Give an autonomous agent your Cloudflare account as a tool and it provisions the infrastructure itself. It can create a D1 database, spin up an R2 bucket, add a KV namespace and bulk-write pairs into it, set DNS records, write firewall rules, and stand up a queue or a tunnel, calling each operation as a tool while it works. Wire it into a hosted coding agent in NoClick and it goes from a plan for your stack to the resources actually running.
Pick the operations you want and each becomes a tool the agent can call directly while it works.
List DNS records for a zone
Create a new DNS record
Get a specific DNS record
Update an existing DNS record
Delete a DNS record
List all zones in an account
Get details for a specific zone
Get all settings for a zone
Update a specific zone setting
Purge zone cache
List all Workers in an account
Get a Worker script
Upload or update a Worker script
Delete a Worker script
List Worker routes for a zone
Create a Worker route
Delete a Worker route
List all KV namespaces in an account
Create a new KV namespace
Delete a KV namespace
List keys in a KV namespace
Read a value from KV storage
Write a value to KV storage
Delete a key from KV storage
Write multiple key-value pairs at once (up to 10,000 pairs)
List all D1 databases in an account
Get details for a D1 database
Create a new D1 database
Delete a D1 database
Execute a SQL query against a D1 database
Export a D1 database as SQL
List all R2 buckets in an account
Get details for an R2 bucket
Create a new R2 bucket
Delete an R2 bucket
List all Pages projects in an account
Get a Pages project
Delete a Pages project
List deployments for a Pages project
Get a specific Pages deployment
Delete a Pages deployment
List videos in Cloudflare Stream
Get details for a Stream video
Delete a Stream video
Get embed code for a Stream video
List all live inputs for Stream
Create a new Stream live input
Delete a Stream live input
Create a Stream upload URL or initiate a URL-based upload
Create a signed URL token for a Stream video
List Stream signing keys
Create a new Stream signing key
Delete a Stream signing key
List captions for a Stream video
Upload a caption track for a Stream video
Delete a caption track from a Stream video
List Stream watermark profiles
Create a Stream watermark profile from a URL
Get a Stream watermark profile
Delete a Stream watermark profile
List audio tracks for a Stream video
Add an audio track to a Stream video by copying from a URL
Edit an audio track on a Stream video
Delete an audio track from a Stream video
Update metadata and settings for a Stream video
List images in Cloudflare Images
Get details for an image
Delete an image
Get image usage statistics
Create a direct upload URL for images
List firewall rules for a zone
Create a firewall rule for a zone
Delete a firewall rule
List WAF packages for a zone
List Cloudflare Access applications
Get a specific Access application
Create an Access application
Delete an Access application
List policies for an Access application
List Cloudflare Tunnels
Get details for a specific tunnel
Create a new Cloudflare Tunnel
Delete a Cloudflare Tunnel
Get the token for a tunnel (used to run cloudflared)
Get Email Routing settings for a zone
List Email Routing rules for a zone
Create an Email Routing rule
Delete an Email Routing rule
List destination email addresses for Email Routing
List all Queues in an account
Get details for a Queue
Create a new Queue
Delete a Queue
Send a message to a Queue
Pull messages from a Queue
Run inference with a Workers AI model
List available Workers AI models
List all Vectorize indexes in an account
Get details for a Vectorize index
Create a new Vectorize index
Delete a Vectorize index
Upsert vectors into a Vectorize index
Query vectors from a Vectorize index
Delete vectors from a Vectorize index by ID
List load balancers for a zone
Get a specific load balancer
Create a new load balancer
Delete a load balancer
List origin pools for load balancing
Create a new origin pool for load balancing
Get SSL/TLS settings for a zone
List SSL certificates for a zone
Get analytics summary for a zone
List secrets for a Worker script
Create or update a secret for a Worker script
Delete a secret from a Worker script
Bulk upsert secrets for a Worker script
Get cron triggers (schedules) for a Worker script
Update cron triggers (schedules) for a Worker script
List all Durable Object namespaces in an account
List Durable Objects in a namespace
Update an existing Worker route
List all Workers Pipelines in an account
Get a specific Workers Pipeline
Create a new Workers Pipeline
Update an existing Workers Pipeline
Delete a Workers Pipeline
List all Secrets Stores in an account
Create a new Secrets Store
Delete a Secrets Store
List all secrets in a Secrets Store
Get a specific secret from a Secrets Store
Create a new secret in a Secrets Store
Update an existing secret in a Secrets Store
Delete a secret from a Secrets Store
List all rulesets for a zone
