Configure Cloudflare for the AI Gateway

To allow users to securely query your network infrastructure, debug logs, and monitor security configurations using their AI clients, you can configure Cloudflare's Model Context Protocol (MCP) servers within the JumpCloud AI Gateway.

Prerequisites

Before configuring specific enterprise applications, we recommend reviewing the Get Started: AI Gateway guide to familiarize yourself with the gateway architecture and core AI concepts (such as MCP servers and AI clients).

Completing Application Setup

Cloudflare runs a catalog of managed, remote MCP servers. Rather than a single endpoint, Cloudflare offers different server URLs depending on the specific product data you want to expose to your AI clients (for example, Observability, DNS Analytics, or Cloudflare One CASB).

Before configuring the server in JumpCloud, review Cloudflare’s own MCP servers and Cloudflare MCP server to determine which server endpoint you need, and complete your preferred authentication setup:

• Select Your Servers: Use the primary Cloudflare MCP server https://mcp.cloudflare.com/mcp, or select product-specific servers.
  Note: You must configure a separate JumpCloud server entry for each Cloudflare endpoint you want to use. 
• For OAuth (Recommended): As this MCP server supports dynamic client registration (DCR), no additional configuration is required.
• For API Tokens: Ensure your users have the necessary permissions in your Cloudflare dashboard to generate API tokens with the appropriate scopes for the server you select.

Configuring the Server in JumpCloud

See Adding MCP Servers in Get Started: AI Gateway and use the following values to configure this server:

• App: Select Cloudflare (if you have an existing SSO application or bookmark), or + Add App to create it
• Name: Enter a name, for example Cloudflare
• Prefix: Enter a value to prepend to MCP tool names
  • Note: Prefixes must be unique. Maximum 8 characters, letters and numbers only
• URL: https://mcp.cloudflare.com/mcp
• MCP authentication method: OAuth
• Advanced fields: Not required

Your users will now see Cloudflare listed as an available MCP server when they authenticate their AI clients through the JumpCloud AI Gateway. If you add multiple Cloudflare products, create a new server in JumpCloud for each specific Cloudflare MCP URL.