Bulk Read KV Values
Read up to 100 text or JSON values from a Workers KV namespace.
ActionTry it
Integrate Cloudflare
with your AI CRM
Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable.
Explore Triggers and Actions
Bulk Write Workers KV Entries
Create or overwrite up to 10,000 entries in one Workers KV namespace. Check the returned unsuccessful keys and successful count: a successful request can still leave some keys unwritten.
ActionTry it
Cancel Worker Build
Cancel a queued or running Cloudflare Workers CI build.
ActionTry it
Capture Browser Snapshot
Render a URL or supplied HTML and return selected page representations. When specifying formats, select at least two distinct representations.
ActionTry it
Check Registrar Domains
Check authoritative registration availability and pricing for up to 20 domains.
ActionTry it
Create Access Application
Create an account-scoped Cloudflare Access application.
ActionTry it
Create Account API Token
Create an account-owned API token and return its one-time secret value.
ActionTry it
Create Alert Policy
Create an account-level Cloudflare notification policy.
ActionTry it
Create D1 Database
Create a D1 database with optional placement and replication settings.
ActionTry it
Create DNS record
Tool to create a new DNS record within a specific zone. Requires write privileges and makes live changes to the zone. Use after obtaining the zone ID via CLOUDFLARE_LIST_ZONES to programmatically add DNS entries.
ActionTry it
Create Email Routing Address
Register an Email Routing destination; Cloudflare sends it a verification email.
ActionTry it
Create KV Namespace
Create a classic or KV Instant namespace in a Cloudflare account.
ActionTry it
Create Pages Deployment
Create a Cloudflare Pages deployment from a Git branch or Direct Upload manifest.
ActionTry it
Create Pages Project
Create a Cloudflare Pages project for a production branch.
ActionTry it
Create R2 Bucket
Create an R2 bucket with optional placement and storage settings.
ActionTry it
Create Turnstile Widget
Create a Turnstile challenge widget for selected domains.
ActionTry it
Create User API Token
Create a user API token carrying supplied grants. Secure the one-time `result.value`; without `not_before` it is active immediately.
ActionTry it
Create WAF List
Create a new empty custom list for use in WAF rules and filters. Lists can contain IP addresses, hostnames, ASNs, or redirects. Once created, use separate actions to add items to the list. Note: List availability depends on plan (Free: 1 list, Pro/Business: 10 lists, Enterprise: 1000 lists). Example: CREATE_LIST(account_id="abc123", kind="ip", name="blocklist", description="Block malicious IPs")
ActionTry it
Create Worker
Create a beta Worker resource and configure its observability, previews, subdomain, tags, and tail consumers.
ActionTry it
Create Worker Build Trigger
Create a repository-backed Workers build trigger.
ActionTry it
Create Worker Deployment
Deploy existing Worker versions immediately to live traffic by percentage. `force` can bypass rollback blocks after secret changes.
ActionTry it
Create Worker Version
Upload code, assets, and configuration as a new Worker version without deploying it to production traffic. Bindings and settings are NOT copied from earlier versions. Pass every binding again, or pass {name, type: "inherit"} to carry an existing binding forward.
ActionTry it
Create Zone
Create a Cloudflare DNS zone for a domain, optionally specifying the account and zone setup mode.
ActionTry it
Delete Access Application
Permanently delete one account-scoped Cloudflare Access application.
ActionTry it
Delete Account API Token
Permanently and irreversibly revoke an account-owned Cloudflare API token. Use only the specifically intended token ID; a revoked token cannot be restored.
ActionTry it
Delete DNS Record
Tool to delete a DNS record within a specific zone. Deletion is immediate and irreversible. Use only after confirming both zone and record IDs. Requires write privileges on the zone. Example: "Delete DNS record 372e6795... from zone 023e105f4ecef..."
ActionTry it
Delete Pages Deployment
Delete a selected non-production Cloudflare Pages deployment.
ActionTry it
Delete User API Token
Permanently revoke one user-owned Cloudflare API token.
ActionTry it
Delete WAF List
Tool to delete a WAF list. Use when you need to remove a list after verifying no filters reference it. Example: DELETE_LIST(account_id="<account_id>", list_id="<list_id>")
ActionTry it
Delete Worker
Permanently delete a beta Worker and its versions and deployments.
ActionTry it
Delete Worker Script
Delete a classic Worker script. Forced deletion may break service bindings and deletes its Durable Object namespaces.
