--- title: "Cloudflare: MCP vendor profile | Agent MCP Directory" description: "Cloudflare: host or runtime. 4 products, 10 dated facts, prices, standards and two checks, each sourced, read 5 November 2026." canonical: https://agentmcpdirectory.com/vendors/cloudflare site: "Agent MCP Directory" last_updated: 2026-11-05 section: "Vendors" --- # Cloudflare: MCP vendor profile | Agent MCP Directory > Cloudflare: host or runtime. 4 products, 10 dated facts, prices, standards and two checks, each sourced, read 5 November 2026. Source: https://agentmcpdirectory.com/vendors/cloudflare Site: Agent MCP Directory Last reviewed: 2026-11-05 # Cloudflare: MCP vendor profile Cloudflare hosts remote MCP servers on Workers through the Agents SDK, ships the Workers OAuth Provider for both sides of MCP authorization, and fronts servers with MCP server portals and AI Gateway, as documented by the vendor. Cloudflare's MCP overview, last updated 27 Oct 2026, says remote MCP connections use Streamable HTTP with OAuth and local connections use stdio (developers.cloudflare.com). ## At a glance | Listed as | Cloudflare (Workers, Agents SDK, MCP portals, AI Gateway) | | --- | --- | | Type | Hosts and runtimes | | Also covers | gateway or proxy, auth provider | | Home | developers.cloudflare.com | | Price | Workers Paid minimum | | Read | 5 November 2026 | ## What it does for this layer Cloudflare advises MCP server authors to keep tool definitions out of the context window, noting that newer clients use Code Mode, where the model writes code that calls tools and loads only the definitions it needs ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/)). Cloudflare recommends per-operation OAuth scopes and returning an insufficientScope() challenge for step-up authorization instead of requesting every scope up front ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/)). Cloudflare says strict MCP clients validate tool calls against inputSchema and results against outputSchema, and advises defining both and returning matching structuredContent ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/)). The Workers OAuth Provider stores grants and tokens in a KV namespace bound as OAUTH\_KV, and needs the global\_fetch\_strictly\_public flag to fetch Client ID Metadata Documents ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/authorization/)). Cloudflare's authorization guide keeps Dynamic Client Registration as an option for older MCP clients and supports upstream sign-in with GitHub, Google or another provider through beginUpstream() and finishUpstream() ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/authorization/)). The Workers Paid plan has a minimum charge of 5 USD a month per account; the Workers Free plan allows 100,000 requests a day with 10 ms of CPU time per invocation ([developers.cloudflare.com](https://developers.cloudflare.com/workers/platform/pricing/)). Cloudflare's Agents docs list pages for building an MCP client, an MCPClientManager, charging for MCP tools and MCP governance ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/)). Cloudflare describes its connectivity cloud as delivering "60+ networking, security, and performance services" ([www.cloudflare.com](https://www.cloudflare.com/about-overview/), vendor's own claim). Cloudflare describes MCP authorization as "a subset of OAuth 2.1" and builds it with @cloudflare/workers-oauth-provider, using the OAuthAuthorizationServer and OAuthResourceServer classes ([developers.cloudflare.com](https://developers.cloudflare.com/agents/model-context-protocol/authorization/)). ## Products and plans | Product | What it does | Price | | --- | --- | --- | | Workers and Agents SDK | Host remote MCP servers with createMcpHandler. | Workers Paid minimum; from 5 USD; Workers Free: 100,000 requests a day (source, as of 5 November 2026) | | Workers OAuth Provider | Authorization server and resource server library for MCP on Workers. | price not read | | MCP server portals | One endpoint in front of many remote MCP servers. | price not read | | AI Gateway | Gateway for model traffic with analytics, caching and rate limits. | price not read | ## Standards | Standard | Part of it | Status | What the page says | Source | | --- | --- | --- | --- | --- | | MCP | streamable HTTP | Supports | Remote MCP connections use Streamable HTTP. | developers.cloudflare.com | | MCP | client ID metadata documents | Supports | The OAuth provider fetches CIMDs with global_fetch_strictly_public. | developers.cloudflare.com | | MCP | dynamic client registration | Supports | DCR kept as an option for older clients. | developers.cloudflare.com | | MCP | step-up authorization | Supports | insufficientScope() challenge for per-operation scopes. | developers.cloudflare.com | ## Checks on its own domain | Check | Domain | Result | Scanned | Method | | --- | --- | --- | --- | --- | | Ora cached score | cloudflare.com | 82 of 100, grade B | 5 November 2026 | how it was taken | | Cloudflare agent-readiness scan | cloudflare.com | 53 of 100, L4 Agent-Integrated; 8 of 15 counted checks passed | 5 November 2026 | how it was taken | ## What it does not do - Cloudflare does not list third-party MCP servers in a public registry of its own. - Cloudflare portals do not front stdio-only servers until they are put behind HTTP. ## Relation to Ora Cloudflare, Inc. runs the Is Your Site Agent-Ready? scanner at isitagentready.com, which checks standards from robots.txt and Markdown negotiation to MCP, OAuth, Agent Skills and agentic commerce, while Ora's home page offers its own scan for a domain or an MCP server URL; this directory records both scores for each vendor domain ([isitagentready.com](https://isitagentready.com/) and [ora.ai](https://ora.ai/?utm_source=agentmcpdirectory.com&utm_medium=referral&utm_campaign=profile), read 5 November 2026). ## Related on this site Hosts page - [Cloudflare](https://agentmcpdirectory.com/hosts/cloudflare/) - [Cloudflare AI Gateway](https://agentmcpdirectory.com/hosts/cloudflare-ai-gateway/) Type - [Hosts and runtimes](https://agentmcpdirectory.com/vendors/by-type/host/) - [Gateways and proxies](https://agentmcpdirectory.com/vendors/by-type/gateway/) - [Auth providers](https://agentmcpdirectory.com/vendors/by-type/auth-provider/) Standards - [MCP](https://agentmcpdirectory.com/standards/mcp/) Section - [All vendors](https://agentmcpdirectory.com/vendors/) Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/vendors/cloudflare/index.md) ## Sources - [Model Context Protocol (MCP) · Cloudflare Agents docs](https://developers.cloudflare.com/agents/model-context-protocol/), read 5 November 2026 - [Authorization · Cloudflare Agents docs](https://developers.cloudflare.com/agents/model-context-protocol/authorization/), read 5 November 2026 - [Pricing · Cloudflare Workers docs](https://developers.cloudflare.com/workers/platform/pricing/), read 5 November 2026 - [About us | Cloudflare](https://www.cloudflare.com/about-overview/), read 5 November 2026 - [Is Your Site Agent-Ready?](https://isitagentready.com/), read 5 November 2026 - [Ora | Make your site work for agents](https://ora.ai/?utm_source=agentmcpdirectory.com&utm_medium=referral&utm_campaign=profile), read 5 November 2026 Last reviewed 5 November 2026