Agent Lee

With Agent Lee, you can:

• Ask questions about your account configuration and get answers based on your actual data.
• Make changes to DNS records, zone settings, and security rules, with your approval required before anything executes.
• Undo a change Agent Lee made earlier in the conversation.
• Run network diagnostics like DNS lookups and certificate checks.
• Generate charts and visualizations from your account analytics.
• Find the right dashboard page for a task.
• Revisit your earlier conversations with Agent Lee.
• Open a Cloudflare Support case, if your account is eligible.

To get started, log in to the Cloudflare dashboard ↗︎ and select Ask AI in the upper-right corner of any dashboard page.

Agent Lee was previously referred to as Cloudflare Agent.

Agent Lee answers based on your actual account data, not just documentation. When you ask a question, it fetches your zone configuration, DNS records, and security settings before responding.

It can also tell you whether your account is entitled to a particular Cloudflare feature, and which plan tier you are on, so you know whether something is available to you before you try to configure it.

You can ask Agent Lee to create, update, or delete resources across your account using natural language. Every write operation requires your explicit approval before it executes, Agent Lee shows you exactly what it plans to do and waits for confirmation.

If you would rather Agent Lee never change anything, you can grant it read-only access, which leaves questions and diagnostics available.

Example requests:

• "Add an A record for blog.example.com pointing to 192.0.2.10."
• "Enable Always Use HTTPS on my zone."
• "Set the SSL mode for example.com to Full (strict)."

If Agent Lee made a change earlier in the conversation and you want to reverse it, ask it to undo the change. Agent Lee works out the inverse operation and presents it to you as a proposed write, which you approve in the same way as any other change. Undo is not automatic, and it cannot reverse changes made outside of Agent Lee.

Run diagnostic commands to troubleshoot connectivity and configuration issues:

• DNS lookups: Query DNS records for any domain
• Certificate checks: Inspect TLS/SSL certificates
• Domain information: Look up WHOIS and RDAP registration data

Agent Lee builds charts, tables, and metric summaries from your account analytics. Most visualizations appear in the chat panel as a card that you select to open the full-screen view.

Example requests:

• "Show me a chart of my traffic over the last 7 days."
• "What does my error rate look like for the past 24 hours?"

Agent Lee searches the dashboard's page index rather than guessing at URLs, so it can point you to the exact page for a task. Links open on the account you currently have selected.

Example requests:

• "Where do I configure page rules for example.com?"
• "Take me to my R2 bucket settings."

Agent Lee can list, search, and summarize your previous conversations, so you can pick up where you left off without repeating context.

Example requests:

• "What did we decide about the SSL settings last week?"
• "Summarize my last conversation."

Agent Lee treats past conversation context as supplemental. It re-reads your live account data before answering rather than relying on what was true in an earlier session.

If Agent Lee cannot resolve your issue and your account is eligible for ticket-based support, it can prepare a Cloudflare Support case for you. Agent Lee always shows you the case and waits for your confirmation before filing anything — it never opens a case silently.

Eligibility depends on your support entitlement rather than your plan name alone. Accounts on a Free plan can file billing disputes, such as a duplicate charge or a charge after cancelling. Agent Lee limits how many cases you can open per account within a 24-hour period.

Agent Lee has built-in guidance for individual Cloudflare products — including DNS, SSL/TLS, R2, Workers, Cloudflare Tunnel, Gateway, Access, and WARP — and searches the Cloudflare developer documentation and changelog when it needs more detail. Grounding answers in the published changelog means Agent Lee will tell you when a product you asked about does not exist, rather than inventing one.

• Zone settings, DNS records, firewall and WAF rules
• Workers scripts, routes, and bindings
• R2 bucket names, Cloudflare Tunnel configuration, cache rules
• Registrar domain data, account plan and usage metadata

Agent Lee fetches this data on demand when your question requires it.

• Payment methods, billing history, or invoice details
• Account passwords, login credentials, or API tokens
• Raw log data or Logpush datasets
• Data from other Cloudflare accounts

Conversations are stored per user using Durable Objects. Conversation data is retained for one year in accordance with Cloudflare's data retention policy, measured from the last time you sent a message, so an actively used conversation is not purged while you are still working in it.

Agent Lee can list, search, and summarize conversations you have had with it. It cannot read another user's conversations.

Agent Lee does not currently use your conversations, prompts, or account data to train AI models, nor do we share your data with other Cloudflare customers. Should these practices change in the future, we will provide advance notice to keep you informed. For Cloudflare's authoritative data handling commitments, refer to the Cloudflare Privacy Policy ↗︎.

Agent Lee cannot:

• Deploy applications on your behalf or run code for you (it can generate small starter projects and export the source for you to clone)
• Replace Cloudflare Support ↗︎ for account recovery or outages (it can prepare a support case for you, but only if your account is eligible and you confirm it)
• Access payment methods, billing history, or API tokens
• Operate across multiple accounts: sessions are scoped to your authenticated account
• Query raw log data or Logpush datasets
• Execute write operations without your explicit approval

Agent Lee is entirely optional. If you do not open the Ask AI panel, none of your data is sent to or processed by it.

Agent Lee is built on Cloudflare's own developer platform using the same primitives available to any Cloudflare developer.

• Export generated code
• Manage access and permissions
• Agents SDK
• Human in the Loop
• Workers AI
• Blog post: Introducing Agent Lee ↗︎