Skip to content

Release history

cloudflare/mcp-server-cloudflare releases

Integration with Cloudflare services including Workers, KV, R2, and D1

All releases

78 shown

Config change
[email protected] Breaking risk
Breaking upgrade

deleted_class migration for UserDetails

Config change
[email protected] Breaking risk
Auth

Account resolution centralization + dependency upgrades

Config change
[email protected] Breaking risk
Auth

Account resolution centralization + dependency upgrades

Config change
[email protected] Breaking risk
Auth Breaking upgrade

Account centralization + dependency upgrades

Config change
[email protected] Breaking risk
Auth

Account resolution centralization + dependency upgrades

Config change
[email protected] Breaking risk
Auth

Account resolution centralization + dependency upgrades

Review required
[email protected] Breaking risk
Dependencies

Breaking changes — review before upgrading.

Config change
[email protected] Breaking risk
Auth

Account resolution centralization + dependency upgrades

[email protected] Breaking risk
⚠ Upgrade required
  • Migration guide available via the MCP `instructions` field
  • Update configuration to use `https://mcp.cloudflare.com/mcp` instead of the deprecated AutoRAG endpoint
Breaking changes
  • Removal of `autorag.mcp.cloudflare.com` entries from `server.json`
  • AutoRAG MCP server is deprecated and will be discontinued
Full changelog

Patch Changes

  • 17a9785: Deprecate the AutoRAG MCP server. AutoRAG has been superseded by Cloudflare AI Search, which is covered by the unified Cloudflare MCP server at https://mcp.cloudflare.com/mcp (see https://github.com/cloudflare/mcp).

    Tools continue to function. The server now exposes a migration guide via the MCP instructions field, and the autorag.mcp.cloudflare.com entries have been removed from server.json so registries stop advertising the deprecated server.

    Action required: migrate to https://mcp.cloudflare.com/mcp at your earliest convenience.

  • Updated dependencies [f77355c]

@repo/[email protected] Bug fix

Fixed Observability response schema rejection of Workflow events lacking `wallTimeMs`/`cpuTimeMs`.

Full changelog

Patch Changes

  • f77355c: fix(mcp-common): allow workflow eventType and treat wallTimeMs/cpuTimeMs as optional in observability response schema

    The Workers Observability response schema (zCloudflareMiniEvent / zCloudflareEvent in packages/mcp-common/src/types/workers-logs.types.ts) was missing 'workflow' from the eventType enum, and zCloudflareEvent re-declared cpuTimeMs / wallTimeMs as required. Cloudflare Workflow events emit eventType: "workflow" and do not always include the time fields, so the workers-observability MCP's query_worker_observability tool would reject any response containing a workflow event with a Zod validation error and return no data to the caller.

    This left the MCP unable to surface logs from any Worker built on Cloudflare Workflows. Adding 'workflow' to the enum and making the time fields optional unblocks those queries.

@repo/[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
[email protected] Maintenance
Notable features
  • resourceMatchOriginOnly migration flag
  • 30-day refresh token TTL
Full changelog

Patch Changes

  • 50926ec: Bump @cloudflare/workers-oauth-provider to ^0.4.0, add resourceMatchOriginOnly migration flag and 30-day refresh token TTL
  • Updated dependencies [50926ec]
@repo/[email protected] Bug fix

Corrected 4xx error classification instead of returning 500.

Full changelog

Patch Changes

  • 01a172e: Classify upstream 4xx errors correctly instead of returning 500, and set reportToSentry flag to avoid alerting on expected client errors
[email protected] Security relevant
Security fixes
  • Arbitrary URLs in DEX remote commands explore tools no longer permitted — prevents potential URL-based abuse vectors
Changelog

Minor Changes

  • 198c2c2: disallow arbitrary urls in DEX remote commands explore tools

Beta — feedback welcome: [email protected]