KosmoKrator

cloud

Cloudflare MCP Integration for Codex

Connect Cloudflare to Codex through the local KosmoKrator MCP gateway with scoped tools, credentials, and write policy.

7 functions 6 read 1 write Bearer token auth
Submit Cloudflare feedback View package source

Connect Cloudflare to Codex

Use KosmoKrator as a local MCP proxy for Codex so coding sessions can reach selected integrations with explicit write policy.

Register kosmo mcp:serve as a local stdio server and choose the integration allowlist. The gateway is local, scoped to this integration, and starts with --write=deny so Codex can inspect read-capable tools without receiving write access by default.

Cloudflare MCP Config for Codex

Keep write access denied or ask-based unless the workspace is trusted.

{
  "mcpServers": {
    "kosmokrator-cloudflare": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=cloudflare",
        "--write=deny"
      ]
    }
  }
}

Run the Gateway Manually

kosmokrator mcp:serve --integration=cloudflare --write=deny

Why Use KosmoKrator Here

Scoped tools

Expose only Cloudflare instead of a broad multi-service tool list.

Local credentials

Reuse credentials already configured for the KosmoKrator CLI and Lua runtime.

Write policy

Start read-only, then opt into ask or allow for trusted workspaces.

Cloudflare Tools Visible to Codex

Codex sees stable MCP tool names generated from the Cloudflare integration catalog.

MCP toolSource functionTypeDescription
integration__cloudflare__cloudflare_list_zones cloudflare.cloudflare_list_zones Read List all Cloudflare zones (domains). Returns zone IDs, names, status, and plan info. Use this to discover zone identifiers needed for DNS and analytics operations.
integration__cloudflare__cloudflare_get_zone cloudflare.cloudflare_get_zone Read Get detailed information about a specific Cloudflare zone, including its ID, name, status, nameservers, and plan.
integration__cloudflare__cloudflare_list_dns_records cloudflare.cloudflare_list_dns_records Read List DNS records for a Cloudflare zone. Returns record IDs, types, names, content, TTL, and proxy status.
integration__cloudflare__cloudflare_create_dns_record cloudflare.cloudflare_create_dns_record Write Create a new DNS record in a Cloudflare zone. Supports A, AAAA, CNAME, MX, TXT, NS, SRV, and other record types.
integration__cloudflare__cloudflare_list_page_rules cloudflare.cloudflare_list_page_rules Read List page rules for a Cloudflare zone. Returns rule IDs, targets, actions, and priority.
integration__cloudflare__cloudflare_get_analytics cloudflare.cloudflare_get_analytics Read Get analytics dashboard data for a Cloudflare zone. Returns HTTP requests, bandwidth, threats, and pageview metrics over a time range.
integration__cloudflare__cloudflare_get_current_user cloudflare.cloudflare_get_current_user Read Get details of the currently authenticated Cloudflare user. Returns user ID, email, username, and account info.

Related Cloudflare Pages

Cloudflare CLIUse direct JSON commands instead of MCP discovery. Cloudflare MCPFull gateway reference and MCP tool names. KosmoKrator for CodexClient-level gateway setup.