[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_130":131},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":47,"_49":50,"_51":52,"_53":54,"_55":-5,"_56":47,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":47,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":-5,"_80":-5,"_81":47,"_82":-5,"_83":84,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96},"apiUrl","https://odel.app/api","creator","pain2hustle","moduleId","cloudflare-ops-mcp","@pain2hustle/cloudflare-ops-mcp","displayName","AMH Cloudflare Ops MCP by WT","tagline","The bridge from K2 agents through Wrangler to your master AI - safe, approval-gated Cloudflare ops.","iconKey","https://avatars.githubusercontent.com/u/276551746?v=4","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://cfops.nothingunseen.com/mcp\",\"transport\":\"streamable-http\",\"authType\":\"bearer\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1787027944000,"updatedAt","sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.pain2hustle%2Fcloudflare-ops-mcp","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",5,"upstreamUpdatedAt",1787027627000,"detectedTransport","streamable-http","detectedAuthType","bearer","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/pain2hustle/cloudflare-ops-mcp","githubRepoFullName","pain2hustle/cloudflare-ops-mcp","releaseId","ext-pain2hustle-cloudflare-ops-mcp","version","0.4.0","descriptionMarkdown","

\n $\"WT$ \n

\n\n

-/\\-\\ M H // WT

\n\n

_{WT WALRUS TOOTH}

\n\n# AMH Cloudflare Ops MCP by WT\n\n**An approval-gated Cloudflare operations suite with an optional private Agent Harness: bounded delegation, deterministic verification, OAuth-isolated MCP tools, and verified deploy checks without handing agents raw account credentials.**\n\n- **Private Agent Harness:** Jack-friendly reusable agent profiles, bounded research and independent verification, automatic schedules, compact continuity briefings, and a live operator console for jobs, handoffs, limits, and redacted logs.\n- **SafeTry controls:** read-only defaults, explicit approvals, narrow adapters instead of a generic shell, tenant isolation, retention limits, and a tamper-evident audit chain.\n- **Verified deploy gate:** checks the public target for an explicit 2xx status, rejects redirects, and optionally requires an expected release marker before reporting success.\n- **Deterministic site health:** zero-AI HTTP checks remain useful for small valid pages and can require an expected text marker to catch a 200 response serving the wrong site.\n- **Self-catching email loopback:** exercises the configured sending/routing path and records delivery evidence; it does not claim to prove placement in a provider's inbox tab.\n- **Cloudflare-native connections:** optional OAuth connectors for the official Cloudflare API, Workers Builds, Bindings, Observability, and Docs MCP services, plus Wrangler-based Worker deployment and secrets.\n- **Guarded operations:** Turnstile, DNS, SPF/DMARC/BIMI, Email Routing, Pages cutovers, cache purge, scoped tokens, and account diagnostics stay dry-run or approval-gated where they write.\n\nCloudflare Ops MCP scans Cloudflare configuration, computes a **diff** of desired vs current **DNS / Email Routing / BIMI / DMARC / SPF / Pages / cache / Turnstile** setup, and **applies fixes only after explicit approval**. It is built for people who want an AI agent to help with Cloudflare safely: scan first, show the plan, then write only when the owner approves.\n\nVersion 0.4.2 works five ways:\n\n- **CLI**: run `cfops` locally with a scoped Cloudflare token.\n- **Library**: import the zero-dependency engine into your own app.\n- **Hosted OAuth MCP**: connect your own Cloudflare account and receive a one-user `cfops_` connector key. The owner's API token is never shared.\n- **Self-hosted MCP Worker**: deploy the included Worker with Wrangler for your own team or infrastructure.