare account. Use after creating or updating monitors to retrieve a paginated list. Response includes `result_info.total_pages` to determine when all pages have been fetched.

List Pools

Tool to list all load balancer pools in a Cloudflare account. Use after confirming account ID to discover pool IDs. Paginate using `page` and `per_page`; check `result_info.total_pages` in the response to determine if additional pages ex...

List Tunnels

List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses. Use when you need to find a tunnel_id before performing tunnel operations like routing, DNS configuration, or debugging.

List Zones

Lists, searches, sorts, and filters zones in the authenticated account. Use `page`/`per_page` to paginate; check `result_info.total_pages` in the response to iterate all pages. Does not return DNS records — extract `zone_id` from results...

Update DNS record

Tool to update an existing DNS record within a specific zone. Use after confirming both zone and record identifiers; only provided fields are modified. Updates to records used by active tunnels take effect immediately and can disrupt liv...

Update WAF List

Tool to update the description of a WAF list (cannot update items). Use after confirming list metadata.

Update Tunnel Configuration

Tool to update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing). Use when you need to programmatically configure hostname-to-origin mappings for a tunnel. WARNING: This operation REPLACES the entire config...

Update Zone

Tool to update properties of an existing zone; changes apply immediately to the live zone. Confirm zone ID and intended change with the user before calling. Only one field can be modified per call.

How to connect Cloudflare

You authorize Cloudflare once from your dashboard. Operator holds the connection and refreshes the access tokens on its own, so your agent keeps working with Cloudflare without you signing in again. The same setup unlocks every other app your agent can reach, so you only do it once.

When you are ready, the get started guide walks through standing up your OpenClaw agent.

Common questions about Cloudflare

How do I connect Cloudflare to Operator?: You authorize Cloudflare once from your Operator dashboard. Operator holds the connection and refreshes the access token for you, so your agent keeps working with Cloudflare without you signing in again.
Can my agent work with issues and pull requests in Cloudflare?: Yes. It can open and comment on issues, review pull requests, manage labels, and read project details when you ask. Teams use it to triage incoming work, draft release notes, and post a summary of what changed without leaving chat.
Do I need to write code or manage Cloudflare API keys?: No code and no API keys. You authorize Cloudflare through a normal sign in and Operator handles the connection, so there is nothing to wire up or host.
Can my agent use Cloudflare together with my other apps?: Yes. The same agent reaches every app you connect, so it can move between Cloudflare and tools like GitHub, Supabase, Pagerduty in one job, reading from one and acting in another without you wiring anything between them.