Get a specific ruleset for a zone
Create a new ruleset for a zone
Update an existing zone ruleset
Delete a zone ruleset
Get the entrypoint ruleset for a phase in a zone
Update the entrypoint ruleset for a phase in a zone
Create a rule inside a zone ruleset
Delete a rule from a zone ruleset
List all rulesets for the account
Get a specific ruleset for the account
List all Page Rules for a zone
Get a specific Page Rule
Create a new Page Rule for a zone
Update an existing Page Rule
Delete a Page Rule
List Rate Limits for a zone
Get a specific Rate Limit
Create a new Rate Limit rule for a zone
Update an existing Rate Limit rule
Delete a Rate Limit rule
List all custom hostnames for a zone
Get a specific custom hostname
Create a custom hostname for a zone
Update a custom hostname
Delete a custom hostname
List all waiting rooms for a zone
Get a specific waiting room
Create a waiting room for a zone
Update a waiting room
Delete a waiting room
Get status of a waiting room
List events for a waiting room
Create an event for a waiting room
List all Logpush jobs for an account
Get a specific Logpush job
Create an account-level Logpush job
Update an existing Logpush job
Delete a Logpush job
List all Logpush jobs for a zone
Create a zone-level Logpush job
Delete a zone-level Logpush job
List audit logs for an account
List all available alert types for an account
List all alert policies for an account
Get a specific alert policy
Create a new alert policy
Update an existing alert policy
Delete an alert policy
List all notification webhook destinations for an account
Create a new notification webhook destination
Update an existing notification webhook destination
Delete a notification webhook destination
Get notification delivery history for an account
List all Health Checks for a zone
Get a specific Health Check
Create a new Health Check
Update an existing Health Check
Delete a Health Check
List all Spectrum applications for a zone
Get a specific Spectrum application
Create a new Spectrum application
Update an existing Spectrum application
Delete a Spectrum application
List all Snippets for a zone
Get a specific Snippet
Create or update a Snippet
Delete a Snippet
List all Snippet rules for a zone
Get the Zaraz configuration for a zone
Update the Zaraz configuration for a zone
Publish the Zaraz configuration for a zone
Get Bot Management settings for a zone
Update Bot Management settings for a zone
List pages tracked in the Speed Observatory for a zone
List speed tests for a specific page
Create a new speed test for a page
Delete all speed tests for a page
Get the scheduled speed test for a page
List all Web Analytics sites in an account
Create a new Web Analytics site
Get a specific Web Analytics site
Delete a Web Analytics site
List all members of an account
Get a specific account member
Add a member to an account
Update an account member's roles
Remove a member from an account
List all roles available for an account
List all tunnel routes in an account
Create a new tunnel route
Update an existing tunnel route
Delete a tunnel route
List all virtual networks in an account
Create a new virtual network
Get a specific virtual network
Update an existing virtual network
Delete a virtual network
Update an existing load balancer
Get a specific load balancer origin pool
Update an existing load balancer origin pool
Delete a load balancer origin pool
List all load balancer monitors in an account
Get a specific load balancer monitor
Create a new load balancer monitor
Delete a load balancer monitor
Get health status of a load balancer origin pool
Create a policy for an Access application
Update a policy for an Access application
Delete a policy from an Access application
Get a specific Access policy
List all Access groups in an account
Get a specific Access group
Create an Access group
Update an Access group
Delete an Access group
List all Access service tokens in an account
Create an Access service token
Refresh an Access service token
Delete an Access service token
Update a Cloudflare Tunnel
Get the configuration for a Cloudflare Tunnel
Set the ingress configuration for a Cloudflare Tunnel
List active connections for a Cloudflare Tunnel
Enable Email Routing for a zone
Disable Email Routing for a zone
Create a destination email address for Email Routing (triggers verification email)
Delete a destination email address from Email Routing
Update a Queue's name
Acknowledge or retry pulled Queue messages
List consumers for a Queue
Create a Worker consumer for a Queue
Delete a consumer from a Queue
Update the SSL/TLS mode for a zone
Upload a custom SSL certificate for a zone
Delete a custom SSL certificate from a zone
Create a new Cloudflare Pages project
Retry a failed or cancelled Cloudflare Pages deployment
Export DNS records for a zone as a BIND zone file
Get DNSSEC settings for a zone
Update DNSSEC status for a zone
List objects in an R2 bucket
Get an object from an R2 bucket