\n- **Private Agent Harness**: deploy the companion `agent/` Worker behind the MCP Worker's `AGENT_HARNESS` service binding for bounded jobs, health watches, schedules, audit, and the authenticated operator console.\n\nFor repository-connected deployments, see [GIT-INTEGRATION.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/GIT-INTEGRATION.md). The recommended route uses Cloudflare Workers Builds' GitHub App authorization; the MCP does not store a GitHub token.\n\nCloudflare Ops MCP is especially useful for Cloudflare operators who need repeatable DNS hygiene across many zones: SPF cleanup, DMARC enforcement, BIMI records, MX checks, DKIM discovery, Cloudflare Email Routing, TXT verification records, safe DNS upserts, and audit logs for every approved write.\n\n> **Unofficial Cloudflare tool.** Cloudflare Ops MCP is made by **AMH - Artificial Mind Hive**, operated by **Service Pricer LLC**. It is independent, third-party, open-source software. It is **not affiliated with, endorsed by, sponsored by, or made by Cloudflare, Inc.** \"Cloudflare\" and \"Wrangler\" are referenced only to describe compatibility with Cloudflare's platform and official developer tooling. You are responsible for every DNS, Email Routing, DMARC, BIMI, SPF, or Worker change you approve and apply.\n\n> **No owner's API key in Git or in your client.** Public users authorize Cloudflare directly. OAuth access and refresh tokens stay server-side in KV; the connector key is stored only as a SHA-256 hash and is bound to one OAuth grant.\n\n---\n\n## What Cloudflare Ops MCP handles\n\nCloudflare Ops MCP is focused on the Cloudflare tasks that regularly break launches, email trust, bot checks, cache freshness, brand display, and AI-agent workflows:\n\n- DNS record scan, lookup, create, update, no-op detection, and guarded delete.\n- SPF detection and planning so you do not accidentally create multiple SPF records.\n- DMARC parsing and policy updates that only change the fields you asked for.\n- BIMI TXT setup with a DMARC enforcement gate.\n- DKIM discovery so the report can tell whether sender keys exist.\n- MX and Cloudflare Email Routing checks.\n- Email Routing destination/rule setup with verified-destination protection.\n- Audit logs for applied changes.\n- Cloudflare Pages DNS cutovers and cache purge operations.\n- Turnstile widget planning/creation for bot checks.\n- MCP endpoint deployment on Cloudflare Workers with Wrangler secrets.\n- AI-agent safety defaults: dry-run first, diff display, no token in tool args, no accidental deletes.\n\nThis is not meant to replace every Cloudflare feature. It is the narrow, safe lane for common Cloudflare ops an operator or AI agent should be allowed to do.\n\n## Examples are operator recipes\n\nThe examples below are intentionally direct. They are not toy examples. They show the exact dry-run -> review -> apply pattern users should follow when fixing real domains.\n\n### Cloudflare Pages DNS cutover\n\nUse this when an old registrar, parking page, Vercel app, HugeDomains page, or stale A/AAAA records are blocking a Cloudflare Pages custom domain.\n\nDry-run first:\n\n```sh\ncfops pages example.com --target project.pages.dev\n```\n\nApply only after reviewing the delete/create plan:\n\n```sh\ncfops pages example.com --target project.pages.dev --apply\n```\n\nWhat it changes:\n\n- Deletes conflicting apex A/AAAA/CNAME records.\n- Deletes conflicting www A/AAAA/CNAME records and www NS delegations.\n- Adds proxied CNAME records for apex and www pointing at the Pages target.\n- Leaves TXT, MX, SPF, DKIM, DMARC, BIMI, and other delegated subdomains alone.\n- Leaves wildcard records alone unless you explicitly add `--wildcard`.\n\nOptions:\n\n- `--no-www` only cuts over the apex domain.\n- `--wildcard` also removes conflicting `*.example.com` A/AAAA/CNAME records.\n\n\n## Why build this with Wrangler?