diff --git a/apps/sim/tools/cloudflare/get_tunnel.ts b/apps/sim/tools/cloudflare/get_tunnel.ts
index cf0faf957f0..4ab3386064e 100644
--- a/apps/sim/tools/cloudflare/get_tunnel.ts
+++ b/apps/sim/tools/cloudflare/get_tunnel.ts
@@ -6,7 +6,7 @@ export const getTunnelTool: ToolConfig<CloudflareGetTunnelParams, CloudflareTunn
   id: 'cloudflare_get_tunnel',
   name: 'Cloudflare Get Tunnel',
   description:
-    'Reads a single Cloudflare Tunnel (cloudflared), including its health status and active connector connections. Requires an API token with Account Cloudflare Tunnel Read.',
+    'Reads a single Cloudflare Tunnel (cloudflared), including its health status and active connector connections (from the dedicated connections endpoint). Requires an API token with Account Cloudflare Tunnel Read.',
   version: '1.0.0',
 
   params: {
@@ -37,32 +37,71 @@ export const getTunnelTool: ToolConfig<CloudflareGetTunnelParams, CloudflareTunn
     headers: (params) => cloudflareHeaders(params.apiKey),
   },
 
-  transformResponse: async (response: Response) => {
+  transformResponse: async (
+    response: Response,
+    params?: CloudflareGetTunnelParams,
+    context?: { signal?: AbortSignal }
+  ) => {
     const data = await response.json()
 
+    const emptyOutput = {
+      id: '',
+      name: null,
+      account_tag: null,
+      config_src: null,
+      status: null,
+      tun_type: null,
+      remote_config: null,
+      metadata: null,
+      created_at: null,
+      deleted_at: null,
+      conns_active_at: null,
+      conns_inactive_at: null,
+      connections: null,
+    }
+
     if (!data.success) {
       return {
         success: false,
-        output: {
-          id: '',
-          name: null,
-          account_tag: null,
-          config_src: null,
-          status: null,
-          tun_type: null,
-          remote_config: null,
-          metadata: null,
-          created_at: null,
-          deleted_at: null,
-          conns_active_at: null,
-          conns_inactive_at: null,
-          connections: null,
-        },
+        output: emptyOutput,
         error: cloudflareErrorMessage(data, 'Failed to get tunnel'),
       }
     }
 
     const tunnel = data.result
+    let connections: unknown[] | null = null
+    if (params?.accountId && params?.tunnelId && params?.apiKey) {
+      try {
+        const connectionsUrl = `https://api.cloudflare.com/client/v4/accounts/${params.accountId.trim()}/cfd_tunnel/${params.tunnelId.trim()}/connections`
+        // boundary-raw-fetch: requests the external Cloudflare connections endpoint
+        const connectionsRes = await fetch(connectionsUrl, {
+          method: 'GET',
+          headers: cloudflareHeaders(params.apiKey),
+          signal: context?.signal,
+        })
+        const connectionsData = await connectionsRes.json()
+        if (!connectionsRes.ok || !connectionsData?.success) {
+          return {
+            success: false,
+            output: emptyOutput,
+            error: cloudflareErrorMessage(connectionsData, 'Failed to get tunnel connections'),
+          }
+        }
+        connections = Array.isArray(connectionsData.result)
+          ? connectionsData.result.flatMap(
+              (connector: { conns?: unknown[] }) => connector.conns ?? []
+            )
+          : []
+      } catch (error) {
+        if (context?.signal?.aborted || (error as Error)?.name === 'AbortError') throw error
+        return {
+          success: false,
+          output: emptyOutput,
+          error: 'Failed to get tunnel connections',
+        }
+      }
+    }
+
     return {
       success: true,
       output: {
@@ -78,7 +117,7 @@ export const getTunnelTool: ToolConfig<CloudflareGetTunnelParams, CloudflareTunn
         deleted_at: tunnel?.deleted_at ?? null,
         conns_active_at: tunnel?.conns_active_at ?? null,
         conns_inactive_at: tunnel?.conns_inactive_at ?? null,
-        connections: tunnel?.connections ?? null,
+        connections,
       },
     }
   },
@@ -126,7 +165,8 @@ export const getTunnelTool: ToolConfig<CloudflareGetTunnelParams, CloudflareTunn
     },
     connections: {
       type: 'json',
-      description: 'Active connector connections for the tunnel',
+      description:
+        'Active connector connections for the tunnel (from GET .../cfd_tunnel/{id}/connections)',
       optional: true,
     },
   },
diff --git a/apps/sim/tools/cloudflare/list_tunnels.ts b/apps/sim/tools/cloudflare/list_tunnels.ts
index 14f8821e1da..5a18da407e1 100644
--- a/apps/sim/tools/cloudflare/list_tunnels.ts
+++ b/apps/sim/tools/cloudflare/list_tunnels.ts
@@ -18,7 +18,7 @@ export const listTunnelsTool: ToolConfig<
   id: 'cloudflare_list_tunnels',
   name: 'Cloudflare List Tunnels',
   description:
-    'Lists the Cloudflare Tunnels (cloudflared) in an account, with their health status and active connections. Requires an API token with Account Cloudflare Tunnel Read.',
+    'Lists the Cloudflare Tunnels (cloudflared) in an account, with their health status. Connections are no longer included on list responses (Cloudflare API change 2026-10-05); use cloudflare_get_tunnel for a tunnel’s connections. Requires an API token with Account Cloudflare Tunnel Read.',
   version: '1.0.0',
 
   params: {
@@ -155,7 +155,7 @@ export const listTunnelsTool: ToolConfig<
           deleted_at: tunnel.deleted_at ?? null,
           conns_active_at: tunnel.conns_active_at ?? null,
           conns_inactive_at: tunnel.conns_inactive_at ?? null,
-          connections: tunnel.connections ?? null,
+          connections: null,
         })),
         total_count: data.result_info?.total_count ?? tunnels.length,
       },
@@ -215,7 +215,8 @@ export const listTunnelsTool: ToolConfig<
           },
           connections: {
             type: 'json',
-            description: 'Active connector connections for the tunnel',
+            description:
+              'Always null on list. Use cloudflare_get_tunnel to fetch active connections for a specific tunnel.',
             optional: true,
           },
         },