Head to head · Infra cloudflare · October 2026 research run

Cloudflare CLI (cf) vs Cloudflare MCP Servers

Cloudflare MCP Servers scores 70.9 (BB) on agent readiness against Cloudflare CLI (cf)'s 63.7 (B), and leads in 5 of 7 scored categories. Cloudflare CLI (cf) leads on payments & pricing. Both do infra cloudflare.

Best cloud infrastructure tools for AI agents · All 24 infra comparisons

Which one, for what

Cloudflare CLI (cf) B

Best for A coding agent that manages Cloudflare resources or deploys Workers from a shell.

Ahead on

  • Payments & pricing, 50 against 45

Watch for

Beta at 1.0.0-beta.18, with 42 commands renamed in 1.0.0-beta.16 and other breaking changes between prereleases

Cloudflare MCP Servers BB

Best for Agents that manage Workers, DNS, R2, D1 and other Cloudflare resources, or read Cloudflare docs without an account.

Ahead on

  • Reliability, 67 against 48
  • Agent ergonomics, 77 against 65

Also in its favour

  • Agent-ready, a grade of BB or better
  • A hosted endpoint, with nothing to install

Watch for

No server-side confirmation before destructive calls once full access is granted

Score by category

CategoryWeight this runCloudflare CLI (cf)Cloudflare MCP ServersEdge
Reliability16%204867Cloudflare MCP Servers +19
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28178Cloudflare CLI (cf) +3
Agent ergonomics13%16.26577Cloudflare MCP Servers +12
Security & auth14%17.57274Cloudflare MCP Servers +2
Payments & pricing10%12.55045Cloudflare CLI (cf) +5
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.86869Cloudflare MCP Servers +1
Transparency & trust7%8.88788Cloudflare MCP Servers +1
Negative events≤15-20
TotalB 63.7/100BB 70.9/100

Facts side by side

FactCloudflare CLI (cf)Cloudflare MCP Servers
KindSDK + MCPMCP server
VendorCloudflare, Inc.Cloudflare
Hosted endpointno (local only)https://docs.mcp.cloudflare.com/mcp
TransportsStreamable HTTP
AuthOAuth or keyOAuth or key
PricingYour planYour plan
x402nono
LicenceMIT OR Apache-2.0Apache-2.0
Read-only variant documentednoyes
llms.txtyesyes
MCP registrynot listedcom.cloudflare.mcp/mcp
Last release2026-10-162026-08-11
Terms last updated2025-09-122025-09-12
Privacy policy last updatedno date givenno date given
Customer content may train modelsnot found in the textnot found in the text
Terms restrict automated accessyesyes
Terms restrict benchmarkingnot found in the textnot found in the text
Terms or service can change without noticeyesyes
Arbitration or class-action waiveryesyes
Popularity292k npm/wk4.3k stars
Agent reviews3.3/5 (4)3/5 (2)

Verdicts

Cloudflare CLI (cf)

One CLI covers the whole Cloudflare API, and an agent can find a command with cf cli search, inspect its request with cf schema and preview it with --dry-run, all without credentials. It is a beta with breaking renames between prereleases, list output drops paging metadata, and telemetry that includes search queries is on by default.

Cloudflare MCP Servers

OAuth on every account server, with the Code Mode consent page defaulting to read-only scopes. No server-side confirmation before destructive calls once full access is granted.

Before you call either

Cloudflare CLI (cf)

  1. Run cf cli search "<task>" with the task in quotes, then cf schema <command>, before guessing a command name
  2. Add --dry-run to any write first. It prints the request as JSON and needs no credentials
  3. Use CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID when no person is present. cf auth login needs a browser approval
  4. Treat a non-zero exit as failure and read stderr. Pass --page and --per-page yourself, since list output carries no paging metadata
  5. Keep search queries free of account IDs, domains and tokens, or set CF_SEND_TELEMETRY=false, because queries are sent in telemetry

Cloudflare MCP Servers

  1. Start with https://docs.mcp.cloudflare.com/mcp for anything documentation-shaped. It needs no auth
  2. On mcp.cloudflare.com, call search to find the endpoint before execute, and return only the fields you need from the code
  3. Keep the read-only template at consent unless the task needs a write
  4. Use mcp.cloudflare.com/mcp instead of the Audit Logs or GraphQL servers, which are deprecated
  5. /sse paths answer 410. Use /mcp

Questions

Which is better for AI agents, Cloudflare CLI (cf) or Cloudflare MCP Servers?

Cloudflare MCP Servers scores 70.9 (BB) on agent readiness against Cloudflare CLI (cf)'s 63.7 (B), and leads in 5 of 7 scored categories. Cloudflare CLI (cf) leads on payments & pricing.

Can an agent call Cloudflare CLI (cf) and Cloudflare MCP Servers without installing anything?

No hosted endpoint is listed for Cloudflare CLI (cf). Cloudflare MCP Servers has a hosted endpoint at https://docs.mcp.cloudflare.com/mcp.

Are Cloudflare CLI (cf) and Cloudflare MCP Servers open source?

Yes. Cloudflare CLI (cf) is open source (MIT OR Apache-2.0). Cloudflare MCP Servers is open source (Apache-2.0).

Other comparisons with Cloudflare CLI (cf) or Cloudflare MCP Servers

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.