Agent Readiness Report Card · v0.1
Cloudflare Registrar: agent readiness
The most agent-ready registrar in the set today. Cloudflare's API uses scoped, revocable API tokens (least-privilege delegation), exposes account-level audit logs, ships a full DNS API on industry-leading anycast infrastructure, and prices domains at cost with no markup. Its weaknesses are agent-specific: registration via API is limited compared with full-service registrars, and there is no registrar-specific MCP tool or capability manifest yet.
Methodology v0.1 · public-signal assessment (not yet an end-to-end live test) · last checked 2026-06-21
Best for (agent use)
- Developers delegating DNS and domain management to agents
- Least-privilege API access
- At-cost, predictable pricing
Not ideal for
- Registering brand-new domains entirely via API
- Wide TLD coverage
- Non-technical first-time buyers
Sub-scores & evidence
Ten criteria, each scored 0–10 from public evidence and weighted to the 0–100 overall. Cloudflare Registrar's sub-scores reproduce an overall of 78.7.
| Criterion | Weight | Score | Why |
|---|---|---|---|
| API coverage | 18% | 7.5/10 | Full domain management and DNS via the Cloudflare API; new-domain registration through the API is more limited than full-service registrars. |
| Authentication & delegation | 14% | 9.5/10 | Scoped API tokens with least-privilege permissions, revocable and time-bound — the strongest delegation model in the set. No consumer OAuth flow. |
| Agent safety | 12% | 6/10 | Account-level Audit Logs and strong 2FA (WebAuthn); no domain-specific approval flow, spend limit, or rollback. |
| Developer experience | 12% | 8/10 | Comprehensive docs, published OpenAPI, multiple SDKs, documented rate limits; no registrar sandbox and no registrar webhooks. |
| Agent-interface readiness | 12% | 5/10 | Official remote MCP servers exist for the Cloudflare platform (OAuth-based) but none registers domains; no machine-readable registrar pricing or capability manifest. |
| Pricing transparency | 10% | 9.5/10 | At-cost wholesale pricing, no markup, no upsells — among the most transparent in the industry. |
| DNS & infrastructure | 8% | 10/10 | Industry-leading anycast DNS, DNSSEC, full DNS API. |
| Privacy & compliance | 6% | 9/10 | WHOIS redaction by default; WebAuthn/security-key 2FA. |
| Support quality | 4% | 6/10 | Ticket and community support; phone only on Enterprise. |
| Trust signals | 4% | 9.5/10 | ICANN accredited, large public infrastructure company, public status page and transparency reports. |
Open data: the neutral capability facts behind these sub-scores are published, versioned, by Open Domain Data — agent_capability_signals@2026.05, registrar_api_capabilities@2026.05, tld_pricing@2026.06, dns_capabilities@2026.05, registrar_security_contacts@2026.05, registrars@2026.06, rdap_metadata@2026.05. See the index data provenance for the criterion-by-criterion mapping.
How Cloudflare Registrar could raise this score
The criteria with the most room to improve, lowest first. Each pairs the gap we observed with the capability that criterion rewards. These are improvement priorities, not predictions — implementing them is what would move the score in a future revision.
Agent-interface readiness
5/10 · 12% weightToday: Official remote MCP servers exist for the Cloudflare platform (OAuth-based) but none registers domains; no machine-readable registrar pricing or capability manifest.
To improve
- Ship an official MCP (or A2A) interface that an agent can call directly.
- Publish machine-readable pricing and machine-readable policies.
- Provide a capability manifest an agent can read before acting.
Agent safety
6/10 · 12% weightToday: Account-level Audit Logs and strong 2FA (WebAuthn); no domain-specific approval flow, spend limit, or rollback.
To improve
- Add per-token or per-agent spend limits so a delegated agent cannot overspend.
- Offer human-approval flows (webhooks/confirmations) for high-risk actions like transfers.
- Provide audit logs, change history, and a rollback window for registrations and transfers.
Support quality
6/10 · 4% weightToday: Ticket and community support; phone only on Enterprise.
To improve
- Offer responsive support across multiple channels with clear response expectations.
- Provide dedicated API/developer and enterprise support paths.
- Maintain high-quality, current documentation.
Where Cloudflare Registrar is already strong: DNS & infrastructure (10/10).
Frequently asked
- How agent-ready is Cloudflare Registrar?
- Cloudflare Registrar scores 78.7/100 in v0.1 of the Agent Readiness Index, ranking #1 of 7 registrars tracked. The most agent-ready registrar in the set today. Cloudflare's API uses scoped, revocable API tokens (least-privilege delegation), exposes account-level audit logs, ships a full DNS API on industry-leading anycast infrastructure, and prices domains at cost with no markup. Its weaknesses are agent-specific: registration via API is limited compared with full-service registrars, and there is no registrar-specific MCP tool or capability manifest yet.
- What would raise Cloudflare Registrar's agent-readiness score?
- Its biggest gaps are agent-interface readiness, agent safety, support quality. Ship an official MCP (or A2A) interface that an agent can call directly.
- How is Cloudflare Registrar's score calculated?
- It is a weighted 0–100 overall computed from ten 0–10 sub-scores; for Cloudflare Registrar the published sub-scores reproduce an overall of 78.7. Every sub-score is derived from public evidence cited on this page (methodology v0.1, public-signal assessment, not yet an end-to-end live agent test).
Best-Domain-Registrars.com is operated within Just (Just Done LLC). Just Done LLC also operates Just Domain, a domain reseller. Just Domain is not included in this index. Every registrar here is scored by the same published methodology on the same public evidence; see /editorial-policy/.