This is a Model Context Protocol (MCP) server that supports remote MCP connections, with Cloudflare OAuth built-in.
It integrates tools powered by the Cloudflare DEX API to provide visibility into device, network, and application performance across your Zero Trust organization
The /mcp and /sse URLs use the same stateless SDK v2 handler and create a fresh server with request-scoped auth/account context for every request. /sse is not the deprecated HTTP+SSE transport. OAuth remains durable security state, and WarpDiagReader remains an application cache for downloaded diagnostics; no MCP protocol session is retained.
Currently available tools:
| Category | Tool | Description |
|---|---|---|
| Synthetic Application Monitoring | dex_test_statistics |
Analyze Cloudflare DEX Test Results by quartile given a Test ID |
dex_list_tests |
List configured Cloudflare DEX tests along with overview performance metrics. | |
dex_http_test_details |
Retrieve detailed time series results for an HTTP DEX test by id. | |
dex_traceroute_test_details |
Retrieve detailed time series results for a Traceroute DEX test by id. | |
dex_traceroute_test_network_path |
Retrieve detailed time series results for the network path of a traceroute test by test id and device id. | |
dex_traceroute_test_result_network_path |
Retrieve the hop-by-hop network path for a specific Traceroute DEX test result by id. Use dex_traceroute_test_network_path to obain test result ids. |
|
| Remote Captures | dex_list_remote_capture_eligible_devices |
Retrieve a list of devices eligible for remote captures like packet captures or WARP diagnostics. |
dex_create_remote_pcap |
Initiate a remote packet capture on a specific device by id. | |
dex_create_remote_warp_diag |
Initiate a remote Warp diagnostic capture on a specific device by id. | |
dex_list_remote_captures |
Retrieve a list of previously created remote captures along with their details and status. | |
dex_list_remote_warp_diag_contents |
List the filenames included in a remote WARP diag capture returned by dex_list_remote_captures. |
|
dex_explore_remote_warp_diag_output |
Retreive remote WARP diag file contents by filepath returned by dex_list_remote_warp_diag_contents. |
|
dex_analyze_warp_diag |
Analyze successful WARP-diag remote captures for common issues. | |
| Fleet Status | dex_fleet_status_live |
View live metrics for your fleet of zero trust devices for up to the past 1 hour. |
dex_fleet_status_over_time |
View historical metrics for your fleet of zero trust devices over time. | |
dex_fleet_status_logs |
View historical logs for your fleet of zero trust devices for up to the past 7 days. | |
dex_list_warp_change_events |
View logs of users toggling WARP connection or changing configuration. | |
| Misc | dex_list_colos |
List Cloudflare colos, optionally sorted by their frequency of appearance in DEX test or fleet status results. |
This MCP server is still a work in progress, and we plan to add more tools in the future.
Are there any anomolies in the DEX test to the internal wiki in the past 24 hours?Can you see any bottlenecks in user@cloudflare.com's network path for Zoom today between 1 and 2 PM?How many macOS devices are connected right now in DFW?Do you notice any unusual performance metrics for user@cloudflare.com's device in the past few hours?Capture a WARP diag for user@cloudflare.com and make sure to test all routesWhich users have toggled off WARP recently?Which Cloudflare colo is most used by my users in the EU running DEX application tests?Look at the latest WARP diag for user@cloudflare.com and tell me if you see anything notable in dns logs
Connect your MCP client directly to https://dex.mcp.cloudflare.com/mcp. If prompted, complete the Cloudflare OAuth flow in your browser. The tools become available after authorization.
Interested in contributing, and running this server locally? See CONTRIBUTING.md to get started.
