# Cloudflare DNS Analytics MCP Server: Governed AI Access

Cloudflare DNS Analytics's MCP server includes 5 different actions available to any connected model or AI agent. When registered with Barndoor, you can ensure centralized governance, visibility, and control across every AI agent your team uses.

**Tools 5**  
**Capabilities [Read](/content/integration-capability/read/index.html)**  
**Category [DevOps & Infrastructure](/content/integration-category/devops-infrastructure/index.html)**  
**Type Official Remote**

## What can AI agents do with the Cloudflare DNS Analytics MCP server?

### Tools Available

- **zones_list**  
  - **read**  
  - List Cloudflare zones under the active account with optional filters.
- **zone_details**  
  - **read**  
  - Retrieve details for a specific Cloudflare zone by ID.
- **dns_report**  
  - **read**  
  - Fetch DNS analytics metrics for a Cloudflare zone ID; response cache analytics require a paid Cloudflare plan.
- **show_zone_dns_settings**  
  - **read**  
  - Show DNS settings for a specific Cloudflare zone ID.
- **show_account_dns_settings**  
  - **read**  
  - Show DNS settings for the active Cloudflare account.

[See full list →](https://docs.barndoor.ai/mcp-servers/cloudflare_dns_analytics)

## Use cases for Cloudflare DNS Analytics

- **DNS Analytics**  
  - Fetch DNS analytics metrics and reports, Monitor DNS query performance
- **Zone Management**  
  - List and search Cloudflare zones, Retrieve zone details by ID
- **DNS Settings**  
  - Show account-level DNS settings, Show per-zone DNS configuration
- **Network Monitoring**  
  - Monitor zone DNS health and config, Analyze response cache analytics

## What are the risks of using the Cloudflare DNS Analytics MCP without an AI gateway?

- **Uncontrolled reads**  
  - AI agents can pull data out of Cloudflare DNS Analytics with no visibility into what was accessed.
- **Ungoverned writes**  
  - Agents can create or modify records in Cloudflare DNS Analytics with no approval step.
- **Destructive actions**  
  - Agents can delete or overwrite Cloudflare DNS Analytics data with no approval gate or audit trail.
- **Native OAuth is all-or-nothing**  
  - Connecting directly grants an agent everything your user account can do in Cloudflare DNS Analytics, with no per-tool scoping.

## Why connect Cloudflare DNS Analytics with the Barndoor AI gateway?

Barndoor MCP Governance is the gateway between your AI agents and the tools they use.

| At a glance | Available? |
| --- | --- |
| Fine-grained access controls policies per agent, team, role, user, MCP server and tool call | Yes |
| Approval required before write/destructive actions | Yes (configurable per role) |
| Full audit log (reads and writes) | Yes |
| Sensitive data detection before it reaches a model or agent | Yes |
| Instant access revocation | Yes |
| SOC 2 Type II compliant | Yes |

- **Centralized MCP management**  
  - One place to manage and control every MCP server across the organization so your team has an approved catalog of MCP servers that employees and AI agents connect through.
- **Universal connection**  
  - One universal URL works across every AI provider your team uses.
- **Fine-grained access controls**  
  - Set access policies for how AI is connecting with Cloudflare DNS Analytics based on human identities, agent profiles, tool-access, context, and data fields.
- **Protect sensitive data**  
  - Keeps sensitive data from reaching a model or AI agent with PII detection, masking, tokenization, redaction, and more.
- **Observability**  
  - Real-time reporting and dashboards that give you visibility into what AI is doing with Cloudflare DNS Analytics, how policies are being enforced, and who (human or agent) is doing what.
- **Enterprise-grade security**  
  - Stay compliant with audit trails and logging.

## Getting started with Cloudflare DNS Analytics in Barndoor

1. Connect the Cloudflare DNS Analytics MCP server once
2. Define your policies
3. Go live across every AI client

[See the full setup guide →](https://docs.barndoor.ai/mcp-servers/cloudflare_dns_analytics#setup-instructions)

## Frequently asked questions

### What is MCP?

MCP (Model Context Protocol) is the open standard that lets AI models and agents connect to external tools and data sources through a common interface, instead of a custom integration for every tool. Cloudflare DNS Analytics is an MCP server that exposes a defined set of tools an AI agent can call. Barndoor sits at that connection point, applying access policies and audit logging to every tool call regardless of which AI client is making it.

### Is Barndoor secure?

Yes. Barndoor is SOC 2 Type II compliant. Barndoor enforces fine-grained access control, requires approval before destructive actions, protects sensitive data with data loss prevention, and logs every action for audit.

### How are Cloudflare DNS Analytics schema changes handled?

Barndoor tracks tool and schema changes on Cloudflare DNS Analytics. New or changed tools inherit deny-by-default access until an admin reviews and approves them, keeping runtime enforcement current without manual reconfiguration. Every schema change is captured in the audit trail alongside who approved it.

### Can I deploy custom-built MCP servers?

Yes. Barndoor supports customer-built MCPs, so internal tools and systems your team builds get the same policy enforcement and audit trail as Barndoor MCPs and official MCPs.

### Do users have to enter tokens manually?

No. Barndoor brokers the OAuth connection to Cloudflare DNS Analytics centrally, so users and agents never handle or store a standing token themselves. Access is granted and revoked through policy instead of shared credentials.

### How can I get started with Cloudflare DNS Analytics and Barndoor?

Connect Cloudflare DNS Analytics once, define your access policies, and go live across every AI client your team uses. Setup takes three steps: connect the server, define policies by role or agent, and roll out to Claude, Cursor, ChatGPT, and any other MCP-compatible client. Request a demo at [barndoor.ai/get-a-demo](/content/get-a-demo/index.html) to learn more.