Best Domain RegistrarsBEST DOMAIN REGISTRARS
Cloudflare Registrar logo

Cloudflare Registrar Review 2026

Overall 9.2

Evaluated from Cloudflare Registrar's published documentation and the pricing rows we track for it, not from hands-on account testing, then scored on renewal pricing, WHOIS privacy, DNS tools, security, support, transfer experience, and TLD coverage. How we test and what we have tested so far →

Last updated 2026-05-12Prices checked monthly1 of 9 scored reviews with published testing notes11 registrars with primary-source pricingTransparent methodology

Verdict

At-cost renewal pricing, exceptional DNS, and strong security make Cloudflare Registrar the best long-term value for technical users.

Score breakdown

How to read these scores. The numeric scores on this page are derived from our published methodology weights applied to documented registrar facts. They are not the output of hands-on purchase, transfer and support testing, which we have not yet run. Treat them as a structured summary of the facts, not as a test result. The facts and prices underneath them each carry their own source and date.

Category scores out of 10 for Cloudflare Registrar, each with the evidence it rests on
CategoryScore (0–10)Bar
Overall9.2
PricingEditorial judgementWe hold no verified .com price for Cloudflare Registrar, so this score is not backed by pricing we collected.9.8
RenewalsEditorial judgementWe hold no verified .com price for Cloudflare Registrar, so this score is not backed by pricing we collected.10.0
Pricing transparencyEditorial judgementNo verified catalogue for Cloudflare Registrar, so first-year-versus-renewal behaviour is unmeasured here.9.5
WHOIS privacyFrom published documentationWHOIS privacy: Free, included; redacted by default.9.5
DNSFrom published documentationDNS: Industry-leading anycast DNS with deep developer tooling.10.0
Security / 2FAFrom published documentationTwo-factor authentication: TOTP and security keys (WebAuthn).9.5
SupportFrom published documentationPublished support channels: Ticket support, Community, Enterprise plans for phone. Channel availability is documented; we have not published timed response measurements.7.0
Transfer experienceEditorial judgementWe have not published transfer timings for this registrar. This score reflects documented transfer policy and our reading of it, not a measured run.9.0
TLD / ccTLD coverageFrom published documentationCoverage per the registrar's own material: Limited TLD list focused on common gTLDs and select ccTLDs. We hold no verified prices to corroborate it.6.5
Developer tools / APIFrom published documentationA public API is documented, alongside bulk management tools. We score the documented surface, not measured API reliability.9.5
Beginner UXEditorial judgementNo usability testing has been published for this registrar. This is a judgement from the account interface and documentation.7.0

Why this score? At-cost renewal pricing, exceptional DNS, and strong security make Cloudflare Registrar the best long-term value for technical users.

Reading the labels. Measured Derived from pricing we collected and verified ourselves. From published documentation Traced to a fact recorded from the registrar's own published material. Editorial judgement A judgement. We have not published a measurement behind this number.

Best for
  • Developers
  • At-cost renewals
  • Cloudflare DNS users
Not ideal for
  • First-time domain buyers
  • Wide ccTLD coverage
  • Premium TLDs

Pricing

TLDFirst-yearRenewal10-year costTransferWHOIS privacyChecked
.com$10.44$10.44$104.40$10.44Free2026-05-12
.net$11.79$11.79$117.90$11.79Free2026-05-12
.org$10.69$10.69$106.90$10.69Free2026-05-12
.io$36.30$36.30$363.00$36.30Free2026-05-12
.ai$73.50$73.50$735.00$73.50Free2026-05-12
.co$24.50$24.50$245.00$24.50Free2026-05-12
Sample pricing, past reviewNewest price read 99 days ago

These figures are sample data, not read from this registrar's own pricing page, so they are not on a refresh cadence, they are flagged for review past 90 days instead. Rows here span 41 days between oldest and newest, which means part of this catalogue was re-read more recently than the rest. 12 of 12 rows are individually past the 90-day review line. Freshness describes when we last read a price, not whether it is right. How we check prices · freshness data

How we verified this pricing

Pricing model confirmed · at-cost

Cloudflare Registrar does not publish a per-TLD price table; it sells and renews at cost, charging only the registry's wholesale fee plus the ICANN fee with no markup. We confirmed the at-cost model from Cloudflare's own developer documentation. The per-TLD figures here are therefore model-derived (registry wholesale + ICANN $0.18) rather than read off a Cloudflare price list, so the record stays verified=false until each registry wholesale fee is independently sourced.

Source: https://developers.cloudflare.com/registrar/

Last verified: 2026-06-22

Renewal pricing explained

Editorial judgement

We have not verified any Cloudflare Registrar price against its own published pages, so there is no renewal analysis here to give. The general point still applies: a first-year price is paid once and a renewal is paid every year after it, so the renewal is the figure that decides what a domain costs to hold.

Until we can read this registrar's prices ourselves, compare the renewal column in its cart against the verified figures on our cheapest-renewals page rather than against its advertised first year.

WHOIS privacy

From published documentation

Cloudflare Registrar documents its WHOIS privacy as: Free, included; redacted by default.