\n\nWrangler is Cloudflare's official developer CLI. Cloudflare Ops MCP can run without Wrangler as a local CLI/library, but Wrangler is the right path when you want a remote MCP server because it deploys the Worker, stores secrets, tails logs, and manages Cloudflare bindings from the same toolchain Cloudflare documents.\n\nUse Wrangler when you want:\n\n- a hosted MCP endpoint for agents and teammates;\n- server-side OAuth client secrets and optional private admin fallback secrets;\n- Cloudflare Pages/Workers deployment checks;\n- observability through Cloudflare logs;\n- a repeatable production setup instead of local-only scripts.\n\nUse the plain CLI when you only need one local terminal to scan or fix a zone.\n---\n\n## Current release notes\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

\n\n**Agent-safe Cloudflare writes**\n\nCloudflare Ops MCP keeps the write path narrow: scan the target, show the diff, wait for explicit approval, then apply only the requested DNS, DMARC, BIMI, SPF, Email Routing, Pages, cache, or Turnstile change.\n\n

\n\n**Per-user OAuth isolation**\n\nPublic users connect their own Cloudflare account and receive an opaque `cfops_` connector key. Only its hash is stored. Each request resolves to exactly one OAuth grant, user-supplied tenant switching is ignored, refresh tokens remain server-side, and either side can revoke the connection.\n\n

\n\n**Email trust diagnostics**\n\nThe scanner reports SPF, DKIM discovery, DMARC policy, BIMI readiness, MX records, and Cloudflare Email Routing status so an agent or operator can see what is missing before touching production DNS.\n\n

\n\n**Other highlights**\n\n- Zero-dependency core library for host apps and CLI use.\n- Scoped Cloudflare token guidance instead of Global API Key usage.\n- Audit logging for applied changes, with token redaction.\n- Operator-ready setup docs for CLI, library, and self-hosted MCP use.\n\n

\n\n---\n\n## Safety model (the whole point)\n\n1. **Dry-run by default.** Every mutating function takes an options object and\n only writes when `{ apply: true }` is passed. The CLI is dry-run unless you\n add `--apply`. A dry-run returns the *planned* change plus a before/after\n diff and writes nothing.\n2. **Scan before write.** Apply paths re-fetch current state and return a\n before/after diff, so you always see exactly what will change.\n3. **Never delete as a side effect.** Deleting a DNS record requires an explicit\n `deleteDnsRecord(..., { confirm: true })` call (CLI: `--force`). An `apply`\n never deletes anything.\n4. **Token hygiene.** The Cloudflare API token is read **only** from\n `process.env.CLOUDFLARE_API_TOKEN`. It is never logged, never written to the\n audit log, and never included in thrown error messages - any token-looking\n substring is redacted defensively.\n5. **Scoped token only.** Use a least-privilege scoped API token. **Do not use\n the Global API Key.**\n6. **BIMI precondition.** `setupBimi` first checks the domain's DMARC policy. If\n `p` is missing or `none`, it **refuses to write in apply mode** (BIMI is not\n honored below enforcement) unless you pass `{ force: true }`. In dry-run it\n warns.\n7. **Audit log.** Every apply appends one JSON line to an audit log\n (default `./cloudflare-ops-mcp-audit.log`) with\n `{ ts, action, domain, record, before, after }` - never the token.\n\n---\n\n## Quick setup\n\nFor the fastest path, start with [SETUP.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/SETUP.md). It explains the CLI path, the Wrangler-hosted MCP path, and how users provide their own Cloudflare credentials safely. See [PHASES.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/PHASES.md) for the rollout model, [OAUTH.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/OAUTH.md) for hosted Cloudflare OAuth, and [ROADMAP.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/ROADMAP.md) for the next upgrades.