Upload an object to an R2 bucket
Delete an object from an R2 bucket
Generate a presigned URL for an R2 object
Create a new zone (domain) in an account
Delete a zone from an account
Edit zone properties
Trigger a zone activation check
List all rules lists in an account
Create a new rules list
Get details of a specific rules list
Update a rules list description
Delete a rules list
List items in a rules list
Add items to a rules list
Replace all items in a rules list
Delete specific items from a rules list
Get the status of a bulk rules list operation
List versions of a Worker script
Upload a new version of a Worker script
Get a specific version of a Worker script
List deployments for a Worker script
Create a new deployment for a Worker script
Get a specific deployment for a Worker script
List active tails for a Worker script
Start a tail session for a Worker script to stream live logs
Delete an active tail session for a Worker script
List AI Gateways in an account
Create a new AI Gateway
Get details for an AI Gateway
Update an existing AI Gateway
Delete an AI Gateway
List logs for an AI Gateway
Get a specific AI Gateway log entry
Delete logs for an AI Gateway
Get the request body for an AI Gateway log entry
Get the response body for an AI Gateway log entry
List datasets for an AI Gateway
Create a dataset from AI Gateway logs
Delete an AI Gateway dataset
List all image variants for an account
Create a new image variant
Get details for a specific image variant
Update an existing image variant
Delete an image variant
List all image signing keys for an account
Create a named image signing key
Delete a named image signing key
Update metadata or signed URL requirement for an image
List all tables in a D1 database
Import SQL data into a D1 database
Get the current import status of a D1 database
Execute a SQL query in raw array-format mode against a D1 database
Get Zero Trust Gateway configuration
Update Zero Trust Gateway configuration
List Zero Trust Gateway firewall rules
Create a Zero Trust Gateway firewall rule
Get a Zero Trust Gateway firewall rule
Update a Zero Trust Gateway firewall rule
Delete a Zero Trust Gateway firewall rule
List Zero Trust Gateway lists
Create a Zero Trust Gateway list
Get a Zero Trust Gateway list
Update (append/remove items from) a Zero Trust Gateway list
Delete a Zero Trust Gateway list
List items in a Zero Trust Gateway list
List Zero Trust Gateway locations
Create a Zero Trust Gateway location
Get a Zero Trust Gateway location
Delete a Zero Trust Gateway location
Get Page Shield settings for a zone
Update Page Shield settings for a zone
List Page Shield scripts detected for a zone
Get details for a specific Page Shield script
List Page Shield connections detected for a zone
Get details for a specific Page Shield connection
List Page Shield CSP policies for a zone
Create a Page Shield CSP policy for a zone
Delete a Page Shield CSP policy
Get Cache Reserve setting for a zone
Update Cache Reserve setting for a zone
Get Argo Smart Routing setting for a zone
Update Argo Smart Routing setting for a zone
Get Argo Tiered Caching setting for a zone
Update Argo Tiered Caching setting for a zone
Purge all cached content for a zone
Get all zone settings in a single call
Get CORS policy for an R2 bucket
Set CORS policy for an R2 bucket
Delete CORS policy for an R2 bucket
Get lifecycle rules for an R2 bucket
Set lifecycle rules for an R2 bucket
Delete all lifecycle rules for an R2 bucket
List custom domains for an R2 bucket
Add a custom domain to an R2 bucket
Update a custom domain on an R2 bucket
Remove a custom domain from an R2 bucket
Get managed r2.dev domain public access status for an R2 bucket
Enable or disable public access via the r2.dev subdomain
Get R2 bucket metadata including storage class and location hint
Update R2 bucket settings such as storage class
List all Access identity providers in an account
Get a specific Access identity provider
Create an Access identity provider
Update an Access identity provider
Delete an Access identity provider
List Access users for an account
Get a specific Access user
List active sessions for an Access user
Revoke all active Access sessions for a user by email
Get the Access organization settings
Update the Access organization settings
Rotate the Access JWT signing key
Get secondary DNS configuration for a zone
Update secondary DNS configuration for a zone
List secondary DNS peers for an account
Create a secondary DNS peer
Get a secondary DNS peer
Update a secondary DNS peer
Delete a secondary DNS peer
Query Workers Analytics Engine with SQL
Get regional tiered cache setting for a zone
Enable or disable regional tiered cache for a zone
Get Vectorize index stats and info
List metadata indexes for a Vectorize index
Create a metadata index for a Vectorize index
Delete a metadata index from a Vectorize index
Retrieve vectors by their IDs from a Vectorize index
Get Cloudflare Fonts settings for a zone
Update Cloudflare Fonts settings for a zone
