-/\-\ M H // WT
Per-user OAuth · no shared API token
OAuth-first Cloudflare control

Your Cloudflare. Your connection.

DNS, Email Routing, DMARC, BIMI, Pages cutovers, cache purge, and Turnstile tools stay approval-gated. Every user connects through Cloudflare OAuth and receives a separate MCP connector key—never the owner's API token.

Connect Cloudflare Setup & examples View JSON
WorkerLive
OAuthOAuth ready
User IsolationPer-user keys
Fallback TokenConfigured
scan_zoneplan_email_authverify_domainapply_dns_recordset_dmarc_policysetup_bimisetup_email_routingpages_cutoverpurge_cachecreate_turnstile_widgetmint_scoped_tokenlist_tokensrevoke_tokenwho_serves_domainaccount_doctorpages_branch_checkagent_research_startagent_research_statusagent_research_listagent_briefingagent_control
Git ships code, never the owner's secrets. Connector keys are stored only as hashes and cannot switch to another user's OAuth grant.