--- title: "pi-cloudflare" description: "Cloudflare skills and cf_-prefixed MCP tools, with a native Pi adapter and an Agent Plugins 1.0 portable runtime." canonical: https://agentpluginsdirectory.com/plugins/pi-cloudflare last-updated: 2026-09-13 --- # pi-cloudflare Cloudflare skills and cf_-prefixed MCP tools, with a native Pi adapter and an Agent Plugins 1.0 portable runtime. - Slug: pi-cloudflare - Publisher: 0xPlayerOne - Repository: https://github.com/0xPlayerOne/pi-cloudflare - Manifest: plugin.json - Version: 0.8.2 - License: MIT - Category (editorial): other - Skills: 17 (agents-sdk, cloudflare-api-token, cloudflare-auth-setup, cloudflare-email-service, cloudflare-hardening, cloudflare-one-migrations, cloudflare-one, cloudflare-token-roll, cloudflare-token-scopes, cloudflare, durable-objects, sandbox-migrate-to-next, sandbox-next, sandbox-stable, turnstile-spin, workers-best-practices, wrangler) - MCP servers: 1 (cloudflare) - Stars: 1 - Repository created: 2026-09-05 - Repository last pushed: 2026-09-12 - Publisher type: User - Listing: https://agentpluginsdirectory.com/plugins/pi-cloudflare - Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json ## What pi-cloudflare does, in the publisher's words One package for Cloudflare-driven agent work: skills + MCP tools + setup helper, distributed both as a native Pi package and an Agent Plugins 1.0 package. - Skills (12 vendored from the official cloudflare/skills repo: cloudflare, wrangler, workers-best-practices, durable-objects, agents-sdk, cloudflare-email-service, cloudflare-one, cloudflare-one-migrations, sandbox-stable, sandbox-next, sandbox-migrate-to-next, turnstile-spin). Refresh with scripts/sync-skills.sh. - MCP tools: all five official Cloudflare MCP servers, proxied with per-server prefixes (a server that is down or unauthorized is skipped with a warning instead of failing the session): Large upstream text results (e.g. full Worker bundles) are truncated to 32 KiB per text block with a recovery hint instead of landing verbatim in agent context. Override locally with PI_CLOUDFLARE_MAX_TEXT_BYTES when a task genuinely needs more. Requires Node 20.19+ (or 22.12+) and network access. Native Pi installation also requires Pi package support. No browser, wrangler CLI, or API token is needed to install; the docs tools work immediately after install. From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/0xPlayerOne/pi-cloudflare/HEAD/README.md ## Skills - agents-sdk: Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows, real-time WebSocket apps, scheduled tasks, MCP servers, chat applications, voice agents, or browser automation. Covers Agent class, state management, callable RPC, Workflows, durable e… - cloudflare-api-token: Create, scope, verify, and rotate Cloudflare dashboard API tokens for agents. Use when a task needs a long-lived token with specific permission groups, when extending token scope for new tools, or when agents report 403s that name a missing permission group. Covers the UI builder flow, the same-ori… - cloudflare-auth-setup: Set up Cloudflare authentication from any state. Use before any Cloudflare task when auth is unknown, expired, or rejected; when choosing between a persistent API token and temporary browser OAuth; or when the environment may lack browser automation. Routes to token creation, OAuth, or manual fallb… - cloudflare-email-service: Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing). Use when building email sending (Workers binding or REST API), email routing, Agents SDK email handling, or integrating email into any app, Workers, Node.js, Python, Go, etc. Also use for email deli… - cloudflare-hardening: Audits and hardens every Cloudflare account and zone in a user's estate by adopting free-tier security, performance, and reliability features. Use when a user asks to audit, harden, secure, optimize, or "get the most out of" Cloudflare, mentions Security Center insights, free-tier features, DNSSEC,… - cloudflare-one-migrations: Plans migrations from Zscaler ZIA/ZPA, Palo Alto, legacy VPN, SWG, or SASE stacks to Cloudflare One. Use for migration assessments, policy mapping, rollout plans, and parity/gap analysis. - cloudflare-one: Guides Cloudflare One Zero Trust and SASE work across Access, Gateway, WARP, Tunnel, Cloudflare WAN, DLP, CASB, device posture, and identity. Use when designing, configuring, troubleshooting, or reviewing Cloudflare One deployments. Retrieval-first: use current Cloudflare docs/API schemas instead o… - cloudflare-token-roll: Roll a Cloudflare dashboard API token when its secret is lost or may be exposed. Use when the stored secret is missing, when a token may have leaked, or when validation needs a capturable value. Covers the UI roll flow, secret capture, verification, and handoff. There is no public roll API route, t… - cloudflare-token-scopes: Add, remove, or change permission scopes on an existing Cloudflare API token. Use when a 403 names a missing permission group, when new tools need new groups, or when trimming an over-scoped token. Prefers the PUT update path (secret preserved) over delete-and-recreate. - cloudflare: Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), feature flags (Flagship), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task. Bias… - durable-objects: Create and review Cloudflare Durable Objects. Use when building stateful coordination (chat rooms, multiplayer games, booking systems), implementing RPC methods, SQLite storage, alarms, WebSockets, or reviewing DO code for best practices. Covers Workers integration, wrangler config, and testing wit… - sandbox-migrate-to-next: Use when porting a Cloudflare Sandbox app from stable @cloudflare/sandbox to @cloudflare/sandbox@next (Sandbox SDK 1.0 preview), or when the user asks to migrate or upgrade to Sandbox 1.0 / @next. Not for day-to-day stable work (sandbox-stable) or new @next apps (sandbox-next). - sandbox-next - sandbox-stable - turnstile-spin - workers-best-practices - wrangler Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized. ## MCP servers - cloudflare: transport: stdio; command: node ${PLUGIN_ROOT}/dist/mcp-server.js; env: PI_CLOUDFLARE_PLUGIN_ROOT, PI_CLOUDFLARE_TOKEN_FILE Read from the plugin's own mcp.json. Environment variable names only, never values.