Cloudflare - NoClick

The Cloudflare node adds Cloudflare operations to your workflows. Add it on the canvas or ask the AI builder for it by name, then pick an operation and fill in its fields. Cloudflare also includes 23 trigger operations (marked in the tables below) that can start a workflow when something happens in Cloudflare.

You can wire the Cloudflare node into an AI agent as a tool provider: the agent calls the operations you allow. See Agent tools.

Credentials

Connect Cloudflare under Credentials in the node settings. See Connecting credentials for the general flow.

OAuth

offline_access
agent-memory.write
browser-rendering.read
browser-rendering.write
cf-agents.read
cf-agents.write
cloud-connector.read
cloud-connector.write
cloudchamber.read
cloudchamber.write
constellation.read
constellation.write
d1.read
d1.write
flagship.evaluate
flagship.read
flagship.write
query-cache.read
query-cache.write
mcp-portals.read
mcp-portals.write
page.read
page.write
pipelines.read
pipelines.send
pipelines.write
pubsub.read
pubsub.write
queues.read
queues.write
realtime.admin
secrets-store.read
secrets-store.write
vectorize.read
vectorize.write
workers-ci.read
workers-ci.write
containers.read
containers.write
workers-kv-storage.read
workers-kv-storage.write
workers-observability.read
workers-observability.write
workers-observability-telemetry.write
r2-catalog.read
r2-catalog.write
r2-catalog-sql.read
workers-r2-bucket-item.read
workers-r2-bucket-item.write
workers-r2.read
workers-r2.write
workers-routes.read
workers-routes.write
workers-scripts.read
workers-scripts.write
workers-tail.read
aiaudit.read
aiaudit.write
aig.read
aig.run
aig.write
ai-search.index
ai-search.read
ai-search.run
ai-search.write
agw.read
agw.run
agw.write
rag.read
rag.run
rag.write
firewall-for-ai.read
firewall-for-ai.write
websearch.run
ai.read
ai.write
account-dns-settings.read
account-dns-settings.write
dns-firewall.read
dns-firewall.write
dns.read
dns.write
dns-view.read
dns-view.write
registrar-domains.admin
registrar-domains.read
registrar-sandbox-domains.admin
registrar-sandbox-domains.read
zone-custom-asset.read
zone-custom-asset.write
zone-dns-settings.read
zone-dns-settings.write
zone.read
zone.write
zone-settings.read
zone-settings.write
zone-versioning.read
zone-versioning.write
fraud-detection-pii.read
account-firewall-access-rules.read
account-firewall-access-rules.write
account-security-center-insights.read
account-security-center-insights.write
account-waf.read
account-waf.write
request-tracer.read
reports-application-security-report.read
bot-management-feedback.read
bot-management-feedback.write
bot-management.read
bot-management.write
cloudforce-one.read
cloudforce-one.write
ddos-botnet-feed.read
ddos-botnet-feed.write
ddos-protection.read
ddos-protection.write
api-gateway.read
api-gateway.write
domain-page.shield
domain-page-shield.read
firewall-services.read
firewall-services.write
fraud-detection.read
fraud-detection.write
fraud-events.write
fraud-feedback.read
fraud-feedback.write
http-applications.read
http-applications.write
http-ddos-managed-ruleset.read
http-ddos-managed-ruleset.write
iot.read
iot.write
l4-ddos-managed-ruleset.read
l4-ddos-managed-ruleset.write
page-rules.read
page-rules.write
page.shield
page-shield.read
precursor.read
precursor.write
sanitize.read
sanitize.write
tag.read
tag.write
trust-and-safety.read
trust-and-safety.write
challenge-widgets.read
challenge-widgets.write
url-scanner.read
url-scanner.write
zaraz.edit
zaraz.read
zaraz.write
zone-security-center-insights.read
zone-security-center-insights.write
zone-waf.read
zone-waf.write
account-custom-error-rules.read
account-custom-error-rules.write
account-custom-pages.read
account-custom-pages.write
account-rule-lists.read
account-rule-lists.write
account-rulesets.read
account-rulesets.write
config-settings.read
config-settings.write
custom-errors.read
custom-errors.write
custom-pages.read
custom-pages.write
dynamic-redirect.read
dynamic-redirect.write
managed-headers.read
managed-headers.write
mass-url-redirects.read
mass-url-redirects.write
origin.read
origin.write
response-compression.read
response-compression.write
select-configuration.read
select-configuration.write
snippets.read
snippets.write
transform-rules.read
transform-rules.write
zone-transform-rules.read
zone-transform-rules.write
access-app.read
access-app.revoke
access-app.write
access.read
access.revoke
access.write
zone-access.read
zone-access.revoke
zone-access.write
access-audit-log.read
access-custom-page.read
access-custom-page.write
access-device-posture.read
access-device-posture.write
access-group.read
access-group.write
access-idp.read
access-idp.write
access-key.read
access-key.write
access-certificate.read
access-certificate.write
access-org.read
access-org.revoke
access-org.write
access-acct.read
access-acct.revoke
access-acct.write
access-policy.read
access-policy.write
access-policy-test.read
access-policy-test.write
access-population.read
access-population.write
access-saml-certificate.read
access-saml-certificate.write
access-scim-log.read
access-ssh-auditing.read
access-ssh-auditing.write
access-service-token.read
access-service-token.write
access-tag.read
access-tag.write
access-users.read
access-users.write
access-seats.write
casb.read
casb.write
teams-cds-compute-account.read
teams-cds-compute-account.write
teams-dex.read
teams-dex.write
teams-connector-cloudflared.monitoring
teams-connector-cloudflared.read
teams-connector-cloudflared.write
teams-connector-warp.read
teams-connector-warp.write
teams-connectors.read
teams-connectors.write
teams-networks.read
teams-networks.write
argotunnel.read
argotunnel.write
teams-secure.location
dls.read
dls.write
teams.read
teams.report
teams.write
teams-resilience.read
teams-resilience.write
teams-pii.read
account-analytics.read
analytics.read
intel.read
intel.write
account-logs.read
account-logs.write
logs.read
logs.write
radar.read
account-waiting-rooms.read
address-maps.read
address-maps.write
chinanetwork-steering.read
chinanetwork-steering.write
connectivity-directory.admin
connectivity-directory.bind
connectivity-directory.read
healthcheck.read
healthcheck.write
ip-prefix-bgp-on-demand.read
ip-prefix-bgp-on-demand.write
ip-prefix.read
ip-prefix.write
load-balancers-account.read
load-balancers-account.write
load-balancers.read
load-balancers.write
load-balancing-monitors-and-pools.read
load-balancing-monitors-and-pools.write
pcaps-api.read
pcaps-api.write
magic-firewall.read
magic-firewall.write
fbm.admin
fbm.read
fbm.write
magic-transit.read
magic-transit.write
magic-wan.read
magic-wan.write
waiting-rooms.read
waiting-rooms.write
web3-hostnames.read
web3-hostnames.write
calls.read
calls.write
images.read
images.write
moq.read
moq.write
stream.read
stream.write
cloud-email-security.read
cloud-email-security.write
email-routing-address.read
email-routing-address.write
email-routing-rule.read
email-routing-rule.write
email-routing-suppression.read
email-routing-suppression.write
email-security-dmarcreports.read
email-security-dmarcreports.write
email-sending.read
email-sending.write
account-ssl-and-certificates.read
account-ssl-and-certificates.write
cache.purge
cache-settings.read
cache-settings.write
account-disable-esc.read
account-disable-esc.write
zone-disable-esc.read
zone-disable-esc.write
ssl-and-certificates.read
ssl-and-certificates.write
account-api-gateway.read
account-api-gateway.write
account-custom-asset.read
account-custom-asset.write
account-settings.read
account-settings.write
apps.write
integration.write
memberships.read
memberships.write
notifications.read
notifications.write
scim-provisioning.write
user-details.read
user-details.write
artifacts.read
artifacts.write
resource-library.read
resource-library.write
resource-sharing.read

API token

Enter the values manually when creating the credential. Create a scoped API Token from your Cloudflare dashboard. Grant permissions only for the resources you need. Get your credentials here.

API key

Enter the values manually when creating the credential. Use your Global API Key and account email. We recommend API Tokens instead for better security. Get your credentials here.