Get Network Error Logging settings for a zone
Update Network Error Logging settings for a zone
Get API Shield configuration for a zone
Update API Shield configuration for a zone
List API Shield endpoints (operations) for a zone
Create an API Shield endpoint (operation) for a zone
Get a specific WAF package for a zone
List rule groups in a WAF package
List rules in a WAF package
Update the mode of a WAF rule
Get Early Hints setting for a zone
Update Early Hints setting for a zone
Get HTTP/3 setting for a zone
Update HTTP/3 setting for a zone
Get Brotli compression setting for a zone
Update Brotli compression setting for a zone
Grant another account access to an indicator feed
Create a new custom threat intelligence indicator feed
Submit a request to change the category of a domain or IP address
Dismiss or restore a Security Center issue in the attack surface report
Get attack surface issue counts aggregated by severity level
Get attack surface issue counts aggregated by issue type
Get overview and subnet list for an Autonomous System Number
Get all subnets associated with an ASN
Perform a passive DNS lookup by IP address
Get security details, threat categories, and statistics for a domain
Get intelligence details for multiple domains in a single request
Get historical categorizations for a domain over time
Get metadata and upload status for a specific indicator feed
Retrieve the raw data entries from an indicator feed
Get geolocation, ASN, infrastructure type, and threat categories for an IP
Get WHOIS registration data and nameserver information for a domain
List all available Security Center issue categories for attack surface reporting
List all active security issues identified in the attack surface report
List all access permissions for indicator feeds
List all custom threat intelligence indicator feeds accessible to the account
List all sinkholes configured for malicious traffic redirection
Revoke an account's access to an indicator feed
Update metadata for an existing indicator feed
Create a new Magic Transit app for traffic routing decisions
Create a new Magic Transit GRE tunnel
Delete a Magic Transit app
Delete a Magic Transit GRE tunnel
Get details for a specific Cloudflare network interconnect
Get details for a specific Magic Transit GRE tunnel
List all Magic Transit apps for an account
List all Cloudflare network interconnects for Magic Transit
List all GRE tunnels for a Magic Transit account
Update an existing Magic Transit app
Update a single Cloudflare network interconnect for Magic Transit
Update an existing Magic Transit GRE tunnel
Create a new Cloudflare Calls SFU app and obtain its bearer secret
Create a new Cloudflare Calls TURN key and obtain its bearer token
Delete a Cloudflare Calls SFU app
Delete a Cloudflare Calls TURN key
Retrieve details for a specific Cloudflare Calls SFU app
Retrieve details for a specific Cloudflare Calls TURN key
List all Cloudflare Calls SFU apps for an account
List all Cloudflare Calls TURN keys for an account
Update the details of an existing Cloudflare Calls SFU app
Update the details of an existing Cloudflare Calls TURN key
Get the column schema of an Analytics Engine dataset by querying a single row
Count events in an Analytics Engine dataset, optionally filtered by time range and conditions
List all Analytics Engine datasets (tables) in the account using SHOW TABLES
List all supported timezones available in the Analytics Engine SQL environment
Run an aggregation query on an Analytics Engine dataset with grouping, filtering, and time range support
Query raw (non-aggregated) events from an Analytics Engine dataset with optional filtering
Query Analytics Engine data grouped by time intervals for time-series analysis
Find the top N values of a blob (string) column by event count in an Analytics Engine dataset
Compute a sampling-corrected weighted average of a double column in an Analytics Engine dataset
Create a new Log Explorer dataset
Delete the Cloudflare Managed Buckets (CMB) log control configuration for an account
Get the Cloudflare Managed Buckets (CMB) log control configuration for an account
Fetch a single Log Explorer dataset including its field configuration
Get the log retention flag for the Logpull API for a zone
List all available log fields for the Logpull API with their descriptions
Retrieve edge HTTP request logs for a zone within a time window via Logpull API
Look up log records for a specific Ray ID
List all dataset types available to create for this account or zone, including schemas
List all configured Log Explorer datasets for an account or zone
Execute a SQL query against Log Explorer account or zone datasets
Update the Cloudflare Managed Buckets (CMB) log control configuration
Update a Log Explorer dataset's enabled state and field configuration
Enable or disable log retention for the Logpull API for a zone
Add an IP address to an address map
Add a zone as a member of an address map
