Cloudflare and the Cloudflare MCP
Understand what Cloudflare does and how it will work with your Vercel sites, create a free Cloudflare account with 2-step login, and connect Cloudflare's official MCP server to Cursor with the fewest permissions, plus the approval and money rules that keep it safe.
Why this matters
So far, every protection in your app is something you built: checks in your code, rules in your database. Those are essential, and they stop bad data. What they can't do is tell a person from a bot. A bot that fills in the order form perfectly, a thousand times an hour, passes every check you wrote.
Telling people from bots is a hard problem, and it's best left to a company that sees a huge share of the internet's traffic. That company is Cloudflare. Its free bot-check, Turnstile, is what you'll add to your forms in Lesson 10.6. In Module 12, Cloudflare will also run your domain's settings.
You'll connect Cloudflare to Cursor through an MCP server, the same idea as the Supabase MCP from Module 7. Then setting things up becomes a conversation: "create a Turnstile widget for my site". With that power comes the same rule as before: you read every action before it runs. This lesson sets up the account, the connection, and the rules.
In the full lesson
- The idea in plain English
- Do it
- Check it worked
- Quick check
- What you can do now
The step-by-step, the prompt to copy, the video and the check-it-worked list, for every lesson in all 15 modules. GHS 399 ($40), paid once by mobile money or card, yours to keep.