Operations

Access

Operation	ID	Description
Create Access Application	`create_access_application`	Create an Access application
Create Access Group	`create_access_group`	Create an Access group
Create Access Policy	`create_access_policy`	Create a policy for an Access application
Create Access Service Token	`create_access_service_token`	Create an Access service token
Create Identity Provider	`create_identity_provider`	Create an Access identity provider
Delete Access Application	`delete_access_application`	Delete an Access application
Delete Access Group	`delete_access_group`	Delete an Access group
Delete Access Policy	`delete_access_policy`	Delete a policy from an Access application
Delete Access Service Token	`delete_access_service_token`	Delete an Access service token
Delete Identity Provider	`delete_identity_provider`	Delete an Access identity provider
Get Access Application	`get_access_application`	Get a specific Access application
Get Access Group	`get_access_group`	Get a specific Access group
Get Access Organization	`get_access_organization`	Get the Access organization settings
Get Access Policy	`get_access_policy`	Get a specific Access policy
Get Access User	`get_access_user`	Get a specific Access user
Get Identity Provider	`get_identity_provider`	Get a specific Access identity provider
List Access Application Policies	`list_access_application_policies`	List policies for an Access application
List Access Applications	`list_access_applications`	List Cloudflare Access applications
List Access Groups	`list_access_groups`	List all Access groups in an account
List Access Service Tokens	`list_access_service_tokens`	List all Access service tokens in an account
List Access User Sessions	`list_access_user_sessions`	List active sessions for an Access user
List Access Users	`list_access_users`	List Access users for an account
List Identity Providers	`list_identity_providers`	List all Access identity providers in an account
Refresh Access Service Token	`refresh_access_service_token`	Refresh an Access service token
Revoke Access User Session	`revoke_access_user_session`	Revoke all active Access sessions for a user by email
Rotate Access Signing Key	`create_access_key_rotation`	Rotate the Access JWT signing key
Update Access Group	`update_access_group`	Update an Access group
Update Access Organization	`update_access_organization`	Update the Access organization settings
Update Access Policy	`update_access_policy`	Update a policy for an Access application
Update Identity Provider	`update_identity_provider`	Update an Access identity provider

Account

Operation	ID	Description
Add Account Member	`add_account_member`	Add a member to an account
Get Account Member	`get_account_member`	Get a specific account member
List Account Members	`list_account_members`	List all members of an account
List Account Roles	`list_account_roles`	List all roles available for an account
Remove Account Member	`remove_account_member`	Remove a member from an account
Update Account Member	`update_account_member`	Update an account member’s roles

Addressing / BYOIP

Operation	ID	Description
Add IP to Address Map	`add_ip_to_address_map`	Add an IP address to an address map
Add Zone to Address Map	`add_zone_to_address_map`	Add a zone as a member of an address map
Create Address Map	`create_address_map`	Create a new address map to assign IPv4/IPv6 addresses to zones or accounts
Create IP Prefix	`create_ip_prefix`	Add a new BYOIP prefix to the account
Create Prefix Delegation	`create_prefix_delegation`	Delegate a sub-prefix to another Cloudflare account
Create Prefix Service Binding	`create_prefix_service_binding`	Create a binding to route prefix traffic to a Cloudflare service (e.g. Magic Transit)
Create Regional Hostname	`create_regional_hostname`	Create a new regional hostname to restrict DNS resolution to a geographic region
Delete Address Map	`delete_address_map`	Delete an address map
Delete IP Prefix	`delete_ip_prefix`	Delete an unapproved BYOIP prefix from the account
Delete Prefix Delegation	`delete_prefix_delegation`	Remove a delegation from a BYOIP prefix
Delete Prefix Service Binding	`delete_prefix_service_binding`	Remove a service binding from a BYOIP prefix
Delete Regional Hostname	`delete_regional_hostname`	Remove the regional routing configuration for a hostname
Download LOA Document	`download_loa_document`	Download a previously uploaded Letter of Authorization document
Get Address Map	`get_address_map`	Retrieve details of a specific address map
Get BGP Advertisement Status	`get_bgp_prefix_advertisement_status`	Get the current BGP advertisement status for an IP prefix
Get IP Prefix	`get_ip_prefix`	Retrieve details of a specific BYOIP prefix
Get Prefix Service Binding	`get_prefix_service_binding`	Get a specific service binding for a BYOIP prefix
Get Regional Hostname	`get_regional_hostname`	Fetch the regional routing configuration for a specific hostname
List Address Maps	`list_address_maps`	List all address maps for the account
List Addressing Services	`list_addressing_services`	List available Cloudflare network services that prefixes can be bound to
List BGP Prefixes	`list_bgp_prefixes`	List BGP sub-prefixes for a BYOIP prefix
List IP Prefixes	`list_ip_prefixes`	List all BYOIP prefixes for the account
List Prefix Delegations	`list_prefix_delegations`	List all delegations for a BYOIP prefix
List Prefix Service Bindings	`list_prefix_service_bindings`	List all service bindings for a BYOIP prefix
List Regional Hostname Regions	`list_regional_hostname_regions`	List all available geographic regions for regional hostname assignment
List Regional Hostnames	`list_regional_hostnames`	List all regional hostnames configured for a zone
Remove IP from Address Map	`remove_ip_from_address_map`	Remove an IP address from an address map
Remove Zone from Address Map	`remove_zone_from_address_map`	Remove a zone from an address map
Update Address Map	`update_address_map`	Modify properties of an existing address map
Update BGP Advertisement Status	`update_bgp_prefix_advertisement`	Advertise or withdraw a BYOIP prefix via BGP
Update BGP Prefix	`update_bgp_prefix`	Update settings for a specific BGP prefix (on-demand advertisement, ASN prepend)
Update IP Prefix	`update_ip_prefix`	Update the description of a BYOIP prefix
Update Regional Hostname	`update_regional_hostname`	Update the region assignment for a regional hostname
Upload LOA Document	`upload_loa_document`	Upload a Letter of Authorization (LOA) PDF document for BYOIP prefix ownership verification

AI gateway

Operation	ID	Description
Create Ai Gateway	`create_ai_gateway`	Create a new AI Gateway
Create Ai Gateway Dataset	`create_ai_gateway_dataset`	Create a dataset from AI Gateway logs
Delete Ai Gateway	`delete_ai_gateway`	Delete an AI Gateway
Delete Ai Gateway Dataset	`delete_ai_gateway_dataset`	Delete an AI Gateway dataset
Delete Ai Gateway Logs	`delete_ai_gateway_logs`	Delete logs for an AI Gateway
Get Ai Gateway	`get_ai_gateway`	Get details for an AI Gateway
Get Ai Gateway Log	`get_ai_gateway_log`	Get a specific AI Gateway log entry
Get Ai Gateway Log Request	`get_ai_gateway_log_request`	Get the request body for an AI Gateway log entry
Get Ai Gateway Log Response	`get_ai_gateway_log_response`	Get the response body for an AI Gateway log entry
List Ai Gateway Datasets	`list_ai_gateway_datasets`	List datasets for an AI Gateway
List Ai Gateway Logs	`list_ai_gateway_logs`	List logs for an AI Gateway
List Ai Gateways	`list_ai_gateways`	List AI Gateways in an account
Update Ai Gateway	`update_ai_gateway`	Update an existing AI Gateway

Analytics engine SQL API

Operation	ID	Description
Get Analytics Engine Dataset Schema	`get_analytics_engine_dataset_schema`	Get the column schema of an Analytics Engine dataset by querying a single row
Get Analytics Engine Event Count	`get_analytics_engine_event_count`	Count events in an Analytics Engine dataset, optionally filtered by time range and conditions
List Analytics Engine Datasets	`list_analytics_engine_datasets`	List all Analytics Engine datasets (tables) in the account using SHOW TABLES
List Analytics Engine Timezones	`list_analytics_engine_timezones`	List all supported timezones available in the Analytics Engine SQL environment
Query Analytics Engine Aggregated	`query_analytics_engine_aggregated`	Run an aggregation query on an Analytics Engine dataset with grouping, filtering, and time range support
Query Analytics Engine Raw Events	`query_analytics_engine_raw`	Query raw (non-aggregated) events from an Analytics Engine dataset with optional filtering
Query Analytics Engine Time Series	`query_analytics_engine_timeseries`	Query Analytics Engine data grouped by time intervals for time-series analysis
Query Analytics Engine Top Values	`query_analytics_engine_top_values`	Find the top N values of a blob (string) column by event count in an Analytics Engine dataset
Query Analytics Engine Weighted Average	`query_analytics_engine_weighted_avg`	Compute a sampling-corrected weighted average of a double column in an Analytics Engine dataset