ActionTry it
Delete Zone
Tool to delete a zone. Use after confirming the zone identifier to permanently remove a DNS zone and all its DNS records from your Cloudflare account. Example: DELETE_ZONE(zone_identifier="023e105f4ecef8ad9ca31a8372d0c353")
ActionTry it
Deploy Worker Script
Upload or replace a JavaScript module Worker script and create its latest version.
ActionTry it
Deploy Worker With Assets
Upload static assets, create a Worker version, and deploy all traffic to it. Destructive: the new version replaces the live one for 100% of traffic. Only binding types listed in `keep_bindings` (secrets by default) and bindings passed in `bindings` survive; every other existing binding (KV, D1, R2, vars, services, ...) is dropped. List those types in `keep_bindings` to preserve them. Asset routing (`asset_config`) and compatibility flags are not inherited either and must be passed again on each deploy.
ActionTry it
Download Worker Script
Download the raw source or multipart module bundle for a Worker script.
ActionTry it
Execute D1 Query
Execute SQL against one Cloudflare D1 database. SQL may read, write, or permanently delete database data or schema.
ActionTry it
Get Access Application
Retrieve one Cloudflare Access application by its exact application ID.
ActionTry it
Get Access Reusable Policy
Retrieve one reusable Cloudflare Access policy by its policy UUID.
ActionTry it
Get Account
Retrieve one Cloudflare account by its exact account ID.
ActionTry it
Get Account Build Limits
Return whether an account has exhausted its Worker build minutes and when they refresh.
ActionTry it
Get Account Member
Retrieve the identity, roles, policies, and status of an account member.
ActionTry it
Get Account Token
Retrieve metadata and policies for one account-owned API token.
ActionTry it
Get Bot Management Settings
Tool to retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management). Use after identifying the correct zone_id (e.g., via CLOUDFLARE_LIST_ZONES). This tool is the canonical way to audit bot-related configuration; firewall rules are adjacent controls but not equivalent to Bot Management settings.
ActionTry it
Get Current User
Retrieve identity and account-membership details for the current user.
ActionTry it
Get D1 Database
Get details for one D1 database, optionally selecting response fields.
ActionTry it
Get KV Namespace
Retrieve metadata for one Cloudflare Workers KV namespace.
ActionTry it
Get KV Value
Retrieve a key's value from a Workers KV namespace. The response contains decoded text or base64-encoded binary content, along with its content type and any expiration.
ActionTry it
Get MCP Server
Retrieve one Access AI Controls MCP server and its synchronization state.
ActionTry it
Get Pages Deployment
Retrieve one Cloudflare Pages deployment and its current build status.
ActionTry it
Get Pages Deployment Logs
Retrieve build log lines for one Cloudflare Pages deployment.
ActionTry it
Get Pages Project
Retrieve one Cloudflare Pages project and its configuration.
ActionTry it
Get Pages Upload Token
Request a short-lived JWT for Cloudflare Pages Direct Upload assets.
ActionTry it
Get R2 Bucket
Retrieve properties for one named Cloudflare R2 bucket.
ActionTry it
Get R2 Bucket Lock
Return the object-lock rules configured for an R2 bucket.
ActionTry it
Get R2 Managed Domain
Retrieve the managed r2.dev domain configuration for an R2 bucket.
ActionTry it
Get R2 Object
Download an object's stored content and metadata from an R2 bucket.
ActionTry it
Get Tunnel Configuration
Retrieve the current configuration of a remotely managed Cloudflare Tunnel.
ActionTry it
Get User API Token
Retrieve metadata and policies for one user-owned API token.
ActionTry it
Get Worker
Retrieve one beta Worker resource by its exact ID or name.
ActionTry it
Get Worker Build Logs
Retrieve cursor-paginated log output for one Workers CI build.
ActionTry it
Get Worker Preview Deployment
Retrieve a specific or latest deployment for a Worker Preview.
ActionTry it
Get Worker Script Content
Retrieve the deployed content of one Cloudflare Worker script.
ActionTry it
Get Worker Script Settings
Retrieve a Worker script's metadata and runtime configuration.
ActionTry it
Get Worker Script Subdomain
Inspect workers.dev and preview URL availability for a Worker script.
ActionTry it
Get Worker Script Version
Retrieve detailed information for one classic Worker script version.
ActionTry it
Get Worker Service Environment Content
Retrieve deployed content for a legacy Worker service environment.
