Security Report

Cloudflare MCP Security Report

Independent security and governance assessment · Assessed June 22, 2026

Security

Compliance

MCPForge Score

Security Findings

Security

+Server reachable and responding

+Authentication flow detected

−13 destructive operations detected

−Financial operations detected — approval workflows recommended

−Credentials Vault not configured — API keys may be exposed through direct agent access if tools require authentication

Compliance

−User/contact data handling detected (GDPR/CCPA obligations)

−Deletion operations detected (GDPR Art. 17 audit trail required)

−Payment operations detected (PCI DSS obligations)

−Credentials Vault not configured — configure to ensure proper server-side key management

Risk Analysis

3191 tools analyzed

High Risk525

Medium Risk1228

Low Risk1438

By Category

Delete381

Billing21

Auth196

Admin13

Write1142

○No approval workflows configured

Governance Assessment

Formal Security Review

Not Started

Credentials Vault✗ Not Configured

Endpoint ProtectionNot Enabled

Audit Logging✓ Active — All tool invocations logged

Production Readiness

Verified — Production Ready

MCPForge Score

→Configure the Credentials Vault to protect API keys from direct agent exposure.

→Enable endpoint protection to require API key authentication on direct MCP calls.

→Start a formal Security Review to qualify for the "✓ Security Reviewed" badge.

→Review the 525 high-risk tools and configure approval workflows where appropriate.