Included at no charge is the right answer in 2026, and it is close to universal among reputable registrars: which makes a registrar that still charges for it the outlier rather than this one being generous.

What privacy does is replace your name, postal address, phone number and email in the public record with the provider's forwarding details. What it does not do is hide the registration from the registrar, the registry, or a court order, and it does not stop a domain being linked to you by other means. Since GDPR, most registries also redact personal data by default regardless of what the registrar sells, so for many extensions the privacy product is a smaller addition than it was. Our WHOIS-privacy sub-score for Cloudflare Registrar is 9.5, based on the documented policy.

DNS tools

From published documentation

Cloudflare Registrar describes its DNS as: Industry-leading anycast DNS with deep developer tooling.

Anycast means the same DNS records are answered from many locations at once, which shortens lookups for distant visitors and absorbs traffic that would overwhelm a single server. It is the meaningful difference between a DNS product and a DNS checkbox. We have not recorded ALIAS or ANAME support here. That matters if you need the apex of your domain to point at a platform hostname rather than an IP address, which most hosted site builders and store platforms ask for: check before committing.

A public API is documented, so DNS records here can be managed from a script rather than a dashboard. Remember that the registrar and the DNS host do not have to be the same company: you can keep a domain here and point its nameservers anywhere. Our DNS sub-score for Cloudflare Registrar is 10.0, based on documented capability rather than measured resolution times.

Security and 2FA

From published documentation

Cloudflare Registrar documents TOTP and security keys (WebAuthn) for account access.

Hardware security keys are the meaningful distinction here, and almost nothing else in this category offers them. A key proves it is talking to the real site before it releases anything, so it defeats the phishing page that captures a code from an app and replays it within the minute. If you hold domains worth stealing, this is the single feature most worth moving for.

Whatever the method, the registrar account is the domain's real perimeter: anyone inside it can change nameservers and start a transfer. Turn on the strongest option offered, keep the registrant email on an account with its own two-factor, and check the domain lock is set. Our security sub-score for Cloudflare Registrar is 9.5, based on the methods it documents rather than on a penetration test.

Support channels

From published documentation

Cloudflare Registrar publishes 3 support channels: ticket support, community, enterprise plans for phone.

Live channels are available but not around the clock, so a problem outside business hours waits. For a domain that fronts a business, weigh that against the price difference before choosing on cost alone.

What we have not done, and will not imply: we have not timed responses on these channels or run test tickets. The support sub-score of 7.0 reflects the channels published and their stated hours, not measured response times. Treat published availability as a claim by the registrar until someone has tested it.

Transfer experience

Measured

Transferring a .com in to Cloudflare Registrar costs $10.44 against its renewal of $10.44. For most gTLDs a transfer adds a year to the registration rather than resetting it, so that fee buys a year rather than only paying for the move.

The process itself is the same everywhere and the constraints are ICANN's, not the registrar's: unlock the domain, get the authorization code from the losing registrar, and enter it at the gaining one. A gTLD cannot be transferred within 60 days of a registration, a previous transfer, or a change to the registrant contact, that last one catches people who tidy up their WHOIS details first and then find the domain locked for two months.

We have not run a transfer in or out of Cloudflare Registrar, and we do not have testing notes for it. Everything above is computed from prices we verified or from ICANN's published transfer policy, not from watching a transfer complete.

TLD and ccTLD coverage

Limited TLD list focused on common gTLDs and select ccTLDs

Developer and agent access

UngatedA public API any account can use without an account-size or plan gate.

The most agent-ready API in the set: the only registrar here with scoped, revocable API tokens and a published OpenAPI reference, on a generous account-wide limit. No sandbox, you test against the live account.

Auth model
API key + scoped API tokens
Scoped API tokens
Yes(1 of 7 measured)
OAuth delegation
No(0 of 7 measured have it)
Outbound webhooks
No
Sandbox
None published(3 of 7 measured have it)
Machine-readable API spec
developers.cloudflare.com/api/(1 of 7 measured)
Rate limit
1,200 requests / 5 min per account
Account-level audit logs
Yes(1 of 7 measured)

Cloudflare Registrar API documentation · API availability read from the registrar's documentation.

Figures in brackets are Open Domain Data's 2026-Q3 landscape edition, over the 7 registrars it measures, not the registrars this site tracks. Full API-access comparison.

Agent interface (MCP)No official MCP

No official MCP for the registrar. Cloudflare ships MCP servers for other parts of its platform and its Registrar API is the most agent-ready in the set (scoped tokens, a published OpenAPI reference), but there is no first-party MCP that drives domain registration or management.

Which registrars publish an official MCP

Cloudflare Registrar API-capability facts and the cohort figures beside them derived from Open Domain Data (CC BY 4.0), dataset version registrar_api_capabilities@2026.06, registrar_landscape@2026-Q3, agent_capability_signals@2026.05. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.

DNS capabilities

Upstream facts from Open Domain Data, shown with the source behind each field. These are capabilities, not our assessment: our own view of Cloudflare Registrar's DNS is in the score breakdown.