\n\n## How a user actually uses it\n\n1. Visit [Connect Cloudflare](https://cfops.nothingunseen.com/oauth/cloudflare/start).\n2. Approve the Cloudflare permissions shown on the consent screen.\n3. Copy the one-time MCP configuration into Claude, Codex, Cursor, or another Streamable HTTP MCP client.\n4. Restart or reconnect the client. It calls MCP `initialize` and `tools/list` automatically—users do not need to memorize tool names.\n5. Ask for the outcome in plain language.\n\nExample prompts:\n\n```txt\nScan example.com and explain the DNS and email-auth problems. Do not write anything.\n\nCheck DMARC, SPF, DKIM, BIMI, MX, and Cloudflare Email Routing.\n\nShow me a dry-run to move example.com to project.pages.dev. Preserve email records.\n\nPlan a cache purge for these three URLs. Do not apply it.\n\nApply exactly the change I just approved, then verify the live result.\n```\n\nThe agent chooses the appropriate MCP tool from its schema. Read-only calls run immediately. Mutation tools return a dry-run diff unless the caller explicitly sends `apply: true`; users should approve only after reading that diff.\n\nCurrent v0.4 tools cover DNS, email authentication/routing, Pages cutover, cache purge, Turnstile, token operations, and account diagnostics — plus the **AMH WT Agent Harness** (`agent/`): a private companion Worker for bounded research, verification, UI checks, and zero-AI site-health watches. One Durable Object per user keeps a tamper-evident audit chain, friendly reusable agent profiles (Jack is the default office manager), a Continuity Keeper briefing with automatic 4/7/30-day retention, daily model-call limits, schedules, and candidate revisions that never self-apply. The default Free profile uses `@cf/zai-org/glm-4.7-flash` with independent `@cf/google/gemma-4-26b-a4b-it` verification; `@cf/moonshotai/kimi-k2.6` is labeled and enabled only as an explicit Workers Paid profile. The authenticated console and optional terminal show live handoffs, names, limits, alerts, and exact recorded model calls without spending another inference. Official Cloudflare API, Workers Builds, Bindings, Observability, and Docs MCP connectors use each operator's own OAuth grant. See [AGENT-HARNESS.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/AGENT-HARNESS.md), [CLOUDFLARE-MCP.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/CLOUDFLARE-MCP.md), [MAIL-LANDING-GUIDE.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/MAIL-LANDING-GUIDE.md), and [RELEASE-GATE.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/RELEASE-GATE.md).\n\n## Install\n\n```sh\nnpm install cloudflare-ops-mcp\n# or run the CLI without installing:\nnpx cloudflare-ops-mcp scan example.com\n```\n\nRequires **Node.js >= 18** (for the built-in global `fetch`). No other\ndependencies.\n\n---\n\n## Create a scoped Cloudflare API token (least privilege)\n\n1. Cloudflare dashboard -> **My Profile** -> **API Tokens** -> **Create Token**.\n2. Choose **Create Custom Token**.\n3. Under **Permissions**, add exactly these three:\n - **Zone** -> **Zone** -> **Read**\n - **Zone** -> **DNS** -> **Edit**\n - **Zone** -> **Email Routing Rules** -> **Edit**\n4. Under **Zone Resources**, select **Include -> Specific zone ->** *your domain*\n (not \"All zones\").\n5. *(Recommended)* set a **TTL** and/or **Client IP Address Filtering**.\n6. **Continue -> Create Token**, then copy the token value **once** (it is shown\n only at creation; if lost, roll it).\n\n> Do **not** use the Global API Key - it has access to everything, cannot be\n> scoped or time-limited, and there is only one per account.\n\n### Provide the token\n\nPut it in your environment (never in a CLI argument or in code):\n\n```sh\nexport CLOUDFLARE_API_TOKEN=\"your-scoped-token\"\n```\n\nor copy `.env.example` to `.env` and fill it in:\n\n```sh\ncp .env.example .env\n# then load it however you prefer (e.g. `set -a; . ./.env; set +a`)\n```\n\n`cloudflare-ops-mcp` reads `CLOUDFLARE_API_TOKEN` from the environment only.