mcp-cloudflare

Diagnose and manage Cloudflare MCP resources with tiered permissions and audit trails.

339|58|Updated Jan 10, 2026

Search Tags:#audit #mcp #observability #cloudflare #sandbox #workers #kv

Ready to run

npx skills add https://github.com/Heyvhuang/ship-faster --skill mcp-cloudflare

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: mcp-cloudflare
Source: https://github.com/Heyvhuang/ship-faster/tree/main/skills/mcp-cloudflare
Command: npx skills add https://github.com/Heyvhuang/ship-faster --skill mcp-cloudflare

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a cohesive interface to manage Cloudflare MCP resources (Workers, KV, R2, D1, Hyperdrive) along with observability, builds, audits, and sandbox operations, enabling repeatable, auditable workflows.

Core Features & Use Cases

Unified MCP management: Operate across Workers, KV, R2, D1, Hyperdrive, and related observability/tools from a single skill.
Troubleshooting & audits: Retrieve logs, metrics, and audit trails to diagnose issues and verify outcomes.
Safety gates: Enforce permission tiers (Diagnose, Change, Super Admin) and require user confirmation before any write action.

Quick Start

Load the skill into your agent and run a simple read-only operation (e.g., list Workers) to verify access and permissions.

Frequently Asked Questions about mcp-cloudflare

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I manage Cloudflare Workers and KV resources with audit trails?▼

To manage Cloudflare Workers and KV resources with audit trails, use a unified control interface that enforces tiered permissions and validates write operations via post-execution log verification. This enables repeatable, auditable workflows across your resources.

Can I diagnose and troubleshoot Cloudflare D1 and R2 issues without risking production data?▼

Yes, you can diagnose Cloudflare D1 and R2 issues safely using sandbox workflows in isolated accounts. The skill enforces permission tiers like Diagnose mode for read-only operations, preventing unauthorized write actions while retrieving logs and metrics for troubleshooting.

What is the best way to enforce permission tiers for Cloudflare MCP change planning?▼

The best way to enforce permission tiers for Cloudflare MCP change planning is to implement a structured workflow with Diagnose, Change, and Super Admin levels. This requires explicit user confirmation before executing any write operations to ensure auditable safety gates.

Does this Cloudflare observability skill support deployments across Hyperdrive?▼

Yes, this Cloudflare observability skill supports deployments across Hyperdrive. It provides a cohesive interface to manage Hyperdrive alongside Workers, R2, D1, and KV, while validating deployment outcomes through structured logs and audit trails.

Why do I need user confirmation for write operations in Cloudflare MCP audits?▼

You need user confirmation for write operations in Cloudflare MCP audits to enforce safety gates within tiered permissions. This prevents unintended modifications during change planning or deployments, ensuring all actions are validated via post-execution verification and audit trails.

What are the limitations of running sandbox workflows in isolated Cloudflare accounts?▼

Running sandbox workflows in isolated Cloudflare accounts limits your scope to non-production environments, requiring separate permissions for production changes. However, it ensures safe troubleshooting and audits by isolating operations from live resources while still validating via logs.