API shield

Operation	ID	Description
Create API Shield Endpoint	`create_api_shield_endpoint`	Create an API Shield endpoint (operation) for a zone
Get API Shield Settings	`get_api_shield_settings`	Get API Shield configuration for a zone
List API Shield Endpoints	`list_api_shield_endpoints`	List API Shield endpoints (operations) for a zone
Update API Shield Settings	`update_api_shield_settings`	Update API Shield configuration for a zone

Audit logs

Operation	ID	Description	Trigger
List Audit Logs	`list_audit_logs`	List audit logs for an account

Bot management

Operation	ID	Description
Configure JavaScript Detection	`configure_javascript_detection`	Configure JavaScript-based bot detection settings
Get Bot Analytics	`get_bot_management_analytics`	Retrieve bot analytics and feedback reports containing request score distributions for a zone
Get Bot Management	`get_bot_management`	Get Bot Management settings for a zone
Get Score Thresholds	`get_bot_score_thresholds`	Retrieve current bot score action thresholds for a zone
List Bot Feedback Reports	`list_bot_feedback_reports`	List all previously submitted bot feedback reports for a zone
Submit Bot Feedback	`submit_bot_feedback`	Submit a feedback report about misclassified bot traffic using a wirefilter expression
Update Bot Management	`update_bot_management`	Update Bot Management settings for a zone
Update Score Thresholds	`update_bot_score_thresholds`	Update bot score action thresholds for Super Bot Fight Mode

Cache

Operation	ID	Description
Get Argo Smart Routing	`get_argo_smart_routing`	Get Argo Smart Routing setting for a zone
Get Cache Reserve	`get_cache_reserve`	Get Cache Reserve setting for a zone
Get Tiered Caching	`get_tiered_caching`	Get Argo Tiered Caching setting for a zone
Get Zone Settings All	`get_zone_settings_all`	Get all zone settings in a single call
Purge Cache Everything	`purge_cache_everything`	Purge all cached content for a zone
Update Argo Smart Routing	`update_argo_smart_routing`	Update Argo Smart Routing setting for a zone
Update Cache Reserve	`update_cache_reserve`	Update Cache Reserve setting for a zone
Update Tiered Caching	`update_tiered_caching`	Update Argo Tiered Caching setting for a zone

Calls

Operation	ID	Description
Create Calls App	`create_calls_app`	Create a new Cloudflare Calls SFU app and obtain its bearer secret
Create Calls TURN Key	`create_calls_turn_key`	Create a new Cloudflare Calls TURN key and obtain its bearer token
Delete Calls App	`delete_calls_app`	Delete a Cloudflare Calls SFU app
Delete Calls TURN Key	`delete_calls_turn_key`	Delete a Cloudflare Calls TURN key
Get Calls App	`get_calls_app`	Retrieve details for a specific Cloudflare Calls SFU app
Get Calls TURN Key	`get_calls_turn_key`	Retrieve details for a specific Cloudflare Calls TURN key
List Calls Apps	`list_calls_apps`	List all Cloudflare Calls SFU apps for an account
List Calls TURN Keys	`list_calls_turn_keys`	List all Cloudflare Calls TURN keys for an account
Update Calls App	`update_calls_app`	Update the details of an existing Cloudflare Calls SFU app
Update Calls TURN Key	`update_calls_turn_key`	Update the details of an existing Cloudflare Calls TURN key

Custom hostnames

Operation	ID	Description
Create Custom Hostname	`create_custom_hostname`	Create a custom hostname for a zone
Delete Custom Hostname	`delete_custom_hostname`	Delete a custom hostname
Get Custom Hostname	`get_custom_hostname`	Get a specific custom hostname
List Custom Hostnames	`list_custom_hostnames`	List all custom hostnames for a zone
Update Custom Hostname	`update_custom_hostname`	Update a custom hostname

D1 database

Operation	ID	Description
Create D1 Database	`create_d1_database`	Create a new D1 database
Delete D1 Database	`delete_d1_database`	Delete a D1 database
Execute D1 Raw Query	`execute_d1_raw_query`	Execute a SQL query in raw array-format mode against a D1 database
Execute D1 Sql Query	`execute_d1_sql_query`	Execute a SQL query against a D1 database
Export D1 Database As Sql	`export_d1_database_as_sql`	Export a D1 database as SQL
Get D1 Database	`get_d1_database`	Get details for a D1 database
Get D1 Database Import Status	`get_d1_database_import_status`	Get the current import status of a D1 database
Import D1 Data	`import_d1_data`	Import SQL data into a D1 database
List D1 Databases	`list_d1_databases`	List all D1 databases in an account
List D1 Tables	`list_d1_tables`	List all tables in a D1 database

DNS

Operation	ID	Description
Create Secondary DNS Peer	`create_secondary_dns_peer`	Create a secondary DNS peer
Delete Secondary DNS Peer	`delete_secondary_dns_peer`	Delete a secondary DNS peer
Export Dns Records	`export_dns_records`	Export DNS records for a zone as a BIND zone file
Get Dnssec	`get_dnssec`	Get DNSSEC settings for a zone
Get Secondary DNS Config	`get_secondary_dns_config`	Get secondary DNS configuration for a zone
Get Secondary DNS Peer	`get_secondary_dns_peer`	Get a secondary DNS peer
List Secondary DNS Peers	`list_secondary_dns_peers`	List secondary DNS peers for an account
Update Dnssec	`update_dnssec`	Update DNSSEC status for a zone
Update Secondary DNS Config	`update_secondary_dns_config`	Update secondary DNS configuration for a zone
Update Secondary DNS Peer	`update_secondary_dns_peer`	Update a secondary DNS peer

DNS record

Operation	ID	Description
Create Dns Record	`create_dns_record`	Create a new DNS record
Delete Dns Record	`delete_dns_record`	Delete a DNS record
Get Dns Record	`get_dns_record`	Get a specific DNS record
List Dns Records	`list_dns_records`	List DNS records for a zone
Update Dns Record	`update_dns_record`	Update an existing DNS record

Email routing

Operation	ID	Description
Create Email Routing Destination	`create_email_routing_destination`	Create a destination email address for Email Routing (triggers verification email)
Create Email Routing Rule	`create_email_routing_rule`	Create an Email Routing rule
Delete Email Routing Destination	`delete_email_routing_destination`	Delete a destination email address from Email Routing
Delete Email Routing Rule	`delete_email_routing_rule`	Delete an Email Routing rule
Disable Email Routing	`disable_email_routing`	Disable Email Routing for a zone
Enable Email Routing	`enable_email_routing`	Enable Email Routing for a zone
Get Email Routing Settings	`get_email_routing_settings`	Get Email Routing settings for a zone
List Email Routing Destination Addresses	`list_email_routing_destination_addresses`	List destination email addresses for Email Routing
List Email Routing Rules	`list_email_routing_rules`	List Email Routing rules for a zone

Firewall rule

Operation	ID	Description
Create Firewall Rule	`create_firewall_rule`	Create a firewall rule for a zone
Delete Firewall Rule	`delete_firewall_rule`	Delete a firewall rule
List Firewall Rules	`list_firewall_rules`	List firewall rules for a zone

Fonts

Operation	ID	Description	Trigger
Get Fonts Settings	`get_fonts_settings`	Get Cloudflare Fonts settings for a zone
Update Fonts Settings	`update_fonts_settings`	Update Cloudflare Fonts settings for a zone

Health checks

Operation	ID	Description
Create Health Check	`create_health_check`	Create a new Health Check
Delete Health Check	`delete_health_check`	Delete a Health Check
Get Health Check	`get_health_check`	Get a specific Health Check
List Health Checks	`list_health_checks`	List all Health Checks for a zone
Update Health Check	`update_health_check`	Update an existing Health Check

Image

Operation	ID	Description
Create Image Direct Upload Url	`create_image_direct_upload_url`	Create a direct upload URL for images
Delete Image	`delete_image`	Delete an image
Get Image	`get_image`	Get details for an image
Get Image Usage Statistics	`get_image_usage_statistics`	Get image usage statistics
List Images	`list_images`	List images in Cloudflare Images

Images

Operation	ID	Description
Create Image Signing Key	`create_image_signing_key`	Create a named image signing key
Create Image Variant	`create_image_variant`	Create a new image variant
Delete Image Signing Key	`delete_image_signing_key`	Delete a named image signing key
Delete Image Variant	`delete_image_variant`	Delete an image variant
Get Image Variant	`get_image_variant`	Get details for a specific image variant
List Image Signing Keys	`list_image_signing_keys`	List all image signing keys for an account
List Image Variants	`list_image_variants`	List all image variants for an account
Update Image Metadata	`update_image_metadata`	Update metadata or signed URL requirement for an image
Update Image Variant	`update_image_variant`	Update an existing image variant

