# Firewalls Reference

DigitalOcean Cloud Firewalls are a network-based, stateful firewall service for Droplets provided at no additional cost. Cloud firewalls block all traffic that isn’t expressly permitted by a rule.

The [DigitalOcean API](https://docs.digitalocean.com/reference/index.html.md) lets you manage resources programmatically with standard HTTP requests. All actions available in the control panel are also available through the API.

[`doctl`](https://github.com/digitalocean/doctl) is the command-line interface for the DigitalOcean API. It supports most of the same actions available in the API and DigitalOcean Control Panel.

The [DigitalOcean Model Context Protocol (MCP) server](https://docs.digitalocean.com/reference/mcp/index.html.md) lets you use natural language prompts to interact with DigitalOcean Networking services to manage resources. All operations use argument-based input, and no resource URIs are used. These tools enable full automation and management of networking resources and configurations.

[DigitalOcean Firewalls API Reference](https://docs.digitalocean.com/reference/api/reference/firewalls): Use the DigitalOcean API to create, configure, list, and delete Cloud Firewalls.

[doctl compute firewall](https://docs.digitalocean.com/reference/doctl/reference/compute/firewall/index.html.md): The sub-commands of `doctl compute firewall` manage DigitalOcean Cloud Firewalls.

[DigitalOcean MCP Servers](https://docs.digitalocean.com/reference/mcp/index.html.md): MCP tools for managing DigitalOcean networking features.