How to integrate Cloudflare MCP with Kimi Code

Connect Kimi Code to Cloudflare MCP. Add new a record for your domain, list all firewall rules for zone, and more using natural language, with authentication handled for you.

Cloudflare logoCloudflare
Api Key

Cloudflare is a global network that secures and accelerates web traffic. It helps protect your sites and APIs from attacks while ensuring reliable performance.

37 Tools

How to integrate Cloudflare MCP with Kimi Code

Kimi Code is Moonshot AI's open-source coding agent, powered by Kimi K2.6. It runs in your terminal, reads and edits code, executes shell commands, and plans multi-step tasks, with native MCP support for extending it to outside tools.

In this guide, I will explain the easiest and most secure way to connect your Cloudflare account to Kimi Code via Composio Connect, so it can add new A record for your domain, list all firewall rules for zone, show members of your Cloudflare account, and more without ever putting your account credentials at risk.

Also integrate Cloudflare with

Why use Composio?

Composio provides:

  • Access to 1,500+ managed apps from a single MCP endpoint. This makes it convenient for agents to run cross-app workflows.
  • Managed OAuth. You do not have to worry about authentication and authorization flows for every app.
  • Programmatic tool calling. Allows LLMs to write code in a remote workbench to handle complex tool chaining. This reduces back-and-forth for frequent tool calls.
  • Large tool response handling outside the LLM context. This minimizes context bloat from large tool responses.
  • Dynamic just-in-time access to thousands of tools across hundreds of apps. Composio loads the tools your agent needs, so LLMs are not overwhelmed by tools they do not need.

Connect Cloudflare to Kimi Code

Kimi Code is a TypeScript agent distributed through npm. It acts as an MCP client and reads server definitions from an mcp.json file, and it can also add and authenticate servers conversationally through /mcp-config. Composio is a remote HTTP server that authenticates with OAuth, so no API key is stored anywhere.

1. Install Kimi Code

The quickest way is the official install script, which requires no pre-installed Node.js and places the kimi executable on your PATH.

bash
# macOS or Linux
curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash

# Windows PowerShell
irm https://code.kimi.com/kimi-code/install.ps1 | iex

# Confirm the installation
kimi --version

2. Log in

Start Kimi Code in your project directory, then sign in from the interactive UI:

bash
kimi

Run /login and choose Kimi Code OAuth using the device-code flow, or use a Moonshot API key.

3. Add Composio with /mcp-config

In current versions of Kimi Code, MCP servers are managed inside the app, not with a shell subcommand. From the interactive UI, run:

bash
/mcp-config
Kimi Code MCP config flow for adding the Composio MCP server

Tell it the server name and URL in plain language. For example:

Server name is Composio, and here is the server URL: https://connect.composio.dev/mcp

Kimi Code asks whether to add it globally, at ~/.kimi-code/mcp.json, or project-local for the current checkout, then writes the entry for you:

bash
{
  "mcpServers": {
    "Composio": {
      "url": "https://connect.composio.dev/mcp"
    }
  }
}

There is no transport field to set. Kimi Code infers HTTP from the url.

4. Restart the session

The new server is picked up on a fresh session, not the current one. Start a new session:

bash
/new

On the new session, Kimi Code detects that the server needs authorization and prompts you to run:

bash
/mcp-config login Composio

5. Authorize with OAuth

Run the command Kimi suggests:

bash
/mcp-config login composio

Kimi Code opens Composio's authorization page or surfaces a URL. Approve access, then return to the session. You should see confirmation that the Composio MCP server is connected.

Composio authorization page for Kimi Code MCP setup

Check the connection status any time with /mcp. Composio should appear as connected with its tools listed.

Kimi Code showing Composio connected after OAuth authorization

Connect your Cloudflare account

Back in a Kimi Code session, ask the agent to connect to Cloudflare or give it any Cloudflare-related task.

