skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

cloudflare-zerotrust

Inspect Cloudflare Zero Trust access applications, policies, tunnels, and CASB findings.

650|182|Updated Feb 19, 2026
Search Tags:#mcp#cloudflare#Zero Trust#tunnels#casb#access policies#security inspection
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill cloudflare-zerotrust
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloudflare-zerotrust
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/cloudflare-zerotrust
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill cloudflare-zerotrust

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security and network teams need visibility into their Cloudflare Zero Trust posture—who can access which applications, how tunnels are connected, and what SaaS misconfigurations exist—without manually navigating the Cloudflare dashboard.

Core Features & Use Cases

  • Access Application & Policy Inspection: List Zero Trust Access applications and drill into the policies governing each one.
  • Tunnel Monitoring: Enumerate Cloudflare Tunnels and check their connection status.
  • CASB Findings Review: Surface CASB security findings for SaaS misconfigurations.
  • Use Case: Ask which access policies protect your internal dashboard, then review open CASB findings to prioritize remediation of risky SaaS configurations.

Quick Start

List all Cloudflare Access applications and show the access policies for the internal-dashboard app.

Frequently Asked Questions about cloudflare-zerotrust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list Cloudflare Zero Trust access applications?▼

Ask the agent to list all Cloudflare Access applications and it calls the list_access_applications tool against your account. You need a CLOUDFLARE_API_TOKEN with Access:Read scope and your CLOUDFLARE_ACCOUNT_ID configured.

How to check Cloudflare Tunnel status from the command line?▼

Use the list_tunnels and get_tunnel tools to enumerate configured Cloudflare Tunnels and view each tunnel's connection status. This works through natural language queries once your API credentials are set.

What API permissions does Cloudflare Zero Trust inspection require?▼

It requires a Cloudflare API token with Access:Read and Account:Read scopes, plus the account ID from the Cloudflare dashboard. The token is read-only for these operations.

Can I review Cloudflare CASB findings for SaaS misconfigurations?▼

Yes, the list_casb_findings and get_casb_finding tools surface CASB security findings through the cloudflare-casb remote MCP server at casb.mcp.cloudflare.com. You can list findings and drill into individual finding details.

Why is the Cloudflare Zero Trust skill not returning data?▼

The most common cause is a missing or mis-scoped CLOUDFLARE_API_TOKEN or an incorrect CLOUDFLARE_ACCOUNT_ID. Verify the token has Access:Read and Account:Read scopes and that the account ID matches your dashboard.

Related Skills

Explore More Software Engineering Skills→
photonics-dhlphotonics-dhl

cloudflare-tunnel-api-setup

Automate Cloudflare Tunnel creation, credential retrieval, and DNS configuration via API.

Community
Advanced
jeremylongshorejeremylongshore
2.6k

auditing-access-control

Audit access-control configurations and generate findings reports with remediation guidance.

Community
Advanced
xalgordxalgord
954

detecting-kerberoasting-attacks

Detect Kerberoasting attacks by hunting anomalous Kerberos TGS requests in SIEM and EDR telemetry.

Community
Intermediate
RooseveltAdvisorsRooseveltAdvisors
1

Cloudflare

Manages Cloudflare Workers and Pages via wrangler CLI and API queries.

Community
Advanced