Intel

Operation	ID	Description
Add Feed Permission	`add_intel_feed_permission`	Grant another account access to an indicator feed
Bulk Domain Intelligence	`get_intel_domain_bulk`	Get intelligence details for multiple domains in a single request
Create Indicator Feed	`create_intel_indicator_feed`	Create a new custom threat intelligence indicator feed
Dismiss Attack Surface Issue	`dismiss_attack_surface_issue`	Dismiss or restore a Security Center issue in the attack surface report
Get ASN Overview	`get_intel_asn`	Get overview and subnet list for an Autonomous System Number
Get ASN Subnets	`get_intel_asn_subnets`	Get all subnets associated with an ASN
Get Domain History	`get_intel_domain_history`	Get historical categorizations for a domain over time
Get Domain Intelligence	`get_intel_domain`	Get security details, threat categories, and statistics for a domain
Get Indicator Feed	`get_intel_indicator_feed`	Get metadata and upload status for a specific indicator feed
Get Indicator Feed Data	`get_intel_indicator_feed_data`	Retrieve the raw data entries from an indicator feed
Get IP Intelligence	`get_intel_ip`	Get geolocation, ASN, infrastructure type, and threat categories for an IP
Get Issues by Severity	`get_attack_surface_issues_by_severity`	Get attack surface issue counts aggregated by severity level
Get Issues by Type	`get_attack_surface_issues_by_type`	Get attack surface issue counts aggregated by issue type
List Attack Surface Issue Types	`list_attack_surface_issue_types`	List all available Security Center issue categories for attack surface reporting
List Attack Surface Issues	`list_attack_surface_issues`	List all active security issues identified in the attack surface report
List Feed Permissions	`list_intel_feed_permissions`	List all access permissions for indicator feeds
List Indicator Feeds	`list_intel_indicator_feeds`	List all custom threat intelligence indicator feeds accessible to the account
List Sinkholes	`list_intel_sinkholes`	List all sinkholes configured for malicious traffic redirection
Passive DNS Lookup	`get_intel_dns`	Perform a passive DNS lookup by IP address
Remove Feed Permission	`remove_intel_feed_permission`	Revoke an account’s access to an indicator feed
Submit Miscategorization	`create_intel_miscategorization`	Submit a request to change the category of a domain or IP address
Update Indicator Feed	`update_intel_indicator_feed`	Update metadata for an existing indicator feed
WHOIS Lookup	`get_intel_whois`	Get WHOIS registration data and nameserver information for a domain

KV

Operation	ID	Description
Bulk Write Kv Pairs	`bulk_write_kv_pairs`	Write multiple key-value pairs at once (up to 10,000 pairs)
Create Kv Namespace	`create_kv_namespace`	Create a new KV namespace
Delete Kv Namespace	`delete_kv_namespace`	Delete a KV namespace
Delete Kv Value	`delete_kv_value`	Delete a key from KV storage
List Kv Keys	`list_kv_keys`	List keys in a KV namespace
List Kv Namespaces	`list_kv_namespaces`	List all KV namespaces in an account
Read Kv Value	`read_kv_value`	Read a value from KV storage
Write Kv Value	`write_kv_value`	Write a value to KV storage

Load balancer

Operation	ID	Description
Create Load Balancer	`create_load_balancer`	Create a new load balancer
Create Load Balancer Monitor	`create_load_balancer_monitor`	Create a new load balancer monitor
Create Load Balancer Pool	`create_load_balancer_pool`	Create a new origin pool for load balancing
Delete Load Balancer	`delete_load_balancer`	Delete a load balancer
Delete Load Balancer Monitor	`delete_load_balancer_monitor`	Delete a load balancer monitor
Delete Load Balancer Pool	`delete_load_balancer_pool`	Delete a load balancer origin pool
Get Load Balancer	`get_load_balancer`	Get a specific load balancer
Get Load Balancer Monitor	`get_load_balancer_monitor`	Get a specific load balancer monitor
Get Load Balancer Pool	`get_load_balancer_pool`	Get a specific load balancer origin pool
Get Load Balancer Pool Health	`get_load_balancer_pool_health`	Get health status of a load balancer origin pool
List Load Balancer Monitors	`list_load_balancer_monitors`	List all load balancer monitors in an account
List Load Balancer Pools	`list_load_balancer_pools`	List origin pools for load balancing
List Load Balancers	`list_load_balancers`	List load balancers for a zone
Update Load Balancer	`update_load_balancer`	Update an existing load balancer
Update Load Balancer Pool	`update_load_balancer_pool`	Update an existing load balancer origin pool

Log explorer

Operation	ID	Description
Create Log Explorer Dataset	`create_log_explorer_dataset`	Create a new Log Explorer dataset
Delete CMB Config	`delete_cmb_config`	Delete the Cloudflare Managed Buckets (CMB) log control configuration for an account
Get CMB Config	`get_cmb_config`	Get the Cloudflare Managed Buckets (CMB) log control configuration for an account
Get Log Explorer Dataset	`get_log_explorer_dataset`	Fetch a single Log Explorer dataset including its field configuration
Get Log Retention Flag	`get_log_retention_flag`	Get the log retention flag for the Logpull API for a zone
Get Logpull Logs (Received)	`get_logpull_logs`	Retrieve edge HTTP request logs for a zone within a time window via Logpull API
Get Logs by Ray ID	`get_logpull_rayid`	Look up log records for a specific Ray ID
List Available Log Explorer Dataset Types	`list_log_explorer_available_datasets`	List all dataset types available to create for this account or zone, including schemas
List Log Explorer Datasets	`list_log_explorer_datasets`	List all configured Log Explorer datasets for an account or zone
List Logpull Fields	`get_logpull_fields`	List all available log fields for the Logpull API with their descriptions
Query Log Explorer (SQL)	`query_log_explorer_sql`	Execute a SQL query against Log Explorer account or zone datasets
Update CMB Config	`update_cmb_config`	Update the Cloudflare Managed Buckets (CMB) log control configuration
Update Log Explorer Dataset	`update_log_explorer_dataset`	Update a Log Explorer dataset’s enabled state and field configuration
Update Log Retention Flag	`update_log_retention_flag`	Enable or disable log retention for the Logpull API for a zone

Logpush

Operation	ID	Description
Create Logpush Job	`create_logpush_job`	Create an account-level Logpush job
Create Zone Logpush Job	`create_zone_logpush_job`	Create a zone-level Logpush job
Delete Logpush Job	`delete_logpush_job`	Delete a Logpush job
Delete Zone Logpush Job	`delete_zone_logpush_job`	Delete a zone-level Logpush job
Get Logpush Job	`get_logpush_job`	Get a specific Logpush job
List Account Logpush Jobs	`list_account_logpush_jobs`	List all Logpush jobs for an account
List Zone Logpush Jobs	`list_zone_logpush_jobs`	List all Logpush jobs for a zone
Update Logpush Job	`update_logpush_job`	Update an existing Logpush job

Magic transit

Operation	ID	Description
Create GRE Tunnel	`create_magic_gre_tunnel`	Create a new Magic Transit GRE tunnel
Create Magic Transit App	`create_magic_app`	Create a new Magic Transit app for traffic routing decisions
Delete GRE Tunnel	`delete_magic_gre_tunnel`	Delete a Magic Transit GRE tunnel
Delete Magic Transit App	`delete_magic_app`	Delete a Magic Transit app
Get CF Interconnect	`get_magic_cf_interconnect`	Get details for a specific Cloudflare network interconnect
Get GRE Tunnel	`get_magic_gre_tunnel`	Get details for a specific Magic Transit GRE tunnel
List CF Interconnects	`list_magic_cf_interconnects`	List all Cloudflare network interconnects for Magic Transit
List GRE Tunnels	`list_magic_gre_tunnels`	List all GRE tunnels for a Magic Transit account
List Magic Transit Apps	`list_magic_apps`	List all Magic Transit apps for an account
Update CF Interconnect	`update_magic_cf_interconnect`	Update a single Cloudflare network interconnect for Magic Transit
Update GRE Tunnel	`update_magic_gre_tunnel`	Update an existing Magic Transit GRE tunnel
Update Magic Transit App	`update_magic_app`	Update an existing Magic Transit app