For example, ask it to:

  • "Add new A record for your domain"
  • "List all firewall rules for zone"
  • "Show members of your Cloudflare account"

It will prompt you to authenticate and authorize access to Cloudflare.

That is it. Composio tools are now available in Kimi Code, and your Cloudflare account is ready to use.

Conclusion

You have successfully connected Cloudflare to Kimi Code using Composio Connect. Your agent can now manage Cloudflare from the terminal with natural language, without exposing credentials in prompts or local scripts.

Since the same Composio endpoint exposes 1,500+ apps, you can add Slack, Calendar, Linear, and more to the same server and chain them into cross-app workflows.

TOOLS

Supported Tools

Every Cloudflare action and event your agent gets out of the box.

Check Registrar Domains

Check authoritative registration availability and pricing for up to 20 domains.

Create DNS record

Tool to create a new DNS record within a specific zone.

Create WAF List

Create a new empty custom list for use in WAF rules and filters.

Create Pages Deployment

Create a Cloudflare Pages deployment from a Git branch or Direct Upload manifest.

Create Zone

Creates a new DNS zone (domain) in Cloudflare.

Delete DNS Record

Tool to delete a DNS record within a specific zone.

Delete WAF List

Tool to delete a WAF list.

Delete Zone

Tool to delete a zone.

Get Account Token

Retrieve metadata and policies for one account-owned API token.

Get Bot Management Settings

Tool to retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management).

Get KV Namespace

Retrieve metadata for one Cloudflare Workers KV namespace.

List WAF Lists

Tool to fetch all WAF lists (no items) for an account.

Get Pages Deployment

Retrieve one Cloudflare Pages deployment and its current build status.

Get Pages Project

Retrieve one Cloudflare Pages project and its configuration.

Get Worker Script Content

Retrieve the deployed content of one Cloudflare Worker script.

Get Worker Script Version

Retrieve detailed information for one classic Worker script version.

Get Worker Version

Retrieve one beta Worker version; optional code modules may add megabytes.

List Account Members

Lists all members of a Cloudflare account with their roles, permissions, and status.

List Accounts

List all Cloudflare accounts you have ownership or verified access to.

List D1 Databases

List one page of D1 databases in an account.

List DNS records

Tool to list and search DNS records in a Cloudflare zone.

List Email Routing Addresses

List Email Routing destination addresses configured for an account.

List Firewall Rules

Tool to list firewall rules for a specific DNS zone.

List KV Namespaces

List Workers KV namespaces in a Cloudflare account.

List MCP Portals

List Cloudflare Access AI Controls MCP portals with pagination and search.

List Monitors

Tool to list all load-balancer monitors in a Cloudflare account.

List Pages Deployments

List production or preview deployments for a Cloudflare Pages project.

List Pages Project Domains

List custom domains attached to a Cloudflare Pages project, including their validation and verification state.

List Pools

Tool to list all load balancer pools in a Cloudflare account.

List Tunnels

List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses.

List Zones

Lists, searches, sorts, and filters zones in the authenticated account.

Run Workers AI Model

Run a Workers AI model and return non-streaming JSON; streaming is unsupported.

Update DNS record

Tool to update an existing DNS record within a specific zone.

Update WAF List

Tool to update the description of a WAF list (cannot update items).

Update Tunnel Configuration

Tool to update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing).

Update Zone

Tool to update properties of an existing zone; changes apply immediately to the live zone.

Write KV Value

Create or replace a UTF-8 value in a Cloudflare Workers KV namespace.

FAQ

Frequently asked questions

With a standalone Cloudflare MCP server, the agents and LLMs can only access a fixed set of Cloudflare tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Cloudflare and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Kimi Code fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Cloudflare tools.

Yes, absolutely. You can configure which Cloudflare scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Cloudflare data and credentials are handled as safely as possible.

Start with Cloudflare.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Cloudflare tool your agent needs.Free to start.

Start building