A command-line tool for managing Cloudflare services through their web API. Cloudflare provides DNS, website hosting, serverless Workers, file storage, databases, and analytics.

Use it to manage DNS records, Workers, Pages, R2 storage, KV data, D1 databases, and analytics, provided the required API credential is available.

It lets you inspect or change Cloudflare resources when the usual Wrangler tool or a Cloudflare connector is unavailable.

cloudflare — Skill for Claude Code and Codex by mnlt/teleport

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add mnlt/teleport --skill cloudflare

Clone the repo

git clone --depth 1 https://github.com/mnlt/teleport

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/mnlt/teleport/cloudflare/github.svg)](https://agentmods.dev/skills/mnlt/teleport/cloudflare)

Your own site

<a href="https://agentmods.dev/skills/mnlt/teleport/cloudflare"><img src="https://agentmods.dev/badge/skills/mnlt/teleport/cloudflare/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/mnlt/teleport/cloudflare"><img src="https://agentmods.dev/badge/skills/mnlt/teleport/cloudflare.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 64 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,902 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00064	$0.01902
Opus 5.5	$0.00026	$0.00761
Sonnet 5.5	$0.00013	$0.00380
Haiku 4.5	$0.00006	$0.00190

Measured 1mo ago against content hash f467c3859474, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

cloudflare scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

**Do NOT suggest editing `~/.claude/settings.local.json` manually.** The `teleport-setup add-key` command handles it with backup, validation, and masked input. Stop execution until the user has run the command and restar

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

ZONE_ID=$(curl -sL -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \

skills/cloudflare/SKILL.md · 116 lines

How it starts

The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Cloudflare

Direct REST access to Cloudflare's control plane — DNS, Workers, Pages, R2, KV, D1. Use when needing the current account state or one-off mutations without wrangler.

Usage

Use for: DNS record CRUD, listing/inspecting Workers/KV/R2/D1/Pages, running D1 queries, deploying small Workers.
Skip for: Worker bundling / TS / local dev (use wrangler), bulk R2 object uploads (use S3 client), billing questions.

Credentials check

[ -n "$CLOUDFLARE_API_TOKEN" ] && echo "CLOUDFLARE_API_TOKEN: PRESENT" || echo "CLOUDFLARE_API_TOKEN: MISSING"

Never echo the variable directly.

If MISSING, respond to the user with EXACTLY this message (do NOT paraphrase, do NOT suggest manual JSON edits):

I need your cloudflare credential. Run this in another terminal — it'll open the signup page, validate format, and save it safely with masked input:
teleport-setup add-key cloudflare
Then restart Claude Code (/exit, then claude) and ask me again.

Do NOT suggest editing ~/.claude/settings.local.json manually. The teleport-setup add-key command handles it with backup, validation, and masked input. Stop execution until the user has run the command and restarted.

API

Base URL: https://api.cloudflare.com/client/v4
Auth: Authorization: Bearer $CLOUDFLARE_API_TOKEN — scoped API Token only, never the legacy Global API Key (X-Auth-Email + X-Auth-Key). Verify with GET /user/tokens/verify.
Response envelope (every response): {"success": bool, "errors": [...], "messages": [...], "result": ...}. Always check .success before reading .result — jumping straight to .result.X silently hides failures.
Prerequisites: endpoints need either Account ID (Workers, KV, R2, D1, Pages) or Zone ID (DNS, rulesets, WAF). Both are 32 hex chars; not interchangeable. Fetch via GET /accounts and GET /zones?name=example.com.
Rate limits: 1,200 req / 5 min cumulative per user across dashboard + tokens, plus 200 req/s per IP. Respect Retry-After on 429.

Read the full file on GitHub · 116 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 116 lines · 64 tokens per session scan B f467c3859474

Subscribe to this mod's changes

cloudflare is a skill published in the GitHub repository mnlt/teleport (8 stars, last pushed 5mo ago), licensed MIT. It adds 64 tokens to every session and 1,902 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 2 findings (reads agent configuration directories, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Claude Code Cloud DevOps and cloud anthropic cli developer-tool mcp model-context-protocol

cloudflare-tunnel-routes

Give any local port (Gradio, Streamlit, FastAPI, webhook receiver, dev server, Docker container) a permanent HTTPS URL on a domain the user owns - in one command, no deployment. Use when the user says "my Gradio share link keeps changing", "replace share=True with a permanent URL", "stable URL for localhost:7860"…

nachum10/cloudflare-tunnel-routes · 197 tokens

cloudflare

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade B, and why

Reads agent configuration directoriesmediumAgent snooping

Makes network callslowCapability

How it starts

Cloudflare

Usage

Credentials check

API

What this file has done since we first saw it

Other skills, from other repositories

cloudflare-tunnel-routes

c-files

kubernetes-agent

configuration

deploy-cloudflare

deploy-vercel