integration-cloudflare

Connect a self-hosted Hermes agent to Cloudflare MCP over SSH.

13|1|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/paarths-collab/hstack --skill integration-cloudflare
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: integration-cloudflare
Source: https://github.com/paarths-collab/hstack/tree/main/skills/integration-cloudflare
Command: npx skills add https://github.com/paarths-collab/hstack --skill integration-cloudflare

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill connects a self-hosted Hermes agent to Cloudflare without manual, error-prone setup, so an AI coding agent can wire services securely over SSH.

Core Features & Use Cases

  • Cloudflare MCP Integration: Registers Cloudflare’s hosted remote MCP endpoint with bearer-token authentication.
  • Secure Secret Handling: Stores the API token in Hermes environment config instead of exposing it in chat or config files.
  • Operational Safety: Uses idempotent checks, gateway reloads, smoke tests, and rollback steps to avoid broken deployments.
  • Use Case: A developer wants their agent to manage DNS, Workers, KV, R2, D1, Pages, and Access from a VPS with one least-privilege token.

Quick Start

Ask the agent to connect Cloudflare to your Hermes VPS using your scoped API token, then verify the MCP server is registered and working.

Frequently Asked Questions about integration-cloudflare

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect a self-hosted Hermes agent to Cloudflare over SSH?

To connect a Hermes agent to Cloudflare MCP over SSH, you register the hosted remote endpoint using a scoped bearer API token, store the token in Hermes environment config, reload the gateway, and verify the connection with smoke tests.

How does secure API token handling work with Cloudflare MCP integration?

Secure API token handling stores the scoped Cloudflare bearer token directly in Hermes environment variables, preventing exposure in chat histories or plaintext configuration files during the SSH integration process.

Can I manage Cloudflare Workers, KV, R2, and D1 from a remote VPS using one API token?

Yes, you can manage Workers, KV, R2, D1, Pages, DNS, and Access from a remote VPS by registering the Cloudflare MCP endpoint with a single least-privilege scoped bearer token through your Hermes agent.

What is the best way to ensure a safe Cloudflare MCP gateway reload on a VPS?

The best way to ensure a safe Cloudflare MCP gateway reload is to use idempotent checks before applying changes, execute the reload, run smoke tests, and rely on rollback-safe handling to revert if verification fails.

Do I need a scoped bearer token to register the Cloudflare MCP server?

Yes, you need a scoped bearer API token to register the Cloudflare MCP server at https://mcp.cloudflare.com/mcp, ensuring least-privilege access for your Hermes agent's DNS and Workers integrations.

Why is my Cloudflare MCP integration not working after a gateway reload?

Cloudflare MCP integration may fail after a gateway reload if the bearer token lacks proper scopes, environment variables are missing in Hermes, or idempotent verification checks were skipped during the SSH setup process.