Create a new address map to assign IPv4/IPv6 addresses to zones or accounts
Add a new BYOIP prefix to the account
Delegate a sub-prefix to another Cloudflare account
Create a binding to route prefix traffic to a Cloudflare service (e.g. Magic Transit)
Create a new regional hostname to restrict DNS resolution to a geographic region
Delete an address map
Delete an unapproved BYOIP prefix from the account
Remove a delegation from a BYOIP prefix
Remove a service binding from a BYOIP prefix
Remove the regional routing configuration for a hostname
Download a previously uploaded Letter of Authorization document
Retrieve details of a specific address map
Get the current BGP advertisement status for an IP prefix
Retrieve details of a specific BYOIP prefix
Get a specific service binding for a BYOIP prefix
Fetch the regional routing configuration for a specific hostname
List all address maps for the account
List available Cloudflare network services that prefixes can be bound to
List BGP sub-prefixes for a BYOIP prefix
List all BYOIP prefixes for the account
List all delegations for a BYOIP prefix
List all service bindings for a BYOIP prefix
List all available geographic regions for regional hostname assignment
List all regional hostnames configured for a zone
Remove an IP address from an address map
Remove a zone from an address map
Modify properties of an existing address map
Update settings for a specific BGP prefix (on-demand advertisement, ASN prepend)
Advertise or withdraw a BYOIP prefix via BGP
Update the description of a BYOIP prefix
Update the region assignment for a regional hostname
Upload a Letter of Authorization (LOA) PDF document for BYOIP prefix ownership verification
Retrieve aggregated summary of AI bot HTTP requests grouped by a specified dimension
Retrieve the distribution of AI bot traffic grouped by crawl purpose
Retrieve the distribution of AI bot traffic grouped by industry sector
Retrieve the distribution of AI bot traffic grouped by user agent
Retrieve AI bot HTTP request volume over time
Retrieve AI bot request distribution grouped by user agent over time
Retrieve AI bot HTTP request distribution grouped by the specified dimension over time
Retrieve aggregated Workers AI inference counts grouped by model
Retrieve aggregated Workers AI inference counts grouped by task type
Retrieve Workers AI inference distribution over time grouped by model
Retrieve Workers AI inference distribution over time grouped by task type
Retrieve the full report for a completed URL scan
Retrieve the DOM content as rendered by Chrome during a URL scan
Retrieve the HAR file for a completed URL scan
Retrieve the screenshot captured during a URL scan
Bulk submit up to 100 URLs for scanning
Search completed URL scans using ElasticSearch Query syntax
Submit a URL for scanning
Retrieve bot analytics and feedback reports containing request score distributions for a zone
Retrieve current bot score action thresholds for a zone
Update bot score action thresholds for Super Bot Fight Mode
Configure JavaScript-based bot detection settings
List all previously submitted bot feedback reports for a zone
Submit a feedback report about misclassified bot traffic using a wirefilter expression
Start a new fine-tuning job to customize a Workers AI model
Get the JSON schema definition for a Workers AI model's inputs and outputs
Search for AI model authors and organizations on Workers AI
List all fine-tuning jobs for the account
Search and list AI task types supported by Workers AI
Find publicly available fine-tuned Workers AI models
Classify an image into categories using a Workers AI vision model
Detect and locate objects within an image using a Workers AI model
Transcribe audio to text using Whisper or another Workers AI ASR model
Summarize long text into a concise overview using a Workers AI model
Generate vector embeddings for text using a Workers AI embedding model
Generate text using a Workers AI language model with structured message input
Generate an image from a text prompt using a Cloudflare diffusion model
Translate text between languages using a Workers AI translation model
Convert a document or file to markdown format using Workers AI
Remove all event notification rules for a specific queue from an R2 bucket
List all event notification rules configured for an R2 bucket across all queues
Get event notification rules for a specific queue within an R2 bucket
Create or update event notification rules for a queue on an R2 bucket
OpenCode is an open, model-agnostic command-line coding agent. In NoClick it runs hosted and gains your apps as tools, so it can act on real systems rather than just edit files. Wire an integration into the agent and OpenCode can use that app’s operations directly while it works. It is a flexible choice when you want an open agent with broad model support and real tool access.
NoClick runs OpenCode for you with Cloudflare wired in as tools. Connect your account and run.