Notifications

Operation	ID	Description
Create Alert Policy	`create_alert_policy`	Create a new alert policy
Create Notification Webhook	`create_notification_webhook`	Create a new notification webhook destination
Delete Alert Policy	`delete_alert_policy`	Delete an alert policy
Delete Notification Webhook	`delete_notification_webhook`	Delete a notification webhook destination
Get Alert Policy	`get_alert_policy`	Get a specific alert policy
Get Notification History	`get_notification_history`	Get notification delivery history for an account
List Alert Policies	`list_alert_policies`	List all alert policies for an account
List Available Alerts	`list_available_alerts`	List all available alert types for an account
List Notification Webhooks	`list_notification_webhooks`	List all notification webhook destinations for an account
Update Alert Policy	`update_alert_policy`	Update an existing alert policy
Update Notification Webhook	`update_notification_webhook`	Update an existing notification webhook destination

Page rules

Operation	ID	Description
Create Page Rule	`create_page_rule`	Create a new Page Rule for a zone
Delete Page Rule	`delete_page_rule`	Delete a Page Rule
Get Page Rule	`get_page_rule`	Get a specific Page Rule
List Page Rules	`list_page_rules`	List all Page Rules for a zone
Update Page Rule	`update_page_rule`	Update an existing Page Rule

Page shield

Operation	ID	Description
Create Page Shield Policy	`create_page_shield_policy`	Create a Page Shield CSP policy for a zone
Delete Page Shield Policy	`delete_page_shield_policy`	Delete a Page Shield CSP policy
Get Page Shield Connection	`get_page_shield_connection`	Get details for a specific Page Shield connection
Get Page Shield Script	`get_page_shield_script`	Get details for a specific Page Shield script
Get Page Shield Settings	`get_page_shield_settings`	Get Page Shield settings for a zone
List Page Shield Connections	`list_page_shield_connections`	List Page Shield connections detected for a zone
List Page Shield Policies	`list_page_shield_policies`	List Page Shield CSP policies for a zone
List Page Shield Scripts	`list_page_shield_scripts`	List Page Shield scripts detected for a zone
Update Page Shield Settings	`update_page_shield_settings`	Update Page Shield settings for a zone

Pages

Operation	ID	Description
Create Pages Project	`create_pages_project`	Create a new Cloudflare Pages project
Delete Pages Deployment	`delete_pages_deployment`	Delete a Pages deployment
Delete Pages Project	`delete_pages_project`	Delete a Pages project
Get Pages Deployment	`get_pages_deployment`	Get a specific Pages deployment
Get Pages Project	`get_pages_project`	Get a Pages project
List Pages Deployments	`list_pages_deployments`	List deployments for a Pages project
List Pages Projects	`list_pages_projects`	List all Pages projects in an account
Retry Pages Deployment	`retry_pages_deployment`	Retry a failed or cancelled Cloudflare Pages deployment

Pipelines

Operation	ID	Description
Create Pipeline	`create_pipeline`	Create a new Workers Pipeline
Delete Pipeline	`delete_pipeline`	Delete a Workers Pipeline
Get Pipeline	`get_pipeline`	Get a specific Workers Pipeline
List Pipelines	`list_pipelines`	List all Workers Pipelines in an account
Update Pipeline	`update_pipeline`	Update an existing Workers Pipeline

Queue

Operation	ID	Description
Acknowledge Queue Messages	`acknowledge_queue_messages`	Acknowledge or retry pulled Queue messages
Create Queue	`create_queue`	Create a new Queue
Create Queue Consumer	`create_queue_consumer`	Create a Worker consumer for a Queue
Delete Queue	`delete_queue`	Delete a Queue
Delete Queue Consumer	`delete_queue_consumer`	Delete a consumer from a Queue
Get Queue	`get_queue`	Get details for a Queue
List Queue Consumers	`list_queue_consumers`	List consumers for a Queue
List Queues	`list_queues`	List all Queues in an account
Pull Queue Messages	`pull_queue_messages`	Pull messages from a Queue
Send Queue Message	`send_queue_message`	Send a message to a Queue
Update Queue	`update_queue`	Update a Queue’s name

R2 bucket

Operation	ID	Description
Create R2 Bucket	`create_r2_bucket`	Create a new R2 bucket
Create R2 Custom Domain	`create_r2_custom_domain`	Add a custom domain to an R2 bucket
Delete R2 Bucket	`delete_r2_bucket`	Delete an R2 bucket
Delete R2 CORS Policy	`delete_r2_cors_policy`	Delete CORS policy for an R2 bucket
Delete R2 Custom Domain	`delete_r2_custom_domain`	Remove a custom domain from an R2 bucket
Delete R2 Lifecycle Rules	`delete_r2_lifecycle_rules`	Delete all lifecycle rules for an R2 bucket
Get R2 Bucket	`get_r2_bucket`	Get details for an R2 bucket
Get R2 Bucket Details	`get_r2_bucket_details`	Get R2 bucket metadata including storage class and location hint
Get R2 CORS Policy	`get_r2_cors_policy`	Get CORS policy for an R2 bucket
Get R2 Lifecycle Rules	`get_r2_lifecycle_rules`	Get lifecycle rules for an R2 bucket
Get R2 Managed Domain	`get_r2_managed_domain`	Get managed r2.dev domain public access status for an R2 bucket
List R2 Buckets	`list_r2_buckets`	List all R2 buckets in an account
List R2 Custom Domains	`list_r2_custom_domains`	List custom domains for an R2 bucket
Put R2 CORS Policy	`put_r2_cors_policy`	Set CORS policy for an R2 bucket
Put R2 Lifecycle Rules	`put_r2_lifecycle_rules`	Set lifecycle rules for an R2 bucket
Update R2 Bucket	`update_r2_bucket`	Update R2 bucket settings such as storage class
Update R2 Custom Domain	`update_r2_custom_domain`	Update a custom domain on an R2 bucket
Update R2 Managed Domain	`update_r2_managed_domain`	Enable or disable public access via the r2.dev subdomain

R2 event notifications

Operation	ID	Description
Create/Update R2 Event Notification Rules	`put_r2_event_notification_rules`	Create or update event notification rules for a queue on an R2 bucket
Delete R2 Event Notification Rules	`delete_r2_event_notification_rules`	Remove all event notification rules for a specific queue from an R2 bucket
Get R2 Event Notification Config	`get_r2_event_notification_config`	List all event notification rules configured for an R2 bucket across all queues
Get R2 Event Notification Queue Rules	`get_r2_event_notification_queue_rules`	Get event notification rules for a specific queue within an R2 bucket

R2 storage

Operation	ID	Description
Delete R2 Object	`delete_r2_object`	Delete an object from an R2 bucket
Get R2 Object	`get_r2_object`	Get an object from an R2 bucket
Get R2 Presigned URL	`get_r2_presigned_url`	Generate a presigned URL for an R2 object
List R2 Objects	`list_r2_objects`	List objects in an R2 bucket
Put R2 Object	`put_r2_object`	Upload an object to an R2 bucket

Radar AI

Operation	ID	Description
Get Radar AI Bots Summary	`get_radar_ai_bots_summary`	Retrieve aggregated summary of AI bot HTTP requests grouped by a specified dimension
Get Radar AI Bots Summary by Crawl Purpose	`get_radar_ai_bots_summary_by_crawl_purpose`	Retrieve the distribution of AI bot traffic grouped by crawl purpose
Get Radar AI Bots Summary by Industry	`get_radar_ai_bots_summary_by_industry`	Retrieve the distribution of AI bot traffic grouped by industry sector
Get Radar AI Bots Summary by User Agent	`get_radar_ai_bots_summary_by_user_agent`	Retrieve the distribution of AI bot traffic grouped by user agent
Get Radar AI Bots Timeseries	`get_radar_ai_bots_timeseries`	Retrieve AI bot HTTP request volume over time
Get Radar AI Bots Timeseries by User Agent	`get_radar_ai_bots_timeseries_by_user_agent`	Retrieve AI bot request distribution grouped by user agent over time
Get Radar AI Bots Timeseries Groups	`get_radar_ai_bots_timeseries_groups`	Retrieve AI bot HTTP request distribution grouped by the specified dimension over time
Get Radar AI Inference Summary by Model	`get_radar_ai_inference_summary_by_model`	Retrieve aggregated Workers AI inference counts grouped by model
Get Radar AI Inference Summary by Task	`get_radar_ai_inference_summary_by_task`	Retrieve aggregated Workers AI inference counts grouped by task type
Get Radar AI Inference Timeseries by Model	`get_radar_ai_inference_timeseries_by_model`	Retrieve Workers AI inference distribution over time grouped by model
Get Radar AI Inference Timeseries by Task	`get_radar_ai_inference_timeseries_by_task`	Retrieve Workers AI inference distribution over time grouped by task type