ActionTry it
Get Worker Version
Retrieve one beta Worker version; optional code modules may add megabytes.
ActionTry it
Get Workers AI Model Schema
Retrieve the input and output JSON Schemas for a Workers AI model.
ActionTry it
Get Workers Subdomain
Return the workers.dev subdomain configured for a Cloudflare account.
ActionTry it
Get Workflow
Retrieve one Workflow's configuration, metadata, schedules, and counts.
ActionTry it
Get Workflow Instance
Retrieve logs, status, and execution details for one Workflow instance.
ActionTry it
Get Zero Trust Organization
Retrieve the configuration of a Cloudflare Zero Trust organization.
ActionTry it
Get Zone
Retrieve one Cloudflare zone and its configuration, status, and metadata.
ActionTry it
Get Zone Ruleset Phase Entrypoint
Retrieve the latest active zone entrypoint ruleset for a Rulesets phase.
ActionTry it
Get Zone Setting
Fetch one setting for a Cloudflare zone by setting name.
ActionTry it
Inventory Developer Resources
Return one page each of KV namespaces, Workflows, and D1 databases.
ActionTry it
List Access Application Policies
List policies attached to one Cloudflare Access application.
ActionTry it
List Access Applications
List and filter Cloudflare Access applications in an account.
ActionTry it
List Access Reusable Policies
List reusable Cloudflare Access policies for an account.
ActionTry it
List Account Members
List a page of Cloudflare account members with their user details, roles, permissions, status, and access policies when available. Supports filtering by membership status and sorting and pagination.
ActionTry it
List Account Subscriptions
List billing subscriptions and plan details for one Cloudflare account.
ActionTry it
List Account Tokens
List account-owned API token metadata and policies with pagination.
ActionTry it
List Accounts
List all Cloudflare accounts you have ownership or verified access to. Retrieves a paginated list of accounts with their details including account ID, name, type, settings, and creation date. An empty or partial result may indicate insufficient API token scope or permissions, not the absence of accounts. When multiple accounts are returned, confirm the intended account_id before performing any write operations to avoid acting on unintended environments. Use this when you need to: - Discover available accounts before performing account-specific operations - Find an account ID for other API calls that require an account identifier - Audit account configurations and settings - Filter accounts by name or paginate through large account lists
ActionTry it
List D1 Databases
List one page of D1 databases in an account. Increment `page` until `result_info` shows all matching databases have been retrieved.
ActionTry it
List DNS records
List and search one page of DNS records in a Cloudflare zone, including record IDs and properties. When both exact and substring filters are supplied for a name or content, the substring filter takes precedence; use pagination to retrieve further results.
ActionTry it
List Email Routing Addresses
List one page of Email Routing destination addresses configured for an account, optionally filtering by verification status. Use pagination to retrieve further results.
ActionTry it
List Firewall Rules
List one page of firewall rules for a specific DNS zone for auditing. Use pagination to retrieve further rules.
ActionTry it
List KV Keys
List key names and metadata in a Cloudflare Workers KV namespace.
ActionTry it
List KV Namespaces
List Workers KV namespaces in a Cloudflare account. Sort by namespace `id` or `title` with `order` and `direction`, and paginate with `page` and `per_page`. The response preserves additional namespace fields returned by Cloudflare.
ActionTry it
List MCP Portals
List Cloudflare Access AI Controls MCP portals with pagination and search.
ActionTry it
List Monitors
Tool to list all load-balancer monitors in a Cloudflare account. Use after creating or updating monitors to retrieve a paginated list. Response includes `result_info.total_pages` to determine when all pages have been fetched.
ActionTry it
List Pages Deployments
List production or preview deployments for a Cloudflare Pages project. Use `environment` to filter by deployment type and `page` with `per_page` to traverse results; inspect `result_info.total_pages` to determine whether another page is available.
ActionTry it
List Pages Project Domains
List custom domains attached to a Cloudflare Pages project, including their validation and verification state.
ActionTry it
List Pages Projects
List Pages projects in a Cloudflare account. Use `page` and `per_page` to traverse results and inspect `result_info.total_pages` for additional pages.
ActionTry it
List Pools
Tool to list all load balancer pools in a Cloudflare account. Use after confirming account ID to discover pool IDs. Paginate using `page` and `per_page`; check `result_info.total_pages` in the response to determine if additional pages exist.
