cloudflare-email-service

An agent skill by cloudflare, from cloudflare/skills. Tags: cloudflare, delivery, email, integration, troubleshooting.

What it does

Implement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add cloudflare/skills --skill cloudflare-email-service

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/cloudflare/skills
cp -r skills/skills/cloudflare-email-service ~/.claude/skills/cloudflare-email-service

Safety box score

Grade C, moderate risk: 26 of 100 risk points, rated 2026-09-22. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a Cloudflare Email Service playbook: it can guide an agent to run Wrangler/REST/MCP actions that enable email sending/routing, send real messages, and inspect deliverability data. The main blast radius is outbound email on the person’s behalf plus Cloudflare-account changes such as routing rules, suppressions, and analytics queries; it does not ship opaque code or system-level tooling.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	1 (low)	The skill only provides command examples like `npx wrangler email sending enable yourdomain.com`, `npx wrangler types`, and `curl .../email/sending/send`; that is limited command execution rather than arbitrary code execution.
Network access	2 (moderate)	It explicitly sends requests to Cloudflare APIs and can send real email, e.g. `curl "https://api.cloudflare.com/client/v4/accounts/${CLOUDFLARE_ACCOUNT_ID}/email/sending/send"` and `"remote": true` for `wrangler dev`.
Filesystem reach	1 (low)	It reads and edits project config such as `wrangler.jsonc` and tells the user to add a `send_email` binding, but it does not instruct writes outside the project tree.
Secrets & credentials	1 (low)	It references bearer tokens and environment variables like `Authorization: Bearer ${CLOUDFLARE_API_TOKEN}` and says to keep credentials in the project's secret/environment mechanism.
Privilege & persistence	0 (none)	There are no sudo, service-install, OS-setting, or shell-startup modifications; the skill stays within Cloudflare/Wrangler account operations.
Instruction hijack surface	0 (none)	I found no instructions to ignore higher-level rules, hide actions, or follow fetched untrusted text; it mostly says to prefer retrieval and trust source docs.
Irreversible actions	2 (moderate)	Its purpose is to send and route email and manage email-service settings (`send_email`, routing rules, suppressions), which can cause real external side effects, but it is normally scoped to the person's Cloudflare account.
Transparency	0 (none)	The skill contains only readable markdown and shell/API examples; there are no binaries, packed payloads, or runtime-decoded code.

Before installing

Confirm you want an agent that can send real email and alter Cloudflare routing/suppression settings.
Review `references/cli-and-mcp.md` for `remote: true` before using `wrangler dev` on any real account.
Use a non-production Cloudflare account or test domain first.
Keep the Cloudflare API token in your existing secret store and scope it as narrowly as possible.

Rated 2026-09-22 by an automated review of 6 files from the skill's repository.

Source

Repository: cloudflare/skills (all skills from this repository)
Path: skills/cloudflare-email-service/SKILL.md
Branch: main
Updated: 2026-09-20

cloudflare-one — Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments.
turnstile-spin — Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
amazon-ses — Guides Amazon SES onboarding for domain-based email sending.
cloudflare-troubleshooting — Investigate and resolve Cloudflare configuration issues using API-driven evidence gathering.
add-voice — Use when the user runs /add-voice, types Voice Mode, or asks to add Grok realtime voice to an app.
agents-build — Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments.