How do I install the Cloudflare Ops skill?

Run npx skillmds@latest add qhkm/cloudflare-ops in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cloudflare Ops skill do?

Manage Cloudflare DNS records, Workers, KV, and R2 via the API v4. It is listed under Integrations & APIs on SkillMD.

Is Cloudflare Ops safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cloudflare Ops?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cloudflare Ops free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Cloudflare Ops?

qhkm (@qhkm) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cloudflare Ops by qhkm — Agent Skill

Name: Cloudflare Ops
Author: qhkm

File contents

Cloudflare Ops Skill

Manage DNS records, Workers, KV namespaces, and R2 buckets using the Cloudflare API v4.

Setup

Go to dash.cloudflare.com/profile/api-tokens → Create Token
Use the "Edit zone DNS" template for DNS, or create custom for Workers/KV/R2
Get Zone ID and Account ID from any domain's overview page (right sidebar)

export CF_API_TOKEN="xxx..."
export CF_ZONE_ID="zone-id-from-dashboard"
export CF_ACCOUNT_ID="account-id-from-dashboard"

List DNS Records

curl -s "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  | jq '.result[] | {id, name, type, content, ttl}'

Create a DNS Record

curl -s -X POST "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "A",
    "name": "app.example.com",
    "content": "1.2.3.4",
    "ttl": 3600,
    "proxied": true
  }' | jq '.result | {id, name, type, content}'

Delete a DNS Record

RECORD_ID="record-id-from-list"
curl -s -X DELETE "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records/$RECORD_ID" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  | jq '.success'

List Workers

curl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/workers/scripts" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  | jq '.result[] | {id, modified_on}'

KV: Read/Write

# List namespaces
curl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  | jq '.result[] | {id, title}'

# Write a key
KV_NS_ID="namespace-id"
curl -s -X PUT "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces/$KV_NS_ID/values/mykey" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: text/plain" \
  -d "my value"

# Read a key
curl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces/$KV_NS_ID/values/mykey" \
  -H "Authorization: Bearer $CF_API_TOKEN"

Tips

proxied: true routes traffic through Cloudflare (orange cloud)
Rate limit: 1,200 requests per 5 minutes
API tokens are more secure than global API keys — always prefer tokens
Zone ID and Account ID are on the domain overview page (right sidebar)

---name: cloudflare-opsdescription: Manage Cloudflare DNS records, Workers, KV, and R2 via the API v4.license: MIT---# Cloudflare Ops SkillManage DNS records, Workers, KV namespaces, and R2 buckets using the Cloudflare API v4.## Setup1. Go to [dash.cloudflare.com/profile/api-tokens](https://dash.cloudflare.com/profile/api-tokens) → Create Token2. Use the "Edit zone DNS" template for DNS, or create custom for Workers/KV/R23. Get Zone ID and Account ID from any domain's overview page (right sidebar)```bashexport CF_API_TOKEN="xxx..."export CF_ZONE_ID="zone-id-from-dashboard"export CF_ACCOUNT_ID="account-id-from-dashboard"```## List DNS Records```bashcurl -s "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records" \ -H "Authorization: Bearer $CF_API_TOKEN" \ | jq '.result[] | {id, name, type, content, ttl}'```## Create a DNS Record```bashcurl -s -X POST "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records" \ -H "Authorization: Bearer $CF_API_TOKEN" \ -H "Content-Type: application/json" \ -d '{ "type": "A", "name": "app.example.com", "content": "1.2.3.4", "ttl": 3600, "proxied": true }' | jq '.result | {id, name, type, content}'```## Delete a DNS Record```bashRECORD_ID="record-id-from-list"curl -s -X DELETE "https://api.cloudflare.com/client/v4/zones/$CF_ZONE_ID/dns_records/$RECORD_ID" \ -H "Authorization: Bearer $CF_API_TOKEN" \ | jq '.success'```## List Workers```bashcurl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/workers/scripts" \ -H "Authorization: Bearer $CF_API_TOKEN" \ | jq '.result[] | {id, modified_on}'```## KV: Read/Write```bash# List namespacescurl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces" \ -H "Authorization: Bearer $CF_API_TOKEN" \ | jq '.result[] | {id, title}'# Write a keyKV_NS_ID="namespace-id"curl -s -X PUT "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces/$KV_NS_ID/values/mykey" \ -H "Authorization: Bearer $CF_API_TOKEN" \ -H "Content-Type: text/plain" \ -d "my value"# Read a keycurl -s "https://api.cloudflare.com/client/v4/accounts/$CF_ACCOUNT_ID/storage/kv/namespaces/$KV_NS_ID/values/mykey" \ -H "Authorization: Bearer $CF_API_TOKEN"```## Tips- `proxied: true` routes traffic through Cloudflare (orange cloud)- Rate limit: 1,200 requests per 5 minutes- API tokens are more secure than global API keys — always prefer tokens- Zone ID and Account ID are on the domain overview page (right sidebar)

Frequently asked questions

Cloudflare Ops