ActionTry it
List Queues
List queues owned by a Cloudflare account.
ActionTry it
List R2 Buckets
List and filter R2 buckets in a Cloudflare account.
ActionTry it
List R2 Objects
List object metadata in an R2 bucket with cursor pagination.
ActionTry it
List Registrar Registrations
List domains registered through Cloudflare Registrar.
ActionTry it
List Rule List Entries
List entries in one Cloudflare account rule list.
ActionTry it
List Tunnels
List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses. Use when you need to find a tunnel_id before performing tunnel operations like routing, DNS configuration, or debugging.
ActionTry it
List Turnstile Widgets
List Turnstile widgets configured for a Cloudflare account, returning widget summaries without secret keys.
ActionTry it
List User API Tokens
List one page of metadata for API tokens created by the connected Cloudflare user without returning token secrets.
ActionTry it
List WAF Lists
Fetch WAF lists for a Cloudflare account without their items.
ActionTry it
List Web Analytics Sites
List Cloudflare Web Analytics sites for an account. Use `order_by` to sort by hostname or creation time and `page` with `per_page` to traverse results; inspect `result_info.total_pages` to determine whether another page is available.
ActionTry it
List Worker Build Triggers
List Workers Builds trigger configurations associated with one Worker tag.
ActionTry it
List Worker Builds
List one page of Workers CI builds associated with an immutable Worker tag.
ActionTry it
List Worker Deployments
List one page of deployment history for a classic Worker script.
ActionTry it
List Worker Routes
List Worker route patterns and script assignments for a Cloudflare zone.
ActionTry it
List Worker Script Versions
List classic Worker script versions, optionally filtering to deployable versions. The first item is the latest version. Use `page` and `per_page` to paginate unless `deployable` is true, in which case Cloudflare ignores pagination.
ActionTry it
List Worker Scripts
List uploaded classic Worker scripts, optionally filtering by tag rules.
ActionTry it
List Worker Secrets
List the names and types of secrets bound to one Worker script.
ActionTry it
List Worker Telemetry Values
List unique values observed for a Workers telemetry field.
ActionTry it
List Worker Versions
List paginated versions of a Cloudflare Worker. Use `page` and `per_page` to traverse results; version objects are preserved as returned so provider-added fields remain available.
ActionTry it
List Workers
List account Workers with optional sorting and page-based pagination.
ActionTry it
List Workers Build Tokens
List Workers Builds authentication token metadata for an account, with optional pagination.
ActionTry it
List Workers Domains
List custom domains routed to Workers in a Cloudflare account.
ActionTry it
List Workflow Instances
List Workflow executions with state, UTC date, and cursor filters.
ActionTry it
List Workflows
List and search account Workflows. Use page and per_page to traverse results.
ActionTry it
List Zones
List, search, sort, and filter accessible Cloudflare zones. Use page and per_page to paginate results; result_info includes the page, per-page count, and total count.
ActionTry it
Manage Worker Schedules
Get a Worker's Cron Triggers, or replace all triggers when schedules is supplied.
ActionTry it
Query Analytics SQL
Execute a parameterized Cloudflare Analytics SQL SELECT statement.
ActionTry it
Query GraphQL Analytics
Run a read-only query against Cloudflare's GraphQL Analytics API.
ActionTry it
Query Worker Telemetry
Run a saved or ad-hoc Workers Observability telemetry query.
ActionTry it
Replace Rules List Items
Replace every item in a Rules List and poll for the bulk operation outcome. If the wait times out, the operation is not cancelled and may still be running.
ActionTry it
Rerun Zone Activation Check
Trigger a fresh activation check for a pending Cloudflare zone. Cloudflare allows one check every five minutes on paid plans and once per hour on free plans.
ActionTry it
Roll Account Token
Irreversibly rotate an Account Owned API token secret. This destructive credential rotation immediately invalidates the current secret and returns its replacement only once. Confirm the token and update dependent integrations.
ActionTry it
Roll Back Pages Deployment
Promote a previous successful Pages deployment back to production.
ActionTry it
Run Workers AI Model
Run a Workers AI model and return non-streaming JSON; streaming is unsupported.
ActionTry it
Scrape Page Elements
Render a URL or supplied HTML and return elements matching CSS selectors.
ActionTry it
Start Worker Asset Upload Session
Register a Worker static-asset manifest and return a one-hour JWT and hash buckets for later asset-upload calls; this action does not upload asset bytes.