Cloudflare Registrar DNS capabilities recorded by Open Domain Data, with the source and check date for each field
CapabilityCloudflare Registrar
DNSSEC
Supported
Independently testedOne-click DNSSEC on Cloudflare-hosted zones; DS records exposed for the registrar to publish. developers.cloudflare.com/dns/dnssec/ · checked 2026-05-27
ALIAS / ANAME at the apex
Yes
DNS records over an API
Yes
Independently testedFull DNS records API (list/create/update/delete) confirmed against a live zone. developers.cloudflare.com/api/resources/dns/ · checked 2026-05-27
Minimum TTL
60s
Record types
AAAAACNAMEMXTXTSRVCAANS

CAA records are supported by every registrar in this dataset, Cloudflare Registrar included, so the row is stated here once rather than repeated as a distinction that does not exist.

Record last checked upstream: 2026-05-27 · overall basis: Independently tested

Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.

Cloudflare Registrar DNS capability facts (DNSSEC, record types, minimum TTL, API record management) derived from Open Domain Data (CC BY 4.0), dataset version dns_capabilities@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.

RDAP endpoint

RDAP is the structured, JSON successor to WHOIS, and this is where Cloudflare Registrar answers it. Look a domain up without querying it yourself, or read what RDAP is.

Base URL
https://rdap.cloudflare.com/rdap/v1/
Independently testedBase URL from the IANA registrar-ids registry; aligned to the registrars-dataset rdap_base. Endpoint live-probed 2026-06-25 (cloudflare.com) and returned a valid RDAP domain object. www.iana.org/assignments/registrar-ids/registrar-ids-1.csv · checked 2026-06-25

Every registrar in this dataset, Cloudflare Registrar included, reports the same two things, so they are stated here once rather than as rows implying a difference: conformance rfc7483, the base RDAP response format, and an endpoint published in the IANA registrar-ids registry, which is what makes it discoverable without knowing it in advance.

Record last checked upstream: 2026-06-25

Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.

Cloudflare Registrar RDAP endpoint facts derived from Open Domain Data (CC BY 4.0), dataset version rdap_metadata@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.

Abuse and security contacts

Where to report a compromised domain, phishing, or a vulnerability. Upstream facts from Open Domain Data, with the record each was read from.

Cloudflare Registrar abuse and security contact details recorded by Open Domain Data, with the source and check date for each field
ContactCloudflare Registrar
Abuse email
From public sourcesAbuse contact published on Cloudflare's abuse page. www.cloudflare.com/abuse/ · checked 2026-05-25
security.txt (RFC 9116)
Published
From public sourcesRFC 9116 security.txt present at the .well-known path. www.cloudflare.com/.well-known/security.txt · checked 2026-05-25
Published abuse policywww.cloudflare.com/abuse/

"Not established" and "not published" are different facts and are kept apart here. Two registrars in this dataset return an HTTP 403 anti-bot response at the security.txt path, which is not the same as the path returning 404. Every ICANN-accredited registrar is required to publish an abuse contact and to act on reports; where this table cannot show one, check ICANN Lookup for the registrar abuse contact in the registry record.

Record last checked upstream: 2026-05-25

Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.

Cloudflare Registrar abuse and security contact facts derived from Open Domain Data (CC BY 4.0), dataset version registrar_security_contacts@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.

Pros
  • At-cost renewal pricing, no markup on wholesale
  • Best-in-class DNS performance
  • Strong security defaults
Cons
  • Smaller TLD selection than full-service registrars
  • Support is ticket-based for non-enterprise
  • No phone or live-chat support outside Enterprise

Alternatives

Compare and switch

FAQ

Is Cloudflare Registrar a good domain registrar?
Cloudflare Registrar scores 9.2/10 on our published weighting. That figure is illustrative: it is derived from the methodology weights rather than from hands-on testing, and this site publishes testing notes for 1 of 9 scored registrars and none from inside a paying account. Treat it as a summary of documented capability, not a measured result. At-cost renewal pricing, exceptional DNS, and strong security make Cloudflare Registrar the best long-term value for technical users.
Does Cloudflare Registrar offer free WHOIS privacy?
Free, included; redacted by default
What 2FA options does Cloudflare Registrar support?
TOTP and security keys (WebAuthn)
Does Cloudflare Registrar have an API?
Yes. Cloudflare Registrar offers a public API suitable for automated registration, DNS, and account workflows.
How much does a .com renewal cost at Cloudflare Registrar?
As of 2026-05-12, a .com renewal at Cloudflare Registrar costs $10.44 USD. Prices across Cloudflare Registrar were last checked 2026-05-12.
Has Cloudflare Registrar been hands-on tested?
Not yet. This review is built from Cloudflare Registrar's published documentation and the pricing we track for it; we have not published timed support tests or transfer runs for Cloudflare Registrar. See our methodology for the current testing status.

Changelog

  • 2026-05-27Facts updated to remove the outdated 'transfer-only' claim.
  • 2026-05-27: Full review refreshed.
  • 2026-06-22: Pricing re-checked.

Corrections are applied within 7 business days and noted here: corrections policy. Site-wide record: /changelog/.

Sources

Registrar identity facts (name, website, country, accreditation status) derived from Open Domain Data (CC BY 4.0), dataset version registrars@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.