{
  "entry": {
    "kind": "mcp",
    "slug": "cloudflare-mcp-server",
    "name": "Cloudflare MCP Server",
    "vendor": "Cloudflare",
    "description": "Cloudflare ships a family of remote MCP servers covering Workers, KV, R2, D1, DNS, Workers Logs, and account APIs. An agent can read observability data, query a D1 database, inspect DNS records, or deploy a Worker, depending on which server and scopes are connected.\n\nThis is infrastructure control, so the risk is proportional to the API token behind it rather than to the protocol. The declared capabilities are outbound network access, credential access, and database reads and writes for the D1 surface. A token that can edit DNS or deploy Workers can redirect or intercept production traffic — treat connecting this server as granting an agent a seat on your infrastructure, and prefer read-scoped tokens for anything an assistant uses interactively.",
    "website": "https://developers.cloudflare.com/agents/model-context-protocol/",
    "repository": null,
    "documentationUrl": "https://developers.cloudflare.com/agents/model-context-protocol/",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access",
      "database:read",
      "database:write"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 45,
      "band": "medium",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "2 high-risk capabilities: credentials:access, database:write",
          "contribution": 20
        },
        {
          "id": "database-exfiltration-risk",
          "kind": "combination",
          "label": "Database exfiltration risk (high)",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "contribution": 15
        }
      ],
      "dangerousCombos": [
        {
          "id": "database-exfiltration-risk",
          "name": "Database exfiltration risk",
          "description": "Database read combined with outbound network can exfiltrate production data.",
          "capabilities": [
            "database:read",
            "network:outbound"
          ],
          "severity": "high"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "database-exfiltration-risk",
        "name": "Database exfiltration risk",
        "description": "Database read combined with outbound network can exfiltrate production data.",
        "capabilities": [
          "database:read",
          "network:outbound"
        ],
        "severity": "high"
      }
    ]
  }
}