Cloudflare MCP Server vs MCP Server Kubernetes

A side-by-side look at pricing, capabilities, pros, cons, and our editorial scores.

	Cloudflare MCP Server MCP Servers	MCP Server Kubernetes MCP Servers
Tagline	Official suite of remote MCP servers that let Claude, Cursor, and other agents read and control your Cloudflare account.	MCP server that lets Claude, Cursor, VS Code and other agents drive kubectl and Helm against real clusters
Category	MCP Servers	MCP Servers
Pricing	Freemium· Free: $0 USD · Team: $4 USD per user/month · Enterprise: $21 USD per user/month	Free· Free and open source (MIT license). Kubernetes cluster and any AI client subscriptions billed separately.
Model	—	—
Editorial score	—	—
Use cases	Debugging Workers with live logs from chatDeploying and configuring Workers bindingsGrounded Q&A over Cloudflare developer docsQuerying Radar for real-time internet traffic dataPulling audit logs for compliance answersRunning a headless browser via Browser RenderingAutoRAG pipelines against R2-hosted corporaReviewing Cloudflare One CASB findingsDNS analytics and Logpush inspectionBuilding custom MCP servers from the Demo Day template	AI-driven pod troubleshooting and log triageNatural-language kubectl for platform engineersHelm chart install and upgrade from a chat clientDeployment rollouts and scaling via Claude Desktop or CursorNode cordon and drain during maintenanceCleanup of pods stuck in Evicted, ContainerStatusUnknown or CrashLoopBackOffPort-forwarding services for local debuggingRead-only cluster inspection in non-destructive modeAuditable agent actions via OpenTelemetry traces
Pros	Official, first-party servers maintained by Cloudflare with 4k+ GitHub stars and active development. Remote-hosted at stable URLs so most clients need only a URL and OAuth login, no local install. Split into 16 focused servers so agents get relevant tools without prompt bloat. Covers most of the Cloudflare platform: Workers, R2, KV, D1, Radar, DNS analytics, AI Gateway, AutoRAG, Browser Rendering, audit logs, CASB. Works with any MCP-capable client - Claude Desktop, Claude Code, Cursor, Windsurf, and OpenAI Responses API. Apache 2.0 source is on GitHub, so teams can self-host, audit, or extend any server. Docs AI Search server gives agents grounded answers over the full developers.cloudflare.com corpus.	Broad kubectl surface — CRUD on any resource, logs, exec, port-forward, rollouts, scale, cordon/drain and stuck-pod cleanup out of the box First-class Helm v3 support including install, upgrade, uninstall and template with custom values Built-in /k8s-diagnose prompt gives the model a structured troubleshooting recipe rather than free-styling kubectl Non-destructive read-only mode and automatic secrets masking reduce the blast radius of an agent going off-script Works with the mainstream MCP clients (Claude Desktop, Claude Code, Cursor, VS Code, Codex CLI) via a single npx command Optional OpenTelemetry tracing on every tool call, so agent actions are auditable in your existing observability stack MIT-licensed, TypeScript, actively released (v4.x line in 2026) with 1.5k+ stars and 270+ forks
Cons	Only useful if you already run on Cloudflare - it is not a general cloud MCP. Advanced capabilities inherit Cloudflare paywalls (Browser Rendering, AutoRAG, CASB, Cloudflare One all require paid plans). Write-capable tools mean a compromised or over-permissioned token can push destructive changes; scoping API tokens carefully is on you. Because the servers are hosted by Cloudflare, your agent's queries and returned data traverse Cloudflare infrastructure - not ideal for teams that want everything to stay in-VPC. OAuth and remote-MCP support is still uneven across MCP clients, so setup varies and some clients need a manual token instead. Sixteen separate endpoints can be confusing - discovery of which server owns which capability is not always obvious from client-side.	Runs with whatever RBAC your kubeconfig has — a compromised or over-eager agent can delete production resources unless you enable non-destructive mode No native multi-cluster policy layer or approval workflow; safety relies on kubeconfig scoping and the client's tool-approval UI Requires kubectl (and Helm for chart operations) preinstalled and on PATH — not a zero-dependency install Node.js / npx runtime is another moving part to manage on operator workstations or bastion hosts Advanced cluster features (custom operators, service meshes, cloud-provider APIs) are only reachable through generic apply/patch, not first-class tools
Website	github.com	github.com

Pick Cloudflare MCP Server if

✅ Official, first-party servers maintained by Cloudflare with 4k+ GitHub stars and active development.
✅ Remote-hosted at stable URLs so most clients need only a URL and OAuth login, no local install.
✅ Split into 16 focused servers so agents get relevant tools without prompt bloat.
✅ Covers most of the Cloudflare platform: Workers, R2, KV, D1, Radar, DNS analytics, AI Gateway, AutoRAG, Browser Rendering, audit logs, CASB.

Pick MCP Server Kubernetes if

✅ Broad kubectl surface — CRUD on any resource, logs, exec, port-forward, rollouts, scale, cordon/drain and stuck-pod cleanup out of the box
✅ First-class Helm v3 support including install, upgrade, uninstall and template with custom values
✅ Built-in /k8s-diagnose prompt gives the model a structured troubleshooting recipe rather than free-styling kubectl
✅ Non-destructive read-only mode and automatic secrets masking reduce the blast radius of an agent going off-script

Compare a different pair →