Cloudflare DNS
api.cloudflare.com_dns
Cloudflare DNS provides authoritative DNS services with DDoS protection and global anycast. Manage DNS records (A, AAAA, CNAME, MX, TXT, etc.), configure DNSSEC, import/export zone files, run batch operations, and access DNS query analytics.
Enable this service
This service is in the catalog but not part of v1 launch billing. To use it, run the command below and provide your own API key in the local config page — the gateway will call it under your account.
api_key
free
1.0
https://api.cloudflare.com/client/v4
Aug 7, 2026
Health
This is a community-maintained manifest. Health monitoring is not available because this service doesn't host its own /.well-known/agent endpoint yet. Learn more about trust levels →
Top Capabilities
Most commonly used operations — ready to call without drill-down.
dns_records_list
GETList, search, sort, and filter DNS records for a zone.
GET https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records
zone_id (string, required) — The zone ID.
type (string) — DNS record type filter: A, AAAA, CNAME, MX, TXT, NS, SRV, CAA, etc.
name (string) — DNS record name filter (e.g., example.com).
content (string) — DNS record content filter (e.g., IP address).
proxied (boolean) — Filter by Cloudflare proxy status.
...and 5 more parameters
dns_records_get
GETRetrieve details of a specific DNS record by ID.
GET https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{dns_record_id}
zone_id (string, required) — The zone ID.
dns_record_id (string, required) — The DNS record ID.
dnssec_get
GETRetrieve DNSSEC status and configuration for a zone.
GET https://api.cloudflare.com/client/v4/zones/{zone_id}/dnssec
zone_id (string, required) — The zone ID.
All Capabilities (17)
dns_analytics (2)
Retrieve summarized DNS query analytics and aggregate metrics.
Retrieve DNS analytics grouped by time interval for trend analysis.
dns_records (10)
Execute batched create, update, and delete operations in a single call.
Create a new DNS record in a zone.
Delete a DNS record from a zone.
Export DNS records as a BIND zone file.
Retrieve details of a specific DNS record by ID.
Import DNS records from a BIND zone file.
List, search, sort, and filter DNS records for a zone.
Partially update an existing DNS record.
Trigger asynchronous DNS record discovery for a zone.
Overwrite an existing DNS record entirely.
dnssec (3)
Delete DNSSEC configuration and signing keys for a zone.
Retrieve DNSSEC status and configuration for a zone.
Enable or disable DNSSEC for a zone.
dns_settings (2)
Retrieve DNS settings for a zone.
Modify DNS settings for a zone.
Agent Preview
This is what an AI agent sees when it discovers this service via the Gateway:
Service: Cloudflare DNS
Description: Cloudflare DNS provides authoritative DNS services with DDoS protection and global anycast. Manage DNS records (A, AAAA, CNAME, MX, TXT, etc.), configure DNSSEC, import/export zone files, run batch operations, and access DNS query analytics.
Auth: api_key
Capabilities (17 total):
dns_analytics (2):
- dns_analytics_report: Retrieve summarized DNS query analytics and aggregate metrics.
- dns_analytics_report_bytime: Retrieve DNS analytics grouped by time interval for trend analysis.
dns_records (10):
- dns_records_batch: Execute batched create, update, and delete operations in a single call.
- dns_records_create: Create a new DNS record in a zone.
- dns_records_delete: Delete a DNS record from a zone.
- dns_records_export: Export DNS records as a BIND zone file.
- dns_records_get: Retrieve details of a specific DNS record by ID.
- dns_records_import: Import DNS records from a BIND zone file.
- dns_records_list: List, search, sort, and filter DNS records for a zone.
- dns_records_patch: Partially update an existing DNS record.
- dns_records_scan: Trigger asynchronous DNS record discovery for a zone.
- dns_records_update: Overwrite an existing DNS record entirely.
dnssec (3):
- dnssec_delete: Delete DNSSEC configuration and signing keys for a zone.
- dnssec_get: Retrieve DNSSEC status and configuration for a zone.
- dnssec_update: Enable or disable DNSSEC for a zone.
dns_settings (2):
- dns_settings_get: Retrieve DNS settings for a zone.
- dns_settings_update: Modify DNS settings for a zone.
Top capabilities (ready to call):
- dns_records_list: GET /zones/{zone_id}/dns_records
- dns_records_get: GET /zones/{zone_id}/dns_records/{dns_record_id}
- dnssec_get: GET /zones/{zone_id}/dnssec