ActionTry it
Start Worker Build
Start a Workers CI run that executes the trigger's configured build and deploy commands and may deploy the Worker.
ActionTry it
Update Access Application
Replace one account-scoped Cloudflare Access application with a full PUT. Send the complete configuration derived from a prior get of the application, because omitted policies or settings may change access.
ActionTry it
Update DNS record
Tool to update an existing DNS record within a specific zone. Use after confirming both zone and record identifiers; only provided fields are modified. Updates to records used by active tunnels take effect immediately and can disrupt live traffic.
ActionTry it
Update Pages Project
Rename a Pages project or update its production branch, build configuration, deployment environments, or source repository settings.
ActionTry it
Update Tunnel Configuration
Tool to update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing). Use when you need to programmatically configure hostname-to-origin mappings for a tunnel. WARNING: This operation REPLACES the entire configuration - incorrect configuration can break routing and make services unreachable. Best practice: fetch current configuration first (if patching) to preserve existing rules. At least one ingress rule is required, and the last rule should typically be a catch-all (hostname='*' or omitted) with service='http_status:404'.
ActionTry it
Update WAF List
Tool to update the description of a WAF list (cannot update items). Use after confirming list metadata.
ActionTry it
Update Worker Build Trigger
Update commands, caching, and filters for a Workers build trigger.
ActionTry it
Update Worker Preview Deployment
Create a new Preview deployment by merge-patching bindings or annotations on an existing Preview deployment.
ActionTry it
Update Worker Script Settings
Patch Worker configuration and metadata, creating a new version.
ActionTry it
Update Worker Script Subdomain
Enable or disable a Worker script and its previews on workers.dev.
ActionTry it
Update Zone
Tool to update properties of an existing zone; changes apply immediately to the live zone. Confirm zone ID and intended change with the user before calling. Only one field can be modified per call.
ActionTry it
Update Zone Ruleset Phase Entrypoint
Replace a zone phase entrypoint ruleset. WARNING: this is a full replacement, not a patch; omitted body fields may reset existing configuration.
ActionTry it
Upload Pages Assets
Upload static assets and register their hashes for a Pages deployment.
ActionTry it
Upload R2 Object
Upload binary content to an R2 key, replacing its content if it exists.
ActionTry it
Upload Worker Assets
Upload one bucket of base64-encoded Worker static assets.
ActionTry it
Upload Worker Script Version
Upload a module-syntax classic Worker version without deploying it. Warning: a new version does not inherit the previous version's bindings. Only binding types in metadata.keep_bindings (secrets by default) are kept; every other binding (KV, D1, R2, services, vars, ...) must be passed in metadata.bindings, for example as {"type": "inherit", "name": "MY_KV"}, or it is missing once this version is deployed.
ActionTry it
Upsert Worker Secret
Add or replace one secret binding, creating a new Worker version.
ActionTry it
Write KV Value
Create or replace a UTF-8 value in a Cloudflare Workers KV namespace.
ActionTry it
How the Cloudflare integration works
The Cloudflare integration connects your Dench AI CRM directly to Cloudflare, so agents can read and act on your Cloudflare data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
149 actions are available for agents to invoke on your behalf. Every call runs through Cloudflare's own authorization, scoped to the account you connect.
Set up Cloudflare in Dench
- 1
Sign in to your Dench workspace and open Integrations.
- 2
Find Cloudflare and click Connect — you'll authorize access through Cloudflare's own sign-in flow. No API keys or code required.
- 3
Ask an agent to use Cloudflare in chat, or call it from an automation.
- 4
Manage or disconnect the connection any time from workspace settings.
Frequently asked questions
How does the Cloudflare integration work with Dench?
The Dench Cloudflare integration connects your AI CRM to Cloudflare, so AI agents can work with your Cloudflare data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
What actions can AI agents perform with Cloudflare via Dench?
The Cloudflare integration currently exposes 149 actions, including Bulk Read KV Values, Bulk Write Workers KV Entries, Cancel Worker Build, Capture Browser Snapshot, Check Registrar Domains, and Create Access Application. Agents invoke them on your behalf from chat or from automations.
Do I need to write code to connect Cloudflare to Dench?
No. You connect Cloudflare from your Dench workspace using Cloudflare's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Is the Cloudflare integration secure?
Connections are authorized through Cloudflare's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the Cloudflare connection from your workspace settings at any time.