Connect Codex to Cloudflare

List DNS records for a zone

Create a new DNS record

Get a specific DNS record

Update an existing DNS record

Delete a DNS record

List all zones in an account

Get details for a specific zone

Get all settings for a zone

Update a specific zone setting

Purge zone cache

List all Workers in an account

Get a Worker script

Upload or update a Worker script

Delete a Worker script

List Worker routes for a zone

Create a Worker route

Delete a Worker route

List all KV namespaces in an account

Create a new KV namespace

Delete a KV namespace

List keys in a KV namespace

Read a value from KV storage

Write a value to KV storage

Delete a key from KV storage

Write multiple key-value pairs at once (up to 10,000 pairs)

List all D1 databases in an account

Get details for a D1 database

Create a new D1 database

Delete a D1 database

Execute a SQL query against a D1 database

Export a D1 database as SQL

List all R2 buckets in an account

Get details for an R2 bucket

Create a new R2 bucket

Delete an R2 bucket

List all Pages projects in an account

Get a Pages project

Delete a Pages project

List deployments for a Pages project

Get a specific Pages deployment

Delete a Pages deployment

List videos in Cloudflare Stream

Get details for a Stream video

Delete a Stream video

Get embed code for a Stream video

List all live inputs for Stream

Create a new Stream live input

Delete a Stream live input

Create a Stream upload URL or initiate a URL-based upload

Create a signed URL token for a Stream video

List Stream signing keys

Create a new Stream signing key

Delete a Stream signing key

List captions for a Stream video

Upload a caption track for a Stream video

Delete a caption track from a Stream video

List Stream watermark profiles

Create a Stream watermark profile from a URL

Get a Stream watermark profile

Delete a Stream watermark profile

List audio tracks for a Stream video

Add an audio track to a Stream video by copying from a URL

Edit an audio track on a Stream video

Delete an audio track from a Stream video

Update metadata and settings for a Stream video

List images in Cloudflare Images

Get details for an image

Delete an image

Get image usage statistics

Create a direct upload URL for images

List firewall rules for a zone

Create a firewall rule for a zone

Delete a firewall rule

List WAF packages for a zone

List Cloudflare Access applications

Get a specific Access application

Create an Access application

Delete an Access application

List policies for an Access application

List Cloudflare Tunnels

Get details for a specific tunnel

Create a new Cloudflare Tunnel

Delete a Cloudflare Tunnel

Get the token for a tunnel (used to run cloudflared)

