01
cf dnsDNS
Read and change A, AAAA, CNAME, TXT, and MX records with explicit profile context and clean upsert semantics.
Read docs ↗ Agent-first Cloudflare operations
Cloudflare,
without the
dashboard.
A fast Go CLI for the operational work Wrangler leaves behind: DNS, recent Workers logs, R2, scoped tokens, and painless multi-account switching.
$ cf --profile personal doctor
✓ API token macOS Keychain
✓ Account ID resolved
✓ Default domain ashray.xyz
$ cf dns cname docs cf.pages.dev
updated CNAME docs → cf.pages.dev
$ cf workers logs api --since 10m
12:43:08 POST /v1/deploy 200 84ms
$
one binary · zero dashboard tabs
DNS✦WORKERS LOGS✦R2✦SCOPED TOKENS✦MULTI-ACCOUNT
The missing operations layer
Wrangler deploys.
cf operates.
Wrangler is excellent at building and deploying Cloudflare applications. It is not a general interface to the rest of Cloudflare.
cf-cli fills that gap. It handles the small operational tasks that otherwise pull you out of your terminal and into a maze of zones, accounts, permissions, and dashboard panels.
∞
The escape hatch
The CLI does not need to know every Cloudflare API call.
A bootstrap token can mint a new token scoped to exactly the permissions an agent needs. When a first-class command does not exist yet, the agent reads Cloudflare’s API docs, creates a temporary least-privilege credential, and keeps moving.
You never become the bottleneck—and the broad master credential never becomes the default.
Command surface
Six sharp tools.
One tiny binary.
Purpose-built commands for the Cloudflare work agents and engineers actually repeat.
02
cf workersWorkers
List deployments and inspect the persisted logs from the last few minutes without opening the dashboard.
Read docs ↗03
cf tokensTokens
Search Cloudflare permissions and mint narrowly scoped credentials for the exact operation an agent needs.
Read docs ↗04
cf r2R2
Create buckets, mint bucket credentials, and wire Workers trace logs into durable object storage.
Read docs ↗05
cf profilesProfiles
Keep personal, client, and production accounts unambiguous, with secrets in Keychain instead of config files.
Read docs ↗06
cf wranglerWrangler
Snapshot and switch Wrangler accounts instantly instead of logging out and authenticating all over again.
Read docs ↗Made for agents
Say what you want.
The CLI explains itself.
There is no separate agent handbook to maintain. The command tree, flags, and help text are the interface. An agent starts with cf --help, discovers the right operation, and leaves behind an auditable command.
YOUPoint docs.example.com at the new deployment. Use my personal Cloudflare account.
AGENT
cf --profile personal dns cname docs project.pages.dev✓ CNAME updated and verifiedInstall
From zero to cf
in one command.
curl -fsSL https://raw.githubusercontent.com/amxv/cf-cli/main/install.sh | bash