Finds, creates, and updates DNS records, reports a zone's firewall and bot settings, and maps tunnels, pools, and account roles.
20actions available
Every action runs live through MCP. Nothing to build, nothing to maintain.
Ayro creates a new DNS record within a customer's zone, pointing domains to the right servers or services. Your team no longer has to manually set up records through the Cloudflare dashboard.
Ayro modifies an existing DNS record to fix misconfigurations or redirect traffic. Support agents can now resolve DNS issues without leaving the help desk.
Ayro retrieves all DNS zones in a Cloudflare account so your team can identify which domains are managed there. This saves time searching through the account manually.
Each card is one request a support team gets, and the Cloudflare actions Ayro runs to close it.
Ayro searches the zone for an existing record first, adds the new one if nothing matches, and amends only the fields that need to change on a record that already exists.
Ayro reads the zone's Bot Fight Mode or Bot Management configuration, lists the firewall rules currently in force, and shows which custom WAF lists the account maintains.
Ayro lists the cloudflared tunnels with their IDs and statuses, the load balancer pools behind them, and the monitors watching those pools.
Ayro identifies which account the domain belongs to, creates the zone for it, and reports the members who can change it along with their roles and two-factor status.
How it works
Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Ayro reads the Cloudflare actions it has and picks the ones a request needs.
Authorize the Cloudflare account your team already uses — one consent screen, no API keys, no mapping tables. Ayro can only do what you granted that account, and you can disconnect it at any time.
Describe the job the way you would hand it to a teammate. Ayro maps it to the Cloudflare actions that close it and chains as many as the request needs.
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started freeCloudflare · Ayro
What can you do in Cloudflare without me setting anything up?
These, right away:
Great, let's start with the first one.
FAQ
Setup, permissions, and the limits of what Ayro can do inside Cloudflare.
Yes. Create DNS record and Update DNS record both require write privileges and make live changes to the zone, and Delete DNS Record is immediate and irreversible. Update Zone's own guidance is to confirm the zone ID and the intended change with a person first, which is worth applying to record changes too.
All 20 actions your agent can call on Cloudflare, straight from the live MCP connection.
Create a new DNS record within a specific zone.
Create a new empty custom list for use in WAF rules and filters.
Creates a new DNS zone (domain) in Cloudflare.
Delete a DNS record within a specific zone.
Delete a WAF list.
Delete a zone.
Retrieve a zone's Bot Management configuration (Bot Fight Mode / Super Bot Fight Mode / Enterprise Bot Management).
Fetch all WAF lists (no items) for an account.
Lists all members of a Cloudflare account with their roles, permissions, and status.
List all Cloudflare accounts you have ownership or verified access to.
List and search DNS records in a Cloudflare zone.
List firewall rules for a specific DNS zone.
List all load-balancer monitors in a Cloudflare account.
List all load balancer pools in a Cloudflare account.
List Cloudflare Tunnel (cloudflared) tunnels in an account to discover tunnel IDs, names, and statuses.
Lists, searches, sorts, and filters zones in the authenticated account.
Update an existing DNS record within a specific zone.
Update the description of a WAF list (cannot update items).
Update a remotely-managed Cloudflare Tunnel's configuration (ingress rules and routing).
Update properties of an existing zone; changes apply immediately to the live zone.
Same connection, same setup. Pick the next one your team already uses.
Answers from your own search index, keeps records current, adds the synonyms and rules that fix bad matches, and surfaces zero-result queries.
Reports which errors are firing and how volume is trending, triages them in bulk, manages project access, and drives GDPR data requests to completion.
Provisions Droplets, databases, and clusters on request, reports what is running, edits DNS records, and keeps resource tags and firewalls in order.
Reports check-ins, deployments, exceptions, and custom events into Honeybadger, and uploads the source maps behind readable stack traces.
Finds the collection or spec behind a question, stands up mock servers, runs monitors and reports the result, and routes changes through forks and pull requests.
Fetches raw file contents and commit diffs without cloning, enumerates repositories and their languages, and confirms the connected identity.

Authorize the account and your agent has all 20 actions from the first conversation.
