How is this different from connecting Cloudflare Workers Bindings MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Cloudflare Workers Bindings MCP API changes?

We track the Cloudflare Workers Bindings MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Cloudflare Workers Bindings tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Cloudflare Workers Bindings?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Cloudflare Workers Bindings MCP server myself?

No. TrustGate connects to the Cloudflare Workers Bindings MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Cloudflare Workers Bindings directly.

Connect Cloudflare Workers Bindings MCP to your AI agents, securely.

Q: Is Cloudflare Workers Bindings MCP secure?

The server itself exposes 24 tools, and some of them can write to your Cloudflare Workers Bindings account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Cloudflare Workers Bindings.

One secured endpoint for every Cloudflare Workers Bindings call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Cloudflare Workers Bindings MCP now

What your agents can ask once Cloudflare Workers Bindings MCP is connected.

“List my Cloudflare Workers”
“Create a KV namespace for session storage”
“Which R2 buckets exist in this account?”

“Run a query against this D1 database”
“List my Hyperdrive configurations”
“Get the source code of this Worker”

Select the tools your AI agents can call

24 tools from the Cloudflare Workers Bindings MCP schema.

Showing 24 tools

kv_namespaces_listreadList all of the KV namespaces in your Cloudflare account.
kv_namespace_getreadGet details of a KV namespace in your Cloudflare account.
kv_namespace_createwriteCreate a new KV namespace in your Cloudflare account.
kv_namespace_updatewriteUpdate the title of a KV namespace in your Cloudflare account.
kv_namespace_deletehigh riskDelete a KV namespace in your Cloudflare account.
r2_buckets_listreadList R2 buckets in your Cloudflare account.
r2_bucket_getreadGet details of an R2 bucket in your Cloudflare account.
r2_bucket_createwriteCreate a new R2 bucket in your Cloudflare account.
r2_bucket_deletehigh riskDelete an R2 bucket in your Cloudflare account.
d1_databases_listreadList all of the D1 databases in your Cloudflare account.
d1_database_getreadGet a D1 database in your Cloudflare account.
d1_database_createwriteCreate a new D1 database in your Cloudflare account.
d1_database_queryhigh riskRun a raw SQL query against a D1 database in your Cloudflare account.
d1_database_deletehigh riskDelete a D1 database in your Cloudflare account.
hyperdrive_configs_listreadList Hyperdrive configurations in your Cloudflare account.
hyperdrive_config_getreadGet details of a specific Hyperdrive configuration in your Cloudflare account.
hyperdrive_config_createwriteCreate a new Hyperdrive configuration in your Cloudflare account.
hyperdrive_config_editwriteEdit a Hyperdrive configuration in your Cloudflare account.
hyperdrive_config_deletehigh riskDelete a Hyperdrive configuration in your Cloudflare account.
workers_listreadList all Workers in your Cloudflare account.
workers_get_workerreadGet the details of a Cloudflare Worker.
workers_get_worker_codereadGet the source code of a Cloudflare Worker.
search_cloudflare_documentationreadSearch the Cloudflare documentation.
migrate_pages_to_workers_guidereadRead the guide before migrating Pages projects to Workers.

What Cloudflare Workers Bindings MCP exposes

Cloudflare Workers Bindings MCP groups its 24 tools into 6 categories, each with a suggested starting policy.

Category	Covers	Access	Suggested policy
KV Namespaces	Listing, creating, updating, reading and deleting KV namespaces	Read / Write	Require approval for deletes
Hyperdrive	Hyperdrive configuration listing, creation, detail, editing and deletion	Read / Write	Require approval for deletes; protect origin credentials
R2 Buckets	Listing, creating, reading and deleting R2 buckets	Read / Write	Require approval for bucket deletion
D1 Databases	Listing, creating, reading, deleting D1 databases and running SQL	Read / Write	Approve raw SQL against production databases
Workers	Worker listing, details and source code	Read	Restrict access to source code
Docs	Documentation search and migration guides	Read	Allow documentation searches