Get Email Routing settings for a zone

List Email Routing rules for a zone

Create an Email Routing rule

Delete an Email Routing rule

List destination email addresses for Email Routing

List all Queues in an account

Get details for a Queue

Create a new Queue

Delete a Queue

Send a message to a Queue

Pull messages from a Queue

Run inference with a Workers AI model

List available Workers AI models

List all Vectorize indexes in an account

Get details for a Vectorize index

Create a new Vectorize index

Delete a Vectorize index

Upsert vectors into a Vectorize index

Query vectors from a Vectorize index

Delete vectors from a Vectorize index by ID

List load balancers for a zone

Get a specific load balancer

Create a new load balancer

Delete a load balancer

List origin pools for load balancing

Create a new origin pool for load balancing

Get SSL/TLS settings for a zone

List SSL certificates for a zone

Get analytics summary for a zone

List secrets for a Worker script

Create or update a secret for a Worker script

Delete a secret from a Worker script

Bulk upsert secrets for a Worker script

Get cron triggers (schedules) for a Worker script

Update cron triggers (schedules) for a Worker script

List all Durable Object namespaces in an account

List Durable Objects in a namespace

Update an existing Worker route

List all Workers Pipelines in an account

Get a specific Workers Pipeline

Create a new Workers Pipeline

Update an existing Workers Pipeline

Delete a Workers Pipeline

List all Secrets Stores in an account

Create a new Secrets Store

Delete a Secrets Store

List all secrets in a Secrets Store

Get a specific secret from a Secrets Store

Create a new secret in a Secrets Store

Update an existing secret in a Secrets Store

Delete a secret from a Secrets Store

List all rulesets for a zone

Get a specific ruleset for a zone

Create a new ruleset for a zone

Update an existing zone ruleset

Delete a zone ruleset

Get the entrypoint ruleset for a phase in a zone

Update the entrypoint ruleset for a phase in a zone

Create a rule inside a zone ruleset

Delete a rule from a zone ruleset

List all rulesets for the account

Get a specific ruleset for the account

List all Page Rules for a zone

Get a specific Page Rule

Create a new Page Rule for a zone

Update an existing Page Rule

Delete a Page Rule

List Rate Limits for a zone

Get a specific Rate Limit

Create a new Rate Limit rule for a zone

Update an existing Rate Limit rule

Delete a Rate Limit rule

List all custom hostnames for a zone

Get a specific custom hostname

Create a custom hostname for a zone

Update a custom hostname

Delete a custom hostname

List all waiting rooms for a zone

Get a specific waiting room

Create a waiting room for a zone

Update a waiting room

Delete a waiting room

Get status of a waiting room

List events for a waiting room

Create an event for a waiting room

List all Logpush jobs for an account

Get a specific Logpush job

Create an account-level Logpush job

Update an existing Logpush job

Delete a Logpush job

List all Logpush jobs for a zone

Create a zone-level Logpush job

Delete a zone-level Logpush job

List audit logs for an account

List all available alert types for an account

List all alert policies for an account

Get a specific alert policy

Create a new alert policy

Update an existing alert policy

Delete an alert policy

List all notification webhook destinations for an account

Create a new notification webhook destination

Update an existing notification webhook destination

Delete a notification webhook destination

Get notification delivery history for an account

List all Health Checks for a zone

Get a specific Health Check

Create a new Health Check

Update an existing Health Check

Delete a Health Check

List all Spectrum applications for a zone

Get a specific Spectrum application

Create a new Spectrum application

Update an existing Spectrum application

Delete a Spectrum application

List all Snippets for a zone

Get a specific Snippet

Create or update a Snippet

Delete a Snippet

List all Snippet rules for a zone

Get the Zaraz configuration for a zone

Update the Zaraz configuration for a zone

Publish the Zaraz configuration for a zone

Get Bot Management settings for a zone

Update Bot Management settings for a zone

List pages tracked in the Speed Observatory for a zone

List speed tests for a specific page

Create a new speed test for a page

Delete all speed tests for a page

Get the scheduled speed test for a page

List all Web Analytics sites in an account

Create a new Web Analytics site

Get a specific Web Analytics site

Delete a Web Analytics site

List all members of an account

Get a specific account member

Add a member to an account

Update an account member's roles

Remove a member from an account

List all roles available for an account

List all tunnel routes in an account

Create a new tunnel route

Update an existing tunnel route

Delete a tunnel route

List all virtual networks in an account

Create a new virtual network

Get a specific virtual network

Update an existing virtual network

Delete a virtual network

Update an existing load balancer

Get a specific load balancer origin pool

Update an existing load balancer origin pool

Delete a load balancer origin pool

List all load balancer monitors in an account

Get a specific load balancer monitor

Create a new load balancer monitor

Delete a load balancer monitor

Get health status of a load balancer origin pool

Create a policy for an Access application

Update a policy for an Access application

Delete a policy from an Access application

Get a specific Access policy

List all Access groups in an account

Get a specific Access group

Create an Access group

Update an Access group

Delete an Access group

List all Access service tokens in an account

Create an Access service token

Refresh an Access service token

Delete an Access service token

Update a Cloudflare Tunnel

Get the configuration for a Cloudflare Tunnel

Set the ingress configuration for a Cloudflare Tunnel

List active connections for a Cloudflare Tunnel

Enable Email Routing for a zone

Disable Email Routing for a zone

Create a destination email address for Email Routing (triggers verification email)

