OpenAI Codex security directory

Cloudflare

Published by Cloudflare

High risk

Combines Cloudflare development guidance with its official API MCP server. Work with Workers, Pages, storage, AI agents, networking and security services. Uses authenticated account access and supports deployment through Wrangler.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Drives Chrome via DevTools MCP for performance audits: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Deploys, rolls back and deletes Workers and storage via Wrangler: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
  • Deletes buckets, databases, KV keys, objects and secrets: Can delete records, files, projects, messages, or resources that may be difficult to recover.
  • Manages Worker secrets and security controls: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Can execute code, commands, or queries: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.

Available capabilities

This add-on exposes 9 tools or capabilities.

  • agents-sdk
  • building-ai-agent-on-cloudflare
  • building-mcp-server-on-cloudflare
  • cloudflare
  • durable-objects
  • sandbox-sdk
  • web-perf
  • workers-best-practices
  • wrangler

The interactive security report will load automatically.