Rate limiting

Operation	ID	Description
Create Rate Limit	`create_rate_limit`	Create a new Rate Limit rule for a zone
Delete Rate Limit	`delete_rate_limit`	Delete a Rate Limit rule
Get Rate Limit	`get_rate_limit`	Get a specific Rate Limit
List Rate Limits	`list_rate_limits`	List Rate Limits for a zone
Update Rate Limit	`update_rate_limit`	Update an existing Rate Limit rule

Rules lists

Operation	ID	Description
Create Rules List	`create_rules_list`	Create a new rules list
Create Rules List Items	`create_rules_list_items`	Add items to a rules list
Delete Rules List	`delete_rules_list`	Delete a rules list
Delete Rules List Items	`delete_rules_list_items`	Delete specific items from a rules list
Get Rules List	`get_rules_list`	Get details of a specific rules list
Get Rules List Operation	`get_rules_list_operation`	Get the status of a bulk rules list operation
List Rules List Items	`list_rules_list_items`	List items in a rules list
List Rules Lists	`list_rules_lists`	List all rules lists in an account
Replace Rules List Items	`replace_rules_list_items`	Replace all items in a rules list
Update Rules List	`update_rules_list`	Update a rules list description

Rulesets

Operation	ID	Description
Create Zone Ruleset	`create_zone_ruleset`	Create a new ruleset for a zone
Create Zone Ruleset Rule	`create_zone_ruleset_rule`	Create a rule inside a zone ruleset
Delete Zone Ruleset	`delete_zone_ruleset`	Delete a zone ruleset
Delete Zone Ruleset Rule	`delete_zone_ruleset_rule`	Delete a rule from a zone ruleset
Get Account Ruleset	`get_account_ruleset`	Get a specific ruleset for the account
Get Zone Ruleset	`get_zone_ruleset`	Get a specific ruleset for a zone
Get Zone Ruleset Phase	`get_zone_ruleset_phase`	Get the entrypoint ruleset for a phase in a zone
List Account Rulesets	`list_account_rulesets`	List all rulesets for the account
List Zone Rulesets	`list_zone_rulesets`	List all rulesets for a zone
Update Zone Ruleset	`update_zone_ruleset`	Update an existing zone ruleset
Update Zone Ruleset Phase	`update_zone_ruleset_phase`	Update the entrypoint ruleset for a phase in a zone

Secrets store

Operation	ID	Description
Create Secrets Store	`create_secrets_store`	Create a new Secrets Store
Create Store Secret	`create_store_secret`	Create a new secret in a Secrets Store
Delete Secrets Store	`delete_secrets_store`	Delete a Secrets Store
Delete Store Secret	`delete_store_secret`	Delete a secret from a Secrets Store
Get Store Secret	`get_store_secret`	Get a specific secret from a Secrets Store
List Secrets Stores	`list_secrets_stores`	List all Secrets Stores in an account
List Store Secrets	`list_store_secrets`	List all secrets in a Secrets Store
Update Store Secret	`update_store_secret`	Update an existing secret in a Secrets Store

Security

Operation	ID	Description	Trigger
Get NEL Settings	`get_nel_settings`	Get Network Error Logging settings for a zone
Update NEL Settings	`update_nel_settings`	Update Network Error Logging settings for a zone

Snippets

Operation	ID	Description
Delete Snippet	`delete_snippet`	Delete a Snippet
Get Snippet	`get_snippet`	Get a specific Snippet
List Snippet Rules	`list_snippet_rules`	List all Snippet rules for a zone
List Snippets	`list_snippets`	List all Snippets for a zone
Put Snippet	`put_snippet`	Create or update a Snippet

Spectrum

Operation	ID	Description
Create Spectrum App	`create_spectrum_app`	Create a new Spectrum application
Delete Spectrum App	`delete_spectrum_app`	Delete a Spectrum application
Get Spectrum App	`get_spectrum_app`	Get a specific Spectrum application
List Spectrum Apps	`list_spectrum_apps`	List all Spectrum applications for a zone
Update Spectrum App	`update_spectrum_app`	Update an existing Spectrum application

Speed

Operation	ID	Description
Create Page Speed Test	`create_page_speed_test`	Create a new speed test for a page
Delete Page Speed Tests	`delete_page_speed_tests`	Delete all speed tests for a page
Get Speed Test Schedule	`get_speed_test_schedule`	Get the scheduled speed test for a page
List Observatory Pages	`list_observatory_pages`	List pages tracked in the Speed Observatory for a zone
List Page Speed Tests	`list_page_speed_tests`	List speed tests for a specific page

SSL

Operation	ID	Description	Trigger
Get Zone Ssl Settings	`get_zone_ssl_settings`	Get SSL/TLS settings for a zone
List Zone Ssl Certificates	`list_zone_ssl_certificates`	List SSL certificates for a zone

SSL / TLS

Operation	ID	Description
Delete Ssl Certificate	`delete_ssl_certificate`	Delete a custom SSL certificate from a zone
Update Zone Ssl Settings	`update_zone_ssl_settings`	Update the SSL/TLS mode for a zone
Upload Ssl Certificate	`upload_ssl_certificate`	Upload a custom SSL certificate for a zone

Stream

Operation	ID	Description
Add Stream Audio Track	`add_stream_audio_track`	Add an audio track to a Stream video by copying from a URL
Create Stream Live Input	`create_stream_live_input`	Create a new Stream live input
Create Stream Signed URL	`create_stream_signed_url`	Create a signed URL token for a Stream video
Create Stream Signing Key	`create_stream_signing_key`	Create a new Stream signing key
Create Stream Upload URL	`create_stream_upload_url`	Create a Stream upload URL or initiate a URL-based upload
Create Stream Watermark	`create_stream_watermark`	Create a Stream watermark profile from a URL
Delete Stream Audio Track	`delete_stream_audio_track`	Delete an audio track from a Stream video
Delete Stream Caption	`delete_stream_caption`	Delete a caption track from a Stream video
Delete Stream Live Input	`delete_stream_live_input`	Delete a Stream live input
Delete Stream Signing Key	`delete_stream_signing_key`	Delete a Stream signing key
Delete Stream Video	`delete_stream_video`	Delete a Stream video
Delete Stream Watermark	`delete_stream_watermark`	Delete a Stream watermark profile
Edit Stream Audio Track	`edit_stream_audio_track`	Edit an audio track on a Stream video
Get Stream Video	`get_stream_video`	Get details for a Stream video
Get Stream Video Embed Code	`get_stream_video_embed_code`	Get embed code for a Stream video
Get Stream Watermark	`get_stream_watermark`	Get a Stream watermark profile
List Stream Audio Tracks	`list_stream_audio_tracks`	List audio tracks for a Stream video
List Stream Captions	`list_stream_captions`	List captions for a Stream video
List Stream Live Inputs	`list_stream_live_inputs`	List all live inputs for Stream
List Stream Signing Keys	`list_stream_signing_keys`	List Stream signing keys
List Stream Videos	`list_stream_videos`	List videos in Cloudflare Stream
List Stream Watermarks	`list_stream_watermarks`	List Stream watermark profiles
Update Stream Video	`update_stream_video`	Update metadata and settings for a Stream video
Upload Stream Caption	`upload_stream_caption`	Upload a caption track for a Stream video

