Skip to the page
Get started – free

Cloudflare

Put SpecStream on your Cloudflare MCP server portal. The people your Access policies allow reach it from the portal's one address, ask for live web data in plain words, and get each value with the page it came from.

SpecStream for CloudflareAPI & cloud platforms

What you need

  • Cloudflare Zero Trust with an identity provider set up.
  • An active domain on Cloudflare for the portal's address.
  • A SpecStream account. Creating one is free.

  1. 1. Add SpecStream as an MCP server

    In the Cloudflare dashboard, go to Zero Trust, then Access controls, then MCP Portals. On the MCP servers tab, choose Add MCP server.

    Enter SpecStream as the name, specstream as the Server ID, and https://api.specstream.ai/mcp as the HTTP URL. Under OAuth credentials, keep Automatic (recommended). Cloudflare registers itself with SpecStream, so there's no client ID to copy. Add the Access policies that decide who sees the server.

    Choose Save and connect server and sign in to SpecStream when asked. The server is ready when its status reads Ready.

  2. 2. Add SpecStream to a portal

    On MCP Portals, choose Add MCP server portal, name it, and pick a domain from an active zone under Custom domain. Add SpecStream and, if you like, choose which of its tools the portal shows.

    Leave Require user auth on Enabled so each person signs in with their own SpecStream account. Add the Access policies for the portal and choose Add an MCP server portal.

  3. 3. Connect an MCP client

    The portal answers at https://<subdomain>.<domain>/mcp. Add that address to any client that takes a remote MCP server. The first connection signs in through your identity provider, then through SpecStream. A client that reads a config file can connect through mcp-remote:

    JSON
    {
      "mcpServers": {
        "company-portal": {
          "command": "npx",
          "args": ["-y", "mcp-remote@latest", "https://<subdomain>.<domain>/mcp"]
        }
      }
    }

  4. 4. Ask for data

    Describe what you need and where, the way you'd say it to a colleague:

    Independent dental practices in Austin, with their website, phone, and the owner's name

    SpecStream reads the request back, then quotes the most it can cost and when the price expires. Nothing runs until you approve that price. A run takes a few minutes, and each match comes back with its values and the page each value was read from. Possible matches come separately, at no cost.

Whose account pays

With Require user auth on, every request runs on the SpecStream account of the person who asked, with that account's balance and limits. Turned off, everyone on the portal uses the account that connected the server, so set a spending limit on it in SpecStream under Settings, then Usage and billing.

To keep paid work off the portal, leave authorize_capacity_work out of the tools it shows. People can still read requests, see prices, and read the results they already own.

An API key instead of a sign-in

Cloudflare's API can add a server with a fixed Bearer token instead of the OAuth sign-in. Use a SpecStream key from Agents & API with a total spending limit, since everyone on that server shares the account that owns it.

Cost

Connecting SpecStream to Cloudflare is free. SpecStream bills your balance per match, a request that finds nothing is free, and a run can't cost more than the maximum you approved. New accounts get $10 of work for 30 days without a card. Balance, quotes, and billing has the details.

Disconnect

Remove SpecStream from the portal, or delete the server on the MCP servers tab. To end the sign-in on the SpecStream side, open Agents & API in your workspace, choose OAuth applications, and revoke Cloudflare. Your saved results stay put. Questions go to [email protected].

More

SpecStream for Cloudflare covers what it does in Cloudflare on one page. Every other tool has its guide in Connect your tools. You see the most a request can cost before it starts, and the matches are paid from your balance. Billing has the details. For help, email [email protected].