Cloudflare Blade MCP Server
cloudflare-blade-mcp
npm
v0.8.0
Source verified
Published by groupthink-dev — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Cloudflare platform MCP server — DNS, KV, D1, Tunnels, Workers, Pages, R2, Vectorize, AI, Cache with token-efficient defaults
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 78
Each tool and what it can reach — statically extracted from the published source.
cf_d1_queryreads sensitive datacf_kv_list_keysreads sensitive datacf_workers_list_secretsreads sensitive datacf_ai_gateway_create_gatewayno sensitive capabilitycf_ai_gateway_delete_gatewayno sensitive capabilitycf_ai_gateway_get_gatewayno sensitive capabilitycf_ai_gateway_get_logno sensitive capabilitycf_ai_gateway_list_gatewaysno sensitive capabilitycf_ai_gateway_list_logsno sensitive capabilitycf_ai_gateway_update_gatewayno sensitive capability
Show 68 more tools ↓
cf_ai_search_queryno sensitive capabilitycf_cache_purgeno sensitive capabilitycf_d1_create_databaseno sensitive capabilitycf_d1_delete_databaseno sensitive capabilitycf_d1_describe_tableno sensitive capabilitycf_d1_executeno sensitive capabilitycf_d1_exportno sensitive capabilitycf_d1_get_databaseno sensitive capabilitycf_d1_list_databasesno sensitive capabilitycf_d1_list_tablesno sensitive capabilitycf_dns_bulk_createno sensitive capabilitycf_dns_bulk_updateno sensitive capabilitycf_dns_create_recordno sensitive capabilitycf_dns_delete_recordno sensitive capabilitycf_dns_export_recordsno sensitive capabilitycf_dns_get_recordno sensitive capabilitycf_dns_get_zoneno sensitive capabilitycf_dns_list_recordsno sensitive capabilitycf_dns_list_zonesno sensitive capabilitycf_dns_update_recordno sensitive capabilitycf_kv_bulk_deleteno sensitive capabilitycf_kv_bulk_putno sensitive capabilitycf_kv_create_namespaceno sensitive capabilitycf_kv_deleteno sensitive capabilitycf_kv_delete_namespaceno sensitive capabilitycf_kv_getno sensitive capabilitycf_kv_list_namespacesno sensitive capabilitycf_kv_putno sensitive capabilitycf_pages_get_deploymentno sensitive capabilitycf_pages_get_projectno sensitive capabilitycf_pages_list_deploymentsno sensitive capabilitycf_pages_list_domainsno sensitive capabilitycf_pages_list_projectsno sensitive capabilitycf_pages_purge_build_cacheno sensitive capabilitycf_pages_rollbackno sensitive capabilitycf_r2_create_bucketno sensitive capabilitycf_r2_delete_bucketno sensitive capabilitycf_r2_get_bucketno sensitive capabilitycf_r2_list_bucketsno sensitive capabilitycf_tunnel_createno sensitive capabilitycf_tunnel_deleteno sensitive capabilitycf_tunnel_getno sensitive capabilitycf_tunnel_listno sensitive capabilitycf_tunnel_list_configsno sensitive capabilitycf_tunnel_list_connectionsno sensitive capabilitycf_tunnel_update_configno sensitive capabilitycf_vectorize_create_indexno sensitive capabilitycf_vectorize_create_metadata_indexno sensitive capabilitycf_vectorize_delete_indexno sensitive capabilitycf_vectorize_delete_metadata_indexno sensitive capabilitycf_vectorize_get_indexno sensitive capabilitycf_vectorize_get_index_infono sensitive capabilitycf_vectorize_list_indexesno sensitive capabilitycf_vectorize_list_metadata_indexesno sensitive capabilitycf_workers_ai_list_modelsno sensitive capabilitycf_workers_ai_run_modelno sensitive capabilitycf_workers_create_deploymentno sensitive capabilitycf_workers_delete_bindingno sensitive capabilitycf_workers_delete_secretno sensitive capabilitycf_workers_get_schedulesno sensitive capabilitycf_workers_get_scriptno sensitive capabilitycf_workers_get_settingsno sensitive capabilitycf_workers_list_deploymentsno sensitive capabilitycf_workers_list_scriptsno sensitive capabilitycf_workers_list_versionsno sensitive capabilitycf_workers_put_schedulesno sensitive capabilitycf_workers_put_secretno sensitive capabilitycf_workers_upsert_bindingno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (78 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.8.0 latest |
A 97/100 | 0 | 1.12.1 | 2026-07-28 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan cloudflare-blade-mcp --onlineMore in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.
A standalone MCP stdio bridge for Affinity by Canva's local MCP SSE server.