Delete a destination email address from Email Routing

Update a Queue's name

Acknowledge or retry pulled Queue messages

List consumers for a Queue

Create a Worker consumer for a Queue

Delete a consumer from a Queue

Update the SSL/TLS mode for a zone

Upload a custom SSL certificate for a zone

Delete a custom SSL certificate from a zone

Create a new Cloudflare Pages project

Retry a failed or cancelled Cloudflare Pages deployment

Export DNS records for a zone as a BIND zone file

Get DNSSEC settings for a zone

Update DNSSEC status for a zone

List objects in an R2 bucket

Get an object from an R2 bucket

Upload an object to an R2 bucket

Delete an object from an R2 bucket

Generate a presigned URL for an R2 object

Create a new zone (domain) in an account

Delete a zone from an account

Edit zone properties

Trigger a zone activation check

List all rules lists in an account

Create a new rules list

Get details of a specific rules list

Update a rules list description

Delete a rules list

List items in a rules list

Add items to a rules list

Replace all items in a rules list

Delete specific items from a rules list

Get the status of a bulk rules list operation

List versions of a Worker script

Upload a new version of a Worker script

Get a specific version of a Worker script

List deployments for a Worker script

Create a new deployment for a Worker script

Get a specific deployment for a Worker script

List active tails for a Worker script

Start a tail session for a Worker script to stream live logs

Delete an active tail session for a Worker script

List AI Gateways in an account

Create a new AI Gateway

Get details for an AI Gateway

Update an existing AI Gateway

Delete an AI Gateway

List logs for an AI Gateway

Get a specific AI Gateway log entry

Delete logs for an AI Gateway

Get the request body for an AI Gateway log entry

Get the response body for an AI Gateway log entry

List datasets for an AI Gateway

Create a dataset from AI Gateway logs

Delete an AI Gateway dataset

List all image variants for an account

Create a new image variant

Get details for a specific image variant

Update an existing image variant

Delete an image variant

List all image signing keys for an account

Create a named image signing key

Delete a named image signing key

Update metadata or signed URL requirement for an image

List all tables in a D1 database

Import SQL data into a D1 database

Get the current import status of a D1 database

Execute a SQL query in raw array-format mode against a D1 database

Get Zero Trust Gateway configuration

Update Zero Trust Gateway configuration

List Zero Trust Gateway firewall rules

Create a Zero Trust Gateway firewall rule

Get a Zero Trust Gateway firewall rule

Update a Zero Trust Gateway firewall rule

Delete a Zero Trust Gateway firewall rule

List Zero Trust Gateway lists

Create a Zero Trust Gateway list

Get a Zero Trust Gateway list

Update (append/remove items from) a Zero Trust Gateway list

Delete a Zero Trust Gateway list

List items in a Zero Trust Gateway list

List Zero Trust Gateway locations

Create a Zero Trust Gateway location

Get a Zero Trust Gateway location

Delete a Zero Trust Gateway location

Get Page Shield settings for a zone

Update Page Shield settings for a zone

List Page Shield scripts detected for a zone

Get details for a specific Page Shield script

List Page Shield connections detected for a zone

Get details for a specific Page Shield connection

List Page Shield CSP policies for a zone

Create a Page Shield CSP policy for a zone

Delete a Page Shield CSP policy

Get Cache Reserve setting for a zone

Update Cache Reserve setting for a zone

Get Argo Smart Routing setting for a zone

Update Argo Smart Routing setting for a zone

Get Argo Tiered Caching setting for a zone

Update Argo Tiered Caching setting for a zone

Purge all cached content for a zone

Get all zone settings in a single call

Get CORS policy for an R2 bucket

Set CORS policy for an R2 bucket

Delete CORS policy for an R2 bucket

Get lifecycle rules for an R2 bucket

Set lifecycle rules for an R2 bucket

Delete all lifecycle rules for an R2 bucket

List custom domains for an R2 bucket

Add a custom domain to an R2 bucket

Update a custom domain on an R2 bucket

Remove a custom domain from an R2 bucket

Get managed r2.dev domain public access status for an R2 bucket

Enable or disable public access via the r2.dev subdomain

Get R2 bucket metadata including storage class and location hint

Update R2 bucket settings such as storage class

List all Access identity providers in an account

Get a specific Access identity provider

Create an Access identity provider

Update an Access identity provider

Delete an Access identity provider

List Access users for an account

Get a specific Access user

List active sessions for an Access user

Revoke all active Access sessions for a user by email

Get the Access organization settings

Update the Access organization settings

Rotate the Access JWT signing key

Get secondary DNS configuration for a zone

Update secondary DNS configuration for a zone

List secondary DNS peers for an account