Triggers

Operation	ID	Description	Trigger
On Cloudflare Alert	`cloudflare_alert`	Trigger workflow when a Cloudflare alert fires	Yes
On DDoS Attack Alert	`cloudflare_ddos_alert`	Trigger: fires when Cloudflare detects a DDoS attack (L4 or L7)	Yes
On DNS Record Change	`cloudflare_dns_change`	Trigger when DNS records in a zone are added or modified	Yes
On Email Routing Incident	`cloudflare_email_routing_alert`	Trigger: fires when a Cloudflare Email Routing incident occurs.	Yes
On Health Check Status Change	`cloudflare_health_check_status`	Trigger when a Cloudflare health check changes status	Yes
On KV Namespace Key Updated	`cloudflare_kv_key_updated`	Trigger: fires when keys are added or updated in a KV namespace.	Yes
On Load Balancer Health Change	`cloudflare_load_balancer_alert`	Trigger: fires when a Cloudflare Load Balancer pool health changes or is enabled/disabled.	Yes
On Magic Transit / BGP Alert	`cloudflare_magic_transit_alert`	Trigger: fires on Magic Transit / Magic WAN tunnel health changes or BGP hijack detection.	Yes
On New Audit Log Entry	`cloudflare_audit_log`	Trigger workflow on new Cloudflare audit log entries	Yes
On New D1 Database Rows	`cloudflare_d1_new_rows`	Trigger: fires when new rows appear in a D1 database table.	Yes
On New R2 Object	`cloudflare_r2_new_object`	Trigger when a new object appears in an R2 bucket	Yes
On Page Shield Alert	`cloudflare_page_shield_alert`	Trigger: fires when Cloudflare Page Shield detects a malicious script or URL.	Yes
On Pages Deployment	`cloudflare_pages_deploy`	Trigger when a new Cloudflare Pages deployment is created	Yes
On Queue Delivery Event	`cloudflare_queue_delivery_event`	Trigger: polls a Cloudflare Queue for messages and emits each batch	Yes
On Queue Message	`cloudflare_queue_message`	Trigger when new messages arrive in a Cloudflare Queue	Yes
On R2 Object Event (via Queue)	`cloudflare_r2_object_event`	Trigger: fires when R2 bucket object events arrive in a Cloudflare Queue	Yes
On SSL/TLS Certificate Alert	`cloudflare_ssl_alert`	Trigger: fires when an SSL/TLS certificate event occurs (expiry, renewal, issuance failure)	Yes
On Stream Video Event	`cloudflare_stream_event`	Trigger when a Stream video event occurs	Yes
On Tunnel Health/Event Alert	`cloudflare_tunnel_alert`	Trigger: fires when a Cloudflare Tunnel changes health status or is created/deleted	Yes
On Waiting Room Event	`cloudflare_waiting_room_alert`	Trigger: fires when a Cloudflare Waiting Room is activated or deactivated.	Yes
On Workers Error/Usage Alert	`cloudflare_worker_alert`	Trigger: fires when a Cloudflare Worker exceeds error rate thresholds or usage limits	Yes
On Workers Script Deployed	`cloudflare_worker_deployed`	Trigger: fires when a Workers script is deployed (new version / etag detected).	Yes
On Zero Trust Gateway Alert	`cloudflare_zero_trust_alert`	Trigger: fires on Zero Trust Gateway activity log, blocked request, or Access custom pages events.	Yes

Tunnel

Operation	ID	Description
Create Tunnel	`create_tunnel`	Create a new Cloudflare Tunnel
Delete Tunnel	`delete_tunnel`	Delete a Cloudflare Tunnel
Get Tunnel	`get_tunnel`	Get details for a specific tunnel
Get Tunnel Configuration	`get_tunnel_configuration`	Get the configuration for a Cloudflare Tunnel
Get Tunnel Token	`get_tunnel_token`	Get the token for a tunnel (used to run cloudflared)
List Tunnel Connections	`list_tunnel_connections`	List active connections for a Cloudflare Tunnel
List Tunnels	`list_tunnels`	List Cloudflare Tunnels
Put Tunnel Configuration	`put_tunnel_configuration`	Set the ingress configuration for a Cloudflare Tunnel
Update Tunnel	`update_tunnel`	Update a Cloudflare Tunnel

URL scanner

Operation	ID	Description
Bulk Submit URL Scans	`bulk_submit_url_scans`	Bulk submit up to 100 URLs for scanning
Get URL Scan DOM	`get_url_scan_dom`	Retrieve the DOM content as rendered by Chrome during a URL scan
Get URL Scan HAR	`get_url_scan_har`	Retrieve the HAR file for a completed URL scan
Get URL Scan Result	`get_url_scan`	Retrieve the full report for a completed URL scan
Get URL Scan Screenshot	`get_url_scan_screenshot`	Retrieve the screenshot captured during a URL scan
Search URL Scans	`search_url_scans`	Search completed URL scans using ElasticSearch Query syntax
Submit URL Scan	`submit_url_scan`	Submit a URL for scanning

Vectorize

Operation	ID	Description
Create Vectorize Index	`create_vectorize_index`	Create a new Vectorize index
Create Vectorize Metadata Index	`create_vectorize_metadata_index`	Create a metadata index for a Vectorize index
Delete Vectorize Index	`delete_vectorize_index`	Delete a Vectorize index
Delete Vectorize Metadata Index	`delete_vectorize_metadata_index`	Delete a metadata index from a Vectorize index
Delete Vectors from Index	`delete_vectors_from_index`	Delete vectors from a Vectorize index by ID
Get Vectorize Index	`get_vectorize_index`	Get details for a Vectorize index
Get Vectorize Index Info	`get_vectorize_index_info`	Get Vectorize index stats and info
Get Vectorize Vectors By IDs	`get_vectorize_vectors_by_ids`	Retrieve vectors by their IDs from a Vectorize index
List Vectorize Indexes	`list_vectorize_indexes`	List all Vectorize indexes in an account
List Vectorize Metadata Indexes	`list_vectorize_metadata_indexes`	List metadata indexes for a Vectorize index
Query Vectorize Index	`query_vectorize_index`	Query vectors from a Vectorize index
Upsert Vectors to Index	`upsert_vectors_to_index`	Upsert vectors into a Vectorize index

WAF

Operation	ID	Description
Get WAF Package	`get_waf_package`	Get a specific WAF package for a zone
List WAF Package Rule Groups	`list_waf_package_rule_groups`	List rule groups in a WAF package
List WAF Package Rules	`list_waf_package_rules`	List rules in a WAF package
List Zone Waf Packages	`list_zone_waf_packages`	List WAF packages for a zone
Update WAF Rule	`update_waf_rule`	Update the mode of a WAF rule

Waiting rooms

Operation	ID	Description
Create Waiting Room	`create_waiting_room`	Create a waiting room for a zone
Create Waiting Room Event	`create_waiting_room_event`	Create an event for a waiting room
Delete Waiting Room	`delete_waiting_room`	Delete a waiting room
Get Waiting Room	`get_waiting_room`	Get a specific waiting room
Get Waiting Room Status	`get_waiting_room_status`	Get status of a waiting room
List Waiting Room Events	`list_waiting_room_events`	List events for a waiting room
List Waiting Rooms	`list_waiting_rooms`	List all waiting rooms for a zone
Update Waiting Room	`update_waiting_room`	Update a waiting room

Web analytics

Operation	ID	Description
Create Web Analytics Site	`create_web_analytics_site`	Create a new Web Analytics site
Delete Web Analytics Site	`delete_web_analytics_site`	Delete a Web Analytics site
Get Web Analytics Site	`get_web_analytics_site`	Get a specific Web Analytics site
List Web Analytics Sites	`list_web_analytics_sites`	List all Web Analytics sites in an account

Worker

Operation	ID	Description
Create Worker Route	`create_worker_route`	Create a Worker route
Delete Worker	`delete_worker`	Delete a Worker script
Delete Worker Route	`delete_worker_route`	Delete a Worker route
Get Worker	`get_worker`	Get a Worker script
List Worker Routes	`list_worker_routes`	List Worker routes for a zone
List Workers	`list_workers`	List all Workers in an account
Upload Worker Script	`upload_worker_script`	Upload or update a Worker script

Workers

Operation	ID	Description
Bulk Upsert Worker Secrets	`bulk_upsert_worker_secrets`	Bulk upsert secrets for a Worker script
Create Worker Deployment	`create_worker_deployment`	Create a new deployment for a Worker script
Delete Worker Secret	`delete_worker_secret`	Delete a secret from a Worker script
Delete Worker Tail	`delete_worker_tail`	Delete an active tail session for a Worker script
Get Worker Cron Triggers	`get_worker_cron_triggers`	Get cron triggers (schedules) for a Worker script
Get Worker Deployment	`get_worker_deployment`	Get a specific deployment for a Worker script
Get Worker Version	`get_worker_version`	Get a specific version of a Worker script
List Durable Object Namespaces	`list_durable_object_namespaces`	List all Durable Object namespaces in an account
List Durable Objects	`list_durable_objects`	List Durable Objects in a namespace
List Worker Deployments	`list_worker_deployments`	List deployments for a Worker script
List Worker Secrets	`list_worker_secrets`	List secrets for a Worker script
List Worker Tails	`list_worker_tails`	List active tails for a Worker script
List Worker Versions	`list_worker_versions`	List versions of a Worker script
Put Worker Secret	`put_worker_secret`	Create or update a secret for a Worker script
Query Analytics Engine	`query_analytics_engine`	Query Workers Analytics Engine with SQL
Start Worker Tail	`start_worker_tail`	Start a tail session for a Worker script to stream live logs
Update Worker Cron Triggers	`update_worker_cron_triggers`	Update cron triggers (schedules) for a Worker script
Update Worker Route	`update_worker_route`	Update an existing Worker route
Upload Worker Version	`upload_worker_version`	Upload a new version of a Worker script

