A lightweight MCP server that enables agents to interface with Cloudflare's REST API, allowing management of DNS records and other Cloudflare services.
Warning. Serious findings — read the checks before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Prototype Pollution in lodash
Denial of Service in axios
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
process.env. You'll be asked to provide them before it can run. Since this is a local server, you set these in your own MCP client configuration and they stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.BUILD_PLATFORMBUILD_TYPEDB_CONNECTDB_NAMEDOCKER_MACHINE_NAMEENV_FILEMASTERPORT[](https://m8ven.ai/mcp/zukai-mcp-cloudflare-api-mcp-103b2f)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check