@pipeworx/cloudflare-radar

Connect: https://gateway.pipeworx.io/cloudflare-radar/mcp · Install: one-click buttons

Tools: 6

Cloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality).

Tools

internet_quality(location?, date_range?) — IQI summary.
attack_summary(dimension?, location?, date_range?) — L7 DDoS attack mix.
top_locations(metric?, date_range?, limit?) — top countries by HTTP / DNS / attack share.
bgp_leaks(date_range?, limit?) — recent BGP route-leak events.
radar_domain_rank(domain, date?) — a single domain’s popularity rank/bucket, category, and top locations. Answers “is this domain widely visited, or nowhere”.
radar_top_domains(limit?, location?, date?) — the most-visited domains globally or by country.

Platform key: gateway env PLATFORM_CLOUDFLARE_RADAR_KEY (or reuse CLOUDFLARE_API_TOKEN).
BYO: ?_apiKey=<token> after creating one at https://dash.cloudflare.com/profile/api-tokens (no special scope required for Radar).

https://api.cloudflare.com/client/v4/radar/ — Bearer token.

internet_quality — Internet Quality Index (IQI) summary — bandwidth, latency, jitter, packet loss — current value + change vs prior period. Optionally filtered to a 2-letter location code.
attack_summary — Layer-7 DDoS attack mix over a time window. Returns the percentage breakdown of attacks by mitigation product or attack vector. Filter by location to scope to a region/country.
top_locations — Top locations by a metric. metric=http_requests returns countries by share of HTTP traffic; metric=dns_queries by DNS; metric=attacks by attack origin. Returns ranked list with share percentages.
bgp_leaks — Recent BGP route-leak events detected by Cloudflare. Returns leaker AS, victim AS, originated prefixes, start/end times.
radar_domain_rank — Is this domain widely visited, or nowhere? Returns a single domain’s Cloudflare Radar popularity: an exact rank for domains inside the global top 100, otherwise only a bucket (e.g. “200” = top 200
radar_top_domains — The most-visited domains on the internet, globally or filtered to one country. Use to see what dominates traffic, or as the reference list to compare a rank against.

attack_summary — Layer-7 DDoS attack mix over a time window. Returns the percentage breakdown of attacks by mitigation product or attack vector. Filter by location to scope to a region/country.
bgp_leaks — Recent BGP route-leak events detected by Cloudflare. Returns leaker AS, victim AS, originated prefixes, start/end times.
internet_quality — Internet Quality Index (IQI) summary — bandwidth, latency, jitter, packet loss — current value + change vs prior period. Optionally filtered to a 2-letter location code.
radar_domain_rank — Is this domain widely visited, or nowhere? Returns a single domain's Cloudflare Radar popularity: an exact `rank` for domains inside the global top 100, otherwise only a `bucket` (e.g. 200 = top 200,
radar_top_domains — The most-visited domains on the internet, globally or filtered to one country. Use to see what dominates traffic, or as the reference list to compare a rank against.
top_locations — Top locations by a metric. metric=http_requests returns countries by share of HTTP traffic; metric=dns_queries by DNS; metric=attacks by attack origin. Returns ranked list with share percentages.