Connecting only to observability, or only to Radar, keeps the tool list short and typed for the work at hand. When the job genuinely spans products, the Code Mode server is the other shape — broad API coverage through code execution rather than a long menu.
A catalogue of sixteen managed remote servers Cloudflare runs for its own products, each a URL you connect to individually with curated, typed tools for that area. Broad API coverage is a separate thing: the Code Mode server at `mcp.cloudflare.com` lives in the `cloudflare/mcp` repository and works by code execution instead.
- Application debugging: logs and analytics through the observability server at `observability.mcp.cloudflare.com/mcp`, and Logpush job health at `logs.mcp.cloudflare.com/mcp`
- Workers development: storage, AI and compute primitives at `bindings.mcp.cloudflare.com/mcp`, and build insight at `builds.mcp.cloudflare.com/mcp`
- Current Cloudflare reference material at `docs.mcp.cloudflare.com/mcp`, and posts from the Cloudflare Blog at `blog.mcp.cloudflare.com/mcp`
- A sandbox development environment at `containers.mcp.cloudflare.com/mcp`, and page fetching, markdown conversion and screenshots at `browser.mcp.cloudflare.com/mcp`
- AI Gateway logs with their prompts and responses at `ai-gateway.mcp.cloudflare.com/mcp`, and AutoRAG instances queried at `autorag.mcp.cloudflare.com/mcp`
- Security and compliance: audit logs at `auditlogs.mcp.cloudflare.com/mcp`, SaaS misconfiguration findings at `casb.mcp.cloudflare.com/mcp`, and per-application insight at `dex.mcp.cloudflare.com/mcp`
- DNS performance and debugging at `dns-analytics.mcp.cloudflare.com/mcp`, and global internet measurements at `radar.mcp.cloudflare.com/mcp`
- Streamable HTTP on every server at both `/mcp` and `/sse`, the latter as a URL alias onto the same handler
A Cloudflare account, authorised over OAuth when you connect — the browser opens so you choose which permissions the agent gets. For an unattended integration such as the OpenAI Responses API, create a Cloudflare API token scoped to what that particular server needs and pass it as a bearer token. Some features need a paid Workers plan. One migration note: a legacy `GET /sse` request now returns `410 Gone` with the two ways forward — configure the existing URL for Streamable HTTP, or move to the `/mcp` URL.
One command — npx mcp-remote https://observability.mcp.cloudflare.com/mcp