\n\n### Hosted OAuth connector — users never receive the owner's API token\n\nFor the public hosted service:\n\n1. Open [https://cfops.nothingunseen.com/oauth/cloudflare/start](https://cfops.nothingunseen.com/oauth/cloudflare/start).\n2. Approve only the Cloudflare scopes shown on Cloudflare's consent screen.\n3. Copy the one-time `cfops_` connector key from the success page.\n4. Put that connector key in your MCP client's `Authorization` header.\n\nThe connector key is not a Cloudflare API token. Its SHA-256 hash maps to one server-side OAuth connection, so it cannot select another user's grant. Cloudflare access and refresh tokens never enter Git, chat, an issue, or the MCP tool arguments.\n\nClaude Desktop or Cursor-style configuration:\n\n```json\n{\n \"mcpServers\": {\n \"cloudflareOps\": {\n \"url\": \"https://cfops.nothingunseen.com/mcp\",\n \"headers\": {\n \"Authorization\": \"Bearer cfops_YOUR_CONNECTOR_KEY\"\n }\n }\n }\n}\n```\n\nCodex CLI:\n\n```sh\ncodex mcp add cloudflare-ops --url https://cfops.nothingunseen.com/mcp \\\n --bearer-token-env-var CFOPS_CONNECTOR_KEY\n```\n\nThen set `CFOPS_CONNECTOR_KEY` in your own environment. Do not commit it. See [OAUTH.md](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/OAUTH.md) for status, revocation, refresh behavior, and self-hosting.\n### Public-use credential model\n\nCloudflare Ops MCP does **not** ship with an API key, shared account, hosted proxy token, or any hidden credentials. Every operator must bring one of these:\n\n- a scoped Cloudflare API token in their own environment for local CLI/library use;\n- a scoped Cloudflare API token stored as their own Worker secret for self-hosted MCP use;\n- a per-user Cloudflare OAuth connection stored server-side by the Worker for hosted MCP use;\n- an OAuth/token-vault integration built by their own host app, with approval gates before writes.\n\nDo not ask users to send tokens through chat, issues, logs, or screenshots. If a token is exposed, rotate it in Cloudflare and create a new scoped token.\n\n---\n\n## The token vending machine (mint down, never up)\n\nWrangler *consumes* tokens. The official Cloudflare MCP *consumes* tokens. Nothing in the toolchain *manufactures* least-privilege tokens on demand — so everyone ends up doing agent work with one big long-lived key. This is the gap `mint_scoped_token` closes:\n\n1. **You hold one bootstrap token** (needs `User > API Tokens > Edit`). It stays a Worker secret or env var — it never travels through a chat or an agent transcript.\n2. **An agent asks for a task token**: `mint_scoped_token { domain: \"example.com\", preset: \"dns-zone\", ttl_seconds: 3600 }`. Dry-run first, like every mutating tool here — you see the exact policy JSON before anything is created.\n3. **The minted token is confined to ONE zone, with preset permissions, and auto-expires** (default 1 hour, hard-capped at 24 h unless `confirm_long=true`). Presets: `zone-read`, `dns-zone`, `cache-purge`. There is deliberately **no super or account-wide preset** — mint down, never up.\n4. **Hand it to whatever does the work** — a cheaper model, a cron job, even Wrangler itself (`CLOUDFLARE_API_TOKEN= wrangler ...`). When it leaks or lingers, it's a key to one zone's DNS that dies within the hour.\n5. `list_tokens` shows what's outstanding (never values), `revoke_token` kills one early.\n\n### Orchestrator + cheap-agent pattern\n\nThis is the flow the vending machine is built for: a strong orchestrator model plans, a cheap model executes.\n\n- The orchestrator (Claude, or your pick) decides *what* needs doing and calls `mint_scoped_token` for exactly that scope.\n- A cheap tool-calling model (Kimi K2, Groq-hosted Llama, anything OpenAI-compatible) gets the minted token + the MCP endpoint and grinds the routine work — DNS fixes, DMARC rollouts, cache busts — through the same dry-run-gated tools.