Workers AI

Operation	ID	Description
Convert File to Markdown	`convert_file_to_markdown`	Convert a document or file to markdown format using Workers AI
Create Fine-Tune	`create_ai_finetune`	Start a new fine-tuning job to customize a Workers AI model
Get Model Schema	`get_ai_model_schema`	Get the JSON schema definition for a Workers AI model’s inputs and outputs
Image Classification	`run_ai_image_classification`	Classify an image into categories using a Workers AI vision model
List Fine-Tunes	`list_ai_finetunes`	List all fine-tuning jobs for the account
List Public Fine-Tunes	`list_public_ai_finetunes`	Find publicly available fine-tuned Workers AI models
List Workers Ai Models	`list_workers_ai_models`	List available Workers AI models
Object Detection	`run_ai_object_detection`	Detect and locate objects within an image using a Workers AI model
Run Workers Ai Inference	`run_workers_ai_inference`	Run inference with a Workers AI model
Search AI Authors	`list_ai_authors`	Search for AI model authors and organizations on Workers AI
Search AI Task Types	`list_ai_tasks`	Search and list AI task types supported by Workers AI
Speech to Text (ASR)	`run_ai_speech_to_text`	Transcribe audio to text using Whisper or another Workers AI ASR model
Summarization	`run_ai_summarization`	Summarize long text into a concise overview using a Workers AI model
Text Embeddings	`run_ai_text_embeddings`	Generate vector embeddings for text using a Workers AI embedding model
Text Generation	`run_ai_text_generation`	Generate text using a Workers AI language model with structured message input
Text to Image	`run_ai_text_to_image`	Generate an image from a text prompt using a Cloudflare diffusion model
Translation	`run_ai_translation`	Translate text between languages using a Workers AI translation model

Zaraz

Operation	ID	Description
Get Zaraz Config	`get_zaraz_config`	Get the Zaraz configuration for a zone
Publish Zaraz Config	`publish_zaraz_config`	Publish the Zaraz configuration for a zone
Update Zaraz Config	`update_zaraz_config`	Update the Zaraz configuration for a zone

Zero trust

Operation	ID	Description
Create Tunnel Route	`create_tunnel_route`	Create a new tunnel route
Create Virtual Network	`create_virtual_network`	Create a new virtual network
Delete Tunnel Route	`delete_tunnel_route`	Delete a tunnel route
Delete Virtual Network	`delete_virtual_network`	Delete a virtual network
Get Virtual Network	`get_virtual_network`	Get a specific virtual network
List Tunnel Routes	`list_tunnel_routes`	List all tunnel routes in an account
List Virtual Networks	`list_virtual_networks`	List all virtual networks in an account
Update Tunnel Route	`update_tunnel_route`	Update an existing tunnel route
Update Virtual Network	`update_virtual_network`	Update an existing virtual network

Zero trust gateway

Operation	ID	Description
Create Gateway List	`create_gateway_list`	Create a Zero Trust Gateway list
Create Gateway Location	`create_gateway_location`	Create a Zero Trust Gateway location
Create Gateway Rule	`create_gateway_rule`	Create a Zero Trust Gateway firewall rule
Delete Gateway List	`delete_gateway_list`	Delete a Zero Trust Gateway list
Delete Gateway Location	`delete_gateway_location`	Delete a Zero Trust Gateway location
Delete Gateway Rule	`delete_gateway_rule`	Delete a Zero Trust Gateway firewall rule
Get Gateway Configuration	`get_gateway_configuration`	Get Zero Trust Gateway configuration
Get Gateway List	`get_gateway_list`	Get a Zero Trust Gateway list
Get Gateway Location	`get_gateway_location`	Get a Zero Trust Gateway location
Get Gateway Rule	`get_gateway_rule`	Get a Zero Trust Gateway firewall rule
List Gateway List Items	`list_gateway_list_items`	List items in a Zero Trust Gateway list
List Gateway Lists	`list_gateway_lists`	List Zero Trust Gateway lists
List Gateway Locations	`list_gateway_locations`	List Zero Trust Gateway locations
List Gateway Rules	`list_gateway_rules`	List Zero Trust Gateway firewall rules
Update Gateway Configuration	`update_gateway_configuration`	Update Zero Trust Gateway configuration
Update Gateway List	`update_gateway_list`	Update (append/remove items from) a Zero Trust Gateway list
Update Gateway Rule	`update_gateway_rule`	Update a Zero Trust Gateway firewall rule

Zone

Operation	ID	Description
Get Brotli Setting	`get_brotli_setting`	Get Brotli compression setting for a zone
Get Early Hints Setting	`get_early_hints_setting`	Get Early Hints setting for a zone
Get HTTP/3 Setting	`get_http3_setting`	Get HTTP/3 setting for a zone
Get Regional Tiered Cache	`get_regional_tiered_cache`	Get regional tiered cache setting for a zone
Get Zone	`get_zone`	Get details for a specific zone
Get Zone Analytics	`get_zone_analytics`	Get analytics summary for a zone
Get Zone Settings	`get_zone_settings`	Get all settings for a zone
List Zones	`list_zones`	List all zones in an account
Purge Zone Cache	`purge_zone_cache`	Purge zone cache
Update Brotli Setting	`update_brotli_setting`	Update Brotli compression setting for a zone
Update Early Hints Setting	`update_early_hints_setting`	Update Early Hints setting for a zone
Update HTTP/3 Setting	`update_http3_setting`	Update HTTP/3 setting for a zone
Update Regional Tiered Cache	`update_regional_tiered_cache`	Enable or disable regional tiered cache for a zone
Update Zone Setting	`update_zone_setting`	Update a specific zone setting

Zones

Operation	ID	Description
Create Zone	`create_zone`	Create a new zone (domain) in an account
Delete Zone	`delete_zone`	Delete a zone from an account
Edit Zone	`edit_zone`	Edit zone properties
Zone Activation Check	`zone_activation_check`	Trigger a zone activation check

​Credentials

​OAuth

​API token

​API key

​Operations

​Access

​Account

​Addressing / BYOIP

​AI gateway

​Analytics engine SQL API

​API shield

​Audit logs

​Bot management

​Cache

​Calls

​Custom hostnames

​D1 database

​DNS

​DNS record

​Email routing

​Firewall rule

​Fonts

​Health checks

​Image

​Images

​Intel

​KV

​Load balancer

​Log explorer

​Logpush

​Magic transit

​Notifications

​Page rules

​Page shield

​Pages

​Pipelines

​Queue

​R2 bucket

​R2 event notifications

​R2 storage

​Radar AI

​Rate limiting

​Rules lists

​Rulesets

​Secrets store

​Security

​Snippets

​Spectrum

​Speed

​SSL

​SSL / TLS

​Stream

​Triggers

​Tunnel

​URL scanner

​Vectorize

​WAF

​Waiting rooms

​Web analytics

​Worker

​Workers

​Workers AI

​Zaraz

​Zero trust

​Zero trust gateway

​Zone

​Zones

Credentials

OAuth

API token

API key

Operations

Access

Account

Addressing / BYOIP

AI gateway

Analytics engine SQL API

API shield

Audit logs

Bot management

Cache

Calls

Custom hostnames

D1 database

DNS

DNS record

Email routing

Firewall rule

Fonts

Health checks

Image

Images

Intel

KV

Load balancer

Log explorer

Logpush

Magic transit

Notifications

Page rules

Page shield

Pages

Pipelines

Queue

R2 bucket

R2 event notifications

R2 storage

Radar AI

Rate limiting

Rules lists

Rulesets

Secrets store

Security

Snippets

Spectrum

Speed

SSL

SSL / TLS

Stream

Triggers

Tunnel

URL scanner

Vectorize

WAF

Waiting rooms

Web analytics

Worker

Workers

Workers AI

Zaraz

Zero trust

Zero trust gateway

Zone

Zones