pi Cloudflare MCP Extension

A pi package that bridges pi to the official Cloudflare remote MCP server (https://mcp.cloudflare.com/mcp). Provides broad API access: DNS, zones, email routing, account management, workers, and more.

It exposes a small, generic bridge instead of registering dozens of Cloudflare tools by default. This keeps pi's tool list compact while still allowing the model to discover and call any Cloudflare MCP tool.

Installation

pi install npm:@khmuhtadin/pi-cloudflare-mcp

Registered tools

• cloudflare_mcp_list_tools — list tools exposed by the Cloudflare MCP server.
• cloudflare_mcp_call_tool — call any Cloudflare MCP tool by name with JSON arguments.

Slash commands

• /cloudflare-mcp-auth-url — start OAuth and print the Cloudflare authorization URL to the terminal.
• /cloudflare-mcp-auth <full-redirect-url-or-code> — finish OAuth with the full redirect URL or the code value from that URL.
• /cloudflare-mcp-token-status — show token status without exposing token values.
• /cloudflare-mcp-reset — clear stored OAuth credentials.
• /cloudflare-mcp-register [tool1,tool2|*] — optional: register selected MCP tools as native pi tools with a cloudflare_ prefix.

OAuth flow

1. Start or reload pi.

2. Run:

   /cloudflare-mcp-auth-url

3. Open the printed Cloudflare authorization URL in your browser.

4. After approval, the browser redirects to http://localhost:9877/callback?.... A local server is not required; copy the full redirect URL from the address bar.

5. Run:

   /cloudflare-mcp-auth <full-redirect-url>

   You can also paste only the code query parameter value, but do not include code=, &state=..., or whitespace.

6. Test by asking pi to use cloudflare_mcp_list_tools.

Credentials are stored at:

~/.pi/agent/extensions/cloudflare-mcp/auth-store.json

Configuration

Optional environment variables:

• CLOUDFLARE_MCP_URL — defaults to https://mcp.cloudflare.com/mcp.
• CLOUDFLARE_MCP_REDIRECT_URL — defaults to http://localhost:9877/callback.
• CLOUDFLARE_MCP_STORE_PATH — defaults to ~/.pi/agent/extensions/cloudflare-mcp/auth-store.json.
• CLOUDFLARE_MCP_TIMEOUT_MS — defaults to 10000.
• CLOUDFLARE_MCP_SCOPE — defaults to read write.

Development

npm install
npm run typecheck
npm pack --dry-run

License

MIT