\n- Every mutating call still requires `apply: true`, so the cheap agent's mistakes surface as diffs, not damage.\n\nMCP is model-agnostic by design: any MCP client can point at the hosted Worker endpoint, and any tool-calling LLM can drive that client.\n\n## Doctor tools (the questions Cloudflare makes you assemble by hand)\n\nRead-only diagnostics for the failure modes that actually burn multi-account operators:\n\n- **`who_serves_domain`** — domain → zone → Worker routes, Worker custom domains, and Pages projects that claim it, with a warning when several products fight over one hostname. Answers \"what is ACTUALLY serving this URL?\" without four dashboard tabs.\n- **`account_doctor`** — which accounts this token can see, whether the account you *meant* is among them (wrong-token detection), and same-name Pages projects across accounts — the decoy that lets a deploy \"succeed\" into the wrong account while production never changes.\n- **`pages_branch_check`** — the project's production branch vs the branch you're about to deploy. Catches the silent \"git says `master`, project says `main`, every deploy lands on a preview\" failure before it eats an afternoon.\n\n---\n\n## CLI usage\n\n```\ncfops [options]\n```\n\n| Command | What it does |\n| --- | --- |\n| `scan ` | Full read-only snapshot: DNS, SPF, DKIM, DMARC, BIMI, Email Routing. |\n| `plan [--inbox x@y]` | Report desired vs current email-auth posture (no writes). |\n| `dns --type T --name N --content C [--ttl n] [--proxied] [--apply]` | Upsert a DNS record (create / update / no-op). |\n| `email --forward a@b=to@c [--catch-all to@c] [--apply]` | Plan/apply Email Routing forward rules + catch-all. |\n| `dmarc --policy quarantine [--rua mailto:x] [--pct 25] [--apply]` | Change **only** the DMARC `p=` (and `rua`/`pct`), safely. |\n| `bimi --logo [--vmc ] [--apply] [--force]` | Set `default._bimi` TXT (refuses if DMARC=`none` unless `--force`). |\n| `verify ` | Verify the API token, then resolve the zone. |\n\nGlobal flags: `--apply` (perform the write; default is dry-run), `--force`\n(BIMI DMARC override / delete), `--audit ` (audit log location),\n`-h`/`--help`.\n\n**Everything is a dry-run until you add `--apply`.** BIMI needs a **hosted\nSVG Tiny-PS logo URL** that you supply via `--logo` (and, for Gmail/Apple Mail\ndisplay, a VMC/CMC via `--vmc`).\n\n---\n\n## Worked example - three real jobs\n\nAssume a scoped token is exported and each domain is a zone in your account.\n\n### (a) Add `default._bimi` TXT to `example.com`\n\nFirst, dry-run (writes nothing - shows the diff):\n\n```sh\ncfops bimi example.com --logo https://example.com/bimi/logo.svg\n```\n\n```\nBIMI for example.com (DMARC p=quarantine, enforcing=true):\n new record: v=BIMI1; l=https://example.com/bimi/logo.svg\n action: create (dry-run)\n record: TXT default._bimi.example.com\n - before: (record does not exist)\n + after: content=\"v=BIMI1; l=https://example.com/bimi/logo.svg\" ttl=1\n warn: No VMC/CMC supplied (a=). Gmail and Apple Mail require a VMC/CMC to display the logo; Yahoo/AOL do not.\n\nDry-run only. Re-run with --apply to write this change.\n```\n\nThen apply:\n\n```sh\ncfops bimi example.com --logo https://example.com/bimi/logo.svg --apply\n```\n\n> If `example.com`'s DMARC were still at `p=none`, the apply would be **blocked**\n> with an error telling you to raise DMARC first (or pass `--force`). Fix DMARC,\n> then set BIMI.\n\n### (b) Add `default._bimi` TXT to `example.org`\n\nDry-run:\n\n```sh\ncfops bimi example.org --logo https://example.org/bimi/logo.svg\n```\n\nApply once the diff looks right:\n\n```sh\ncfops bimi example.org --logo https://example.org/bimi/logo.svg --apply\n```\n\n(For broad display in Gmail/Apple Mail, host a VMC/CMC and add\n`--vmc https://example.org/bimi/vmc.pem`.)