Auth and security - official Cloudflare server
Cloudflare One CASB MCP server
A remote MCP server for inspecting Cloudflare One CASB integrations, assets and asset categories to find security misconfigurations in SaaS applications. Cloudflare hosts it at https://casb.mcp.cloudflare.com/mcp with OAuth or API key auth.
Last verified 2 sources
Install
Generic
{
"mcpServers": {
"cloudflare-casb": {
"url": "https://casb.mcp.cloudflare.com/mcp"
}
}
}Notes and caveats
- Supports Cloudflare OAuth and API-token authentication.
- Tools are account-scoped; with multi-account credentials pass account_id or a cf-account-id header.
- The README describes tool capabilities (list and inspect integrations, list and search assets, list asset categories) without naming tools.
More MCP servers for auth and security
- Cloudflare
Cloudflare Agents SDK Documentation MCP server
A remote MCP server for token-efficient search of the Cloudflare Agents SDK documentation.
Transport: Streamable HTTPAuth: Other - Cloudflare
Cloudflare API MCP server
Cloudflare's recommended remote MCP server covering the whole Cloudflare API (over 2,500 endpoints) through a Code Mode search-and-execute pattern. It also searches the Cloudflare developer docs.
Transport: Streamable HTTPAuth: OAuth or API key - Cloudflare
Cloudflare Container Sandbox MCP server
A remote MCP server that gives an agent an ephemeral sandboxed container on Cloudflare where it can write files and run commands such as Node or Python.
Transport: Streamable HTTPAuth: OAuth - Cloudflare
Cloudflare Digital Experience Monitoring (DEX) MCP server
A remote MCP server built on the Cloudflare DEX API that surfaces device, network and application performance across a Zero Trust organization, including remote packet captures and WARP diagnostics.
Transport: Streamable HTTPAuth: OAuth - Cloudflare
Cloudflare Documentation MCP server
A public remote MCP server that searches the Cloudflare developer documentation using Cloudflare AI Search. It needs no authentication.
Transport: Streamable HTTPAuth: No auth - 1Password
1Password Device Trust MCP server
Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio.
Transport: Streamable HTTP, stdioAuth: API key
Related reading
- Cloudflare Gateway Can Now Detect MCP Traffic on the Wire: Shadow MCP Gets a Network BoundaryCloudflare Gateway now detects MCP traffic by protocol header, adds a shadow MCP dashboard, and can block MCP connections outside approved portals.
- Cloudflare Radar Researcher: A Plain-Language Agent Over 500 Live API EndpointsCloudflare Radar Researcher is a plain-language agent over live internet data, built on MCP code mode and chart specs that keep numbers out of the model.
- Talorys: A Free Personal AI Agent on Cloudflare, and What 10,000 Neurons BuysTalorys deploys a personal AI agent to your own Cloudflare account with one npx command. How far 10,000 free daily Neurons go and where "self-hosted" breaks.
- Cloudflare Clef Decision Models: Jev-Compatible, Benchmarked and PricedCloudflare Clef and Clef-flash are Jev-compatible decision models on Workers AI. Pricing, latency and benchmarks against Jev, plus the RL fine-tuning service.
- Cloudflare Page Shield ML Caught 4 Storefront Malware Campaigns Static Scanners MissedCloudflare Page Shield ML caught four malicious JavaScript campaigns on storefronts that static scanners missed. How each hid, and why behavior beat signatures.
- Cloudflare Adaptive Intelligence: Bot Scores That Retrain Weekly Instead of QuarterlyCloudflare Adaptive Intelligence swaps static bot rules for a continuously retraining model. What shipped and what changes if you build on bot score.
FAQ
What does the Cloudflare One CASB MCP server do?
A remote MCP server for inspecting Cloudflare One CASB integrations, assets and asset categories to find security misconfigurations in SaaS applications.
How do I add the Cloudflare One CASB MCP server to an MCP client?
Cloudflare documents a Generic config; copy it from the Generic section of this page.
Does the Cloudflare One CASB MCP server need authentication?
Yes, OAuth or API key. Transport: Streamable HTTP. Status: Unlabelled, last checked October 17, 2026.
Sources
Last verified against 2 Cloudflare pages, then re-checked independently.
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.