Create a secondary DNS peer

Get a secondary DNS peer

Update a secondary DNS peer

Delete a secondary DNS peer

Query Workers Analytics Engine with SQL

Get regional tiered cache setting for a zone

Enable or disable regional tiered cache for a zone

Get Vectorize index stats and info

List metadata indexes for a Vectorize index

Create a metadata index for a Vectorize index

Delete a metadata index from a Vectorize index

Retrieve vectors by their IDs from a Vectorize index

Get Cloudflare Fonts settings for a zone

Update Cloudflare Fonts settings for a zone

Get Network Error Logging settings for a zone

Update Network Error Logging settings for a zone

Get API Shield configuration for a zone

Update API Shield configuration for a zone

List API Shield endpoints (operations) for a zone

Create an API Shield endpoint (operation) for a zone

Get a specific WAF package for a zone

List rule groups in a WAF package

List rules in a WAF package

Update the mode of a WAF rule

Get Early Hints setting for a zone

Update Early Hints setting for a zone

Get HTTP/3 setting for a zone

Update HTTP/3 setting for a zone

Get Brotli compression setting for a zone

Update Brotli compression setting for a zone

Grant another account access to an indicator feed

Create a new custom threat intelligence indicator feed

Submit a request to change the category of a domain or IP address

Dismiss or restore a Security Center issue in the attack surface report

Get attack surface issue counts aggregated by severity level

Get attack surface issue counts aggregated by issue type

Get overview and subnet list for an Autonomous System Number

Get all subnets associated with an ASN

Perform a passive DNS lookup by IP address

Get security details, threat categories, and statistics for a domain

Get intelligence details for multiple domains in a single request

Get historical categorizations for a domain over time

Get metadata and upload status for a specific indicator feed

Retrieve the raw data entries from an indicator feed

Get geolocation, ASN, infrastructure type, and threat categories for an IP

Get WHOIS registration data and nameserver information for a domain

List all available Security Center issue categories for attack surface reporting

List all active security issues identified in the attack surface report

List all access permissions for indicator feeds

List all custom threat intelligence indicator feeds accessible to the account

List all sinkholes configured for malicious traffic redirection

Revoke an account's access to an indicator feed

Update metadata for an existing indicator feed

Create a new Magic Transit app for traffic routing decisions

Create a new Magic Transit GRE tunnel

Delete a Magic Transit app

Delete a Magic Transit GRE tunnel

Get details for a specific Cloudflare network interconnect

Get details for a specific Magic Transit GRE tunnel

List all Magic Transit apps for an account

List all Cloudflare network interconnects for Magic Transit

List all GRE tunnels for a Magic Transit account

Update an existing Magic Transit app

Update a single Cloudflare network interconnect for Magic Transit

Update an existing Magic Transit GRE tunnel

Create a new Cloudflare Calls SFU app and obtain its bearer secret

Create a new Cloudflare Calls TURN key and obtain its bearer token

Delete a Cloudflare Calls SFU app

Delete a Cloudflare Calls TURN key

Retrieve details for a specific Cloudflare Calls SFU app

Retrieve details for a specific Cloudflare Calls TURN key

List all Cloudflare Calls SFU apps for an account

List all Cloudflare Calls TURN keys for an account

Update the details of an existing Cloudflare Calls SFU app

Update the details of an existing Cloudflare Calls TURN key

Get the column schema of an Analytics Engine dataset by querying a single row

Count events in an Analytics Engine dataset, optionally filtered by time range and conditions

List all Analytics Engine datasets (tables) in the account using SHOW TABLES

List all supported timezones available in the Analytics Engine SQL environment

Run an aggregation query on an Analytics Engine dataset with grouping, filtering, and time range support

Query raw (non-aggregated) events from an Analytics Engine dataset with optional filtering

Query Analytics Engine data grouped by time intervals for time-series analysis

Find the top N values of a blob (string) column by event count in an Analytics Engine dataset

Compute a sampling-corrected weighted average of a double column in an Analytics Engine dataset

Create a new Log Explorer dataset

Delete the Cloudflare Managed Buckets (CMB) log control configuration for an account

Get the Cloudflare Managed Buckets (CMB) log control configuration for an account

Fetch a single Log Explorer dataset including its field configuration

Get the log retention flag for the Logpull API for a zone

List all available log fields for the Logpull API with their descriptions

Retrieve edge HTTP request logs for a zone within a time window via Logpull API

Look up log records for a specific Ray ID

List all dataset types available to create for this account or zone, including schemas