\n\n### (c) Change `_dmarc.example.org` from `p=none` to `p=quarantine`\n\nDry-run first - note it changes **only** `p`, preserving your existing `rua`:\n\n```sh\ncfops dmarc example.org --policy quarantine --rua mailto:dmarc@example.org --pct 25\n```\n\n```\nDMARC none -> quarantine for example.org:\n new record: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.org; pct=25\n action: update (dry-run)\n record: TXT _dmarc.example.org\n - before: content=\"\\\"v=DMARC1; p=none; rua=mailto:dmarc@example.org\\\"\" ttl=1\n + after: content=\"\\\"v=DMARC1; p=quarantine; rua=mailto:dmarc@example.org; pct=25\\\"\" ttl=1\n changed fields: content\n\nDry-run only. Re-run with --apply to write this change.\n```\n\nThen apply:\n\n```sh\ncfops dmarc example.org --policy quarantine --rua mailto:dmarc@example.org --pct 25 --apply\n```\n\n> **Ramp safely.** Only flip to `quarantine` after `p=none` + `rua` reports show\n> all your legitimate mail is authenticating with **alignment**. Then widen\n> `--pct 25 -> 50 -> 100` over a couple of weeks before ever considering\n> `p=reject`. `pct` is honored today but is being removed in the in-progress\n> DMARCbis revision - treat it as current best practice, not forever.\n\n---\n\n## Library usage (host apps)\n\n`cloudflare-ops-mcp` exposes clean named exports so a host app can import and wrap it\n(add your own auth, approval UI, or multi-tenant token vault) - but it has\n**no dependency on any host** and runs perfectly standalone.\n\n```js\nimport {\n CloudflareClient,\n scanZone,\n applyDnsRecord,\n setDmarcPolicy,\n setupBimi,\n setupEmailRouting,\n planEmailAuth,\n appendAudit,\n} from \"cloudflare-ops-mcp\";\n\nconst client = new CloudflareClient(); // reads CLOUDFLARE_API_TOKEN from env\n// (you may also inject { token, fetch } - useful for tests)\n\n// Read-only snapshot:\nconst snapshot = await scanZone(client, \"example.com\");\n\n// Plan a DMARC flip (dry-run - writes nothing):\nconst plan = await setDmarcPolicy(client, \"example.com\", \"quarantine\", {\n rua: \"mailto:dmarc@example.com\",\n pct: 25,\n});\n\n// Apply it, then record the change yourself (you supply the timestamp):\nconst applied = await setDmarcPolicy(\n client,\n \"example.com\",\n \"quarantine\",\n { rua: \"mailto:dmarc@example.com\", pct: 25 },\n { apply: true }\n);\nappendAudit(\"./cloudflare-ops-mcp-audit.log\", {\n ts: new Date().toISOString(),\n action: \"dmarc.policy\",\n domain: \"example.com\",\n record: applied.record,\n before: applied.before,\n after: applied.after,\n});\n```\n\nEvery mutating export is dry-run unless you pass `{ apply: true }`, and pure\nlogic never calls `Date.now()` - you (or the CLI) supply audit timestamps.\n\n### Public exports\n\n- `CloudflareClient`, `CloudflareError`, `redactToken`\n- `resolveZoneId`, `resolveZone`, `scanZone`\n- `listRecords`, `findRecord`, `applyDnsRecord`, `deleteDnsRecord`\n- `getRoutingStatus`, `enableRouting`, `listDestinations`, `addDestination`,\n `listRules`, `getCatchAll`, `setupEmailRouting`\n- `parseDmarc`, `buildDmarc`, `parseSpf`, `getDmarc`, `setDmarcPolicy`,\n `quoteTxt`, `unquoteTxt`\n- `parseBimi`, `buildBimi`, `validateBimiSvgUrl`, `setupBimi`\n- `planEmailAuth`\n- `appendAudit`, `AUDIT_DEFAULT_PATH`\n\n---\n\n## Embedding in a platform\n\n`cloudflare-ops-mcp` is a generic, open tool. A larger platform can `import` it to\nautomate zone hygiene for its users (wrapping it with per-account tokens and an\napproval step), but it is completely standalone - the library and CLI run on\ntheir own with nothing but a scoped Cloudflare token.\n\n---\n\n## Remote MCP server for Cloudflare DNS agents\n\n`worker/` is an optional [Model Context Protocol](https://modelcontextprotocol.io)\nserver (a Cloudflare Worker) that exposes the same engine as tools over a URL, so\nany MCP client - an agent, Claude, Cursor - can `scan_zone`, `plan_email_auth`,\n`set_dmarc_policy`, `setup_bimi`, etc. by pointing at it.