Codex + Cloudflare
OpenAILightweight open-source terminal agent that reads and writes files, runs commands, and browses the web in a sandbox. Made by OpenAI.
-
Install Codex
Install the Codex CLI. macOS and Linux are fully supported; use WSL2 on Windows. For Homebrew or other install methods, see the Codex CLI setup guide ↗.
Terminal window npm install -g @openai/codex -
Install Cloudflare Skills
Terminal window npx skills add https://github.com/cloudflare/skills -
Add Cloudflare MCP servers
For a full list of available Cloudflare MCP servers, refer to the repository on GitHub ↗.
Terminal window codex mcp add cloudflare --url https://mcp.cloudflare.com/mcpcodex mcp add cloudflare-docs --url https://docs.mcp.cloudflare.com/mcp -
Launch Codex
Start Codex from the root of your project, where
wrangler.jsonclives (if it already exists).Terminal window codex -
Try a prompt
For example:
Create a Cloudflare Workers application that serves as a backend API server.
The ways Codex reaches Cloudflare. Expand any section to learn more.
Cloudflare Skills
Persistent platform context that teaches Codex how Cloudflare works.
Skills are instructions the agent loads on demand. The cloudflare/skills bundle ships eight Skills covering every layer of the platform — so the agent knows your conventions without you re-explaining them.
- cloudflare Comprehensive platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and IaC (Terraform, Pulumi).
- agents-sdk Building stateful AI agents with state, scheduling, RPC, MCP servers, email, and streaming chat.
- durable-objects Stateful coordination (chat rooms, games, booking), RPC, SQLite, alarms, WebSockets.
- sandbox-sdk Secure code execution for AI code execution, code interpreters, CI/CD systems, and interactive dev environments.
- wrangler Deploying and managing Workers, KV, R2, D1, Vectorize, Queues, Workflows.
- web-perf Auditing Core Web Vitals (FCP, LCP, TBT, CLS), render-blocking resources, network chains.
- building-mcp-server-on-cloudflare Building remote MCP servers with tools, OAuth, and deployment.
- building-ai-agent-on-cloudflare Building AI agents with state, WebSockets, and tool integration.
MCP servers
Live access to the Cloudflare API, docs, and observability from inside Codex.
MCP servers give Codex typed tools to call into Cloudflare at runtime. The cloudflare/mcp-server-cloudflare repo hosts all of them; the full catalog is also in the MCP servers for Cloudflare docs. The API server alone exposes 2,500+ endpoints in ~1,000 tokens via Code Mode.
- cloudflare-api Entire Cloudflare API (2,500+ endpoints) in ~1,000 tokens via Code Mode.
- cloudflare-docs Up-to-date Cloudflare documentation and reference.
- cloudflare-bindings Build Workers applications with storage, AI, and compute primitives.
- cloudflare-builds Manage and get insights into Workers builds.
- cloudflare-observability Debug and analyze application logs and analytics.
- cloudflare-radar Global Internet traffic insights, trends, URL scans, and utilities.
- cloudflare-containers Spin up a sandbox development environment.
- cloudflare-browser Fetch web pages, convert them to markdown, and take screenshots.
- cloudflare-logpush Quick summaries for Logpush job health.
- cloudflare-ai-gateway Search AI Gateway logs and inspect prompts, responses, and token usage.
- cloudflare-autorag List and search documents on your AutoRAGs.
- cloudflare-auditlogs Query audit logs and generate reports for review.
- cloudflare-dns-analytics Optimize DNS performance and debug issues based on current setup.
- cloudflare-dex Digital Experience Monitoring — insights on critical applications.
- cloudflare-casb Cloudflare One CASB — identify SaaS security misconfigurations.
- cloudflare-graphql Query analytics data through Cloudflare's GraphQL API.
Wrangler CLI
Codex runs in a sandboxed environment — it can safely execute Wrangler commands without affecting your host system. The bundled wrangler Skill teaches Codex which commands to run for deploys, migrations, and log tailing.
Agent-friendly docs
Codex also browses the web — pair with the docs MCP server.
Codex supports web browsing natively. Combined with the docs MCP server, you get both fast indexed lookups and live browsing when needed. For offline or preloaded context:
developers.cloudflare.com/llms.txt — directory of every Cloudflare product.
- developers.cloudflare.com/workers/llms.txt
- developers.cloudflare.com/agents/llms.txt
- developers.cloudflare.com/r2/llms.txt
- developers.cloudflare.com/d1/llms.txt
For a full overview of how these docs are structured for agents, refer to the AI tooling guide.
- The Cloudflare API MCP server uses Code Mode — Codex writes JavaScript against a typed API to reach any of 2,500+ endpoints in ~1,000 tokens.
- Try the
/cloudflare:build-agentslash command to scaffold a complete Agents SDK project, or/cloudflare:build-mcpfor a remote MCP server. - For more information on installing additional MCP servers, or when to use Code Mode versus traditional MCP servers, refer to the Cloudflare MCP server repository ↗.
Should I use Skills, the MCP server, Wrangler CLI, or all of them?
All three. Skills load Cloudflare knowledge into every Codex session (when
to use Durable Objects, how to structure a Workers project, etc.). The
Cloudflare API MCP server handles platform operations (DNS, WAF, Zero
Trust). Wrangler handles local dev, deploys, and migrations. The bundled
wrangler Skill teaches Codex when to run CLI commands vs. call the MCP
API.
How do I connect Codex to my Cloudflare account?
The first time Codex calls a Cloudflare tool, you will be redirected to authorize via OAuth and choose permissions.
Is Codex open source?
Yes. Codex is open source and available on GitHub at github.com/openai/codex.
MCP server not connecting
Verify the server was added with codex mcp add cloudflare --url https://mcp.cloudflare.com/mcp.
Run codex mcp list to confirm it appears, then use /mcp inside the Codex TUI to check its status.
Getting outdated information about Cloudflare products
Enable the Cloudflare docs MCP server so the agent can fetch
current documentation at runtime. If you prefer not to use the MCP server, point
the agent directly at developers.cloudflare.com/llms.txt for
a directory of every product, or developers.cloudflare.com/<product>/llms.txt
for a product-specific index.
MCP server authentication fails
Remove and re-add the MCP server. Complete the OAuth flow in your browser when prompted.
Cloudflare is not just a deploy target for agents, it is a full stack for building your own.
Stateful AI agents with state, scheduling, RPC, email, streaming chat — and the Code Mode SDK for token-efficient tool use.
Learn more →Ship a remote MCP server on Workers with OAuth, durable state, and streamable HTTP transport.
Learn more →Run open-source LLMs, embedding models, and image models at the edge. Use it as your agent's model provider.
Learn more →Load user-generated code into isolated Workers on demand. The secure sandbox behind Code Mode.
Learn more →