Skip to content

Agent Lee

An AI co-pilot built into the Cloudflare dashboard. Ask questions about your account, take actions, and run diagnostics, all in plain language.

With Agent Lee, you can:

  • Ask questions about your account configuration and get answers based on your actual data.
  • Make changes to DNS records, zone settings, and security rules, with your approval required before anything executes.
  • Run network diagnostics like DNS lookups and certificate checks.
  • Generate inline charts and visualizations from your account analytics.

To get started, log in to the Cloudflare dashboard and select Ask AI in the upper-right corner of any dashboard page.


Capabilities

Account-aware answers

Agent Lee answers based on your actual account data, not just documentation. When you ask a question, it fetches your zone configuration, DNS records, and security settings before responding.

Write operations

You can ask Agent Lee to create, update, or delete resources across your account using natural language. Every write operation requires your explicit approval before it executes, Agent Lee shows you exactly what it plans to do and waits for confirmation.

Example requests:

  • "Add an A record for blog.example.com pointing to 192.0.2.10."
  • "Enable Always Use HTTPS on my zone."
  • "Set the SSL mode for example.com to Full (strict)."

Network diagnostics

Run diagnostic commands to troubleshoot connectivity and configuration issues:

  • DNS lookups: Query DNS records for any domain
  • Certificate checks: Inspect TLS/SSL certificates
  • Domain information: Look up WHOIS and RDAP registration data

Generative UI

Agent Lee renders inline charts and data visualizations directly in the chat panel based on your account analytics. Example requests:

  • "Show me a chart of my traffic over the last 7 days."
  • "What does my error rate look like for the past 24 hours?"

Data access and privacy

What Agent Lee can access

  • Zone settings, DNS records, firewall and WAF rules
  • Workers scripts, routes, and bindings
  • R2 bucket names, Cloudflare Tunnel configuration, cache rules
  • Registrar domain data, account plan and usage metadata

Agent Lee fetches this data on demand when your question requires it.

What Agent Lee cannot access

  • Payment methods, billing history, or invoice details
  • Account passwords, login credentials, or API tokens
  • Raw log data or Logpush datasets
  • Data from other Cloudflare accounts

Conversation storage

Conversations are stored per user using Durable Objects, isolated to your account. Agent Lee does not currently reference previous conversation context when responding.

Data usage

Agent Lee does not use your conversations, prompts, or account data to train AI models, and does not share your data with other Cloudflare customers. Refer to the Cloudflare Privacy Policy for more details.


Limitations

Agent Lee cannot:

  • Write Workers scripts or generate application code
  • Replace Cloudflare Support for billing issues, account recovery, or outages
  • Access payment methods, billing history, or API tokens
  • Operate across multiple accounts: sessions are scoped to your authenticated account
  • Remember previous conversations: each session starts fresh
  • Query raw log data or Logpush datasets
  • Execute write operations without your explicit approval

Agent Lee is entirely optional. If you do not open the Ask AI panel, none of your data is sent to or processed by it.


Built on Cloudflare

Agent Lee is built on Cloudflare's own developer platform using the same primitives available to any Cloudflare developer.

ComponentRole
Agents SDKAgent lifecycle, state management, and scheduling
Durable ObjectsPer-user conversation storage and write approval gate
Workers AILLM inference
Cloudflare MCP serverTool definitions for Cloudflare API operations