\n\nFour deliberate hardening choices:\n\n- **Every public user has an isolated OAuth connection.** The browser callback generates a random connector ID and a random `cfops_` key. Only the key hash is stored.\n- **The Cloudflare token is server-side, never a tool parameter.** It does not travel through MCP tool arguments, Git history, or an agent transcript.\n- **Authorization fails closed.** Unknown, missing, revoked, or cross-user connector keys receive `401`. Only the private owner admin key can use the optional fallback token.\n- **Every mutating tool is dry-run by default.** The caller must pass `apply: true` after seeing the diff. BIMI keeps its DMARC precondition.\n\n```sh\ncd worker\nnpx wrangler secret put CLOUDFLARE_OAUTH_CLIENT_ID\nnpx wrangler secret put CLOUDFLARE_OAUTH_CLIENT_SECRET\nnpx wrangler secret put CLOUDFLARE_OAUTH_REDIRECT_URI\nnpx wrangler deploy\n```\n\nUsers visit `/oauth/cloudflare/start`, complete Cloudflare consent, and copy the one-time connector configuration. The MCP endpoint is `/mcp`. Private self-hosters may additionally set `MCP_ACCESS_KEY` and `CLOUDFLARE_API_TOKEN` as an owner-only fallback; never distribute that admin key.\n\nThe core library has **zero dependencies**; the Worker is an optional surface -\nyou never need it to use the CLI.\n\n---\n\n## Development\n\n```sh\nnpm test # node --test (mock fetch, no live network calls)\n```\n\n## Maker\n\nMade by **-/\\-\\ M H // WT** — AMH, Artificial Mind Hive, operated by Service Pricer LLC.\n\n## Contact / company\n\n- Service Pricer: https://servicepricer.app\n- GitHub: https://github.com/pain2hustle/cloudflare-ops-mcp\n- AMH on GitHub: [@pain2hustle](https://github.com/pain2hustle)\n- Artificial Mind Hive: [amhsiterevival.com](https://www.amhsiterevival.com/)\n- Public AMH-built work: [Nothing Unseen](https://nothingunseen.com)\n- Project policies: [Privacy](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/PRIVACY.md) · [Terms](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/TERMS.md) · [Security](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/SECURITY.md) · [MIT License](https://github.com/pain2hustle/cloudflare-ops-mcp/blob/main/LICENSE)\n\n## License\n\nMIT (c) 2026 Pain2HuStle\n\n---\n\n## AMH current endeavor: WT\n\n**WT** is AMH's current operator-safety effort: a guarded agent middle layer connecting Cloudflare Agents, MCP, and Wrangler. The goal is to let capable orchestrators and correctly labeled free or paid tool-calling agents inspect, plan, request approval, deploy, verify, and recover—without handing them raw Cloudflare tokens or letting stale agents overwrite newer work.\n\nWatch for the stateful AMH Agent Coordinator, Cache Guardian, Change Guardian, Playwright phone/UI checks, and allowlisted Wrangler doctor, deployment, log, rollback, binding, and storage-health tools. The execution rule stays the same: **check → diff → approve → apply → verify**.\n\n

\n $\"WT$ \n
\n -/\\-\\ M H // WT · YOUR CLOUDFLARE STAYS YOURS\n

\n\n```text\n /\\ |\\ /| | |\n /--\\ | \\ / | |----|\n / \\ | \\/ | | |\n\n A M H // W T\n```\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125},"requiredSecrets",[],"tags",[99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],"assets",[],"stats",{"_97":84,"_98":84},"ratingAvg","reviewCount","ai-agent","bimi","cli","cloudflare","cloudflare-api","cloudflare-dns","cloudflare-email-auth","cloudflare-mcp","cloudflare-workers","dmarc","dns","dns-management","email-authentication","email-routing","oauth","topics",[99,100,101,102,103,104,105,106,107,108,109,110,111,112,126,127,113,128,62,129],"license","MIT","language","JavaScript","registryName","io.github.pain2hustle/cloudflare-ops-mcp","homepage","https://cfops.nothingunseen.com","packages",[],"mcp","mcp-server","spf","wrangler","ENV",{"_132":133,"_134":135,"_136":137},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]