List all configured Log Explorer datasets for an account or zone

Execute a SQL query against Log Explorer account or zone datasets

Update the Cloudflare Managed Buckets (CMB) log control configuration

Update a Log Explorer dataset's enabled state and field configuration

Enable or disable log retention for the Logpull API for a zone

Add an IP address to an address map

Add a zone as a member of an address map

Create a new address map to assign IPv4/IPv6 addresses to zones or accounts

Add a new BYOIP prefix to the account

Delegate a sub-prefix to another Cloudflare account

Create a binding to route prefix traffic to a Cloudflare service (e.g. Magic Transit)

Create a new regional hostname to restrict DNS resolution to a geographic region

Delete an address map

Delete an unapproved BYOIP prefix from the account

Remove a delegation from a BYOIP prefix

Remove a service binding from a BYOIP prefix

Remove the regional routing configuration for a hostname

Download a previously uploaded Letter of Authorization document

Retrieve details of a specific address map

Get the current BGP advertisement status for an IP prefix

Retrieve details of a specific BYOIP prefix

Get a specific service binding for a BYOIP prefix

Fetch the regional routing configuration for a specific hostname

List all address maps for the account

List available Cloudflare network services that prefixes can be bound to

List BGP sub-prefixes for a BYOIP prefix

List all BYOIP prefixes for the account

List all delegations for a BYOIP prefix

List all service bindings for a BYOIP prefix

List all available geographic regions for regional hostname assignment

List all regional hostnames configured for a zone

Remove an IP address from an address map

Remove a zone from an address map

Modify properties of an existing address map

Update settings for a specific BGP prefix (on-demand advertisement, ASN prepend)

Advertise or withdraw a BYOIP prefix via BGP

Update the description of a BYOIP prefix

Update the region assignment for a regional hostname

Upload a Letter of Authorization (LOA) PDF document for BYOIP prefix ownership verification

Retrieve aggregated summary of AI bot HTTP requests grouped by a specified dimension

Retrieve the distribution of AI bot traffic grouped by crawl purpose

Retrieve the distribution of AI bot traffic grouped by industry sector

Retrieve the distribution of AI bot traffic grouped by user agent

Retrieve AI bot HTTP request volume over time

Retrieve AI bot request distribution grouped by user agent over time

Retrieve AI bot HTTP request distribution grouped by the specified dimension over time

Retrieve aggregated Workers AI inference counts grouped by model

Retrieve aggregated Workers AI inference counts grouped by task type

Retrieve Workers AI inference distribution over time grouped by model

Retrieve Workers AI inference distribution over time grouped by task type

Retrieve the full report for a completed URL scan

Retrieve the DOM content as rendered by Chrome during a URL scan

Retrieve the HAR file for a completed URL scan

Retrieve the screenshot captured during a URL scan

Bulk submit up to 100 URLs for scanning

Search completed URL scans using ElasticSearch Query syntax

Submit a URL for scanning

Retrieve bot analytics and feedback reports containing request score distributions for a zone

Retrieve current bot score action thresholds for a zone

Update bot score action thresholds for Super Bot Fight Mode

Configure JavaScript-based bot detection settings

List all previously submitted bot feedback reports for a zone

Submit a feedback report about misclassified bot traffic using a wirefilter expression

Start a new fine-tuning job to customize a Workers AI model

Get the JSON schema definition for a Workers AI model's inputs and outputs

Search for AI model authors and organizations on Workers AI

List all fine-tuning jobs for the account

Search and list AI task types supported by Workers AI

Find publicly available fine-tuned Workers AI models

Classify an image into categories using a Workers AI vision model

Detect and locate objects within an image using a Workers AI model

Transcribe audio to text using Whisper or another Workers AI ASR model

Summarize long text into a concise overview using a Workers AI model

Generate vector embeddings for text using a Workers AI embedding model

Generate text using a Workers AI language model with structured message input

Generate an image from a text prompt using a Cloudflare diffusion model

Translate text between languages using a Workers AI translation model

Convert a document or file to markdown format using Workers AI

Remove all event notification rules for a specific queue from an R2 bucket

List all event notification rules configured for an R2 bucket across all queues

Get event notification rules for a specific queue within an R2 bucket

Create or update event notification rules for a queue on an R2 bucket