src/tools/cloudflare.ts

Functions

Imports

It imports src/limits.ts, src/ops-cloudflare-config.ts, src/tools/docs.ts. Imported by src/server.ts.

Source

1import { McpServer } from "@modelcontextprotocol/server";
2import { z } from "zod";
3import { CF_CONFIG_ACTIONS, CF_PERMISSION, readCloudflareConfig } from "../ops-cloudflare-config";
4import { fail, ok, type ToolCtx } from "./docs";
5import { bounded } from "../limits";
6
7// A zone name as Cloudflare lists it: labels of letters, digits and hyphens.
8const ZONE_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/i;
9
10export function defineCloudflareOperations(server: McpServer, ctx: ToolCtx): void {
11  const { env } = ctx;
12
13  // Cloudflare Access and Email Routing, read. Ruled 2026-09-29, "Capsid MCP roadmap,
14  // build or don't build". Admin only in whole: it reads the
15  // account's login gates and mail routes, which span every namespace. TOOL_GRANTS in
16  // src/scope.ts states it and the registrar refuses anyone else before this handler
17  // runs. It reads only, through src/ops-cloudflare-config.ts, which copies named
18  // fields and never passes a Cloudflare object through, so no client secret, SCIM
19  // credential or aud tag reaches the caller.
20  ctx.ops.define(
21    "cloudflare_config",
22    {
23      description:
24        `Cloudflare Access and Email Routing configuration for the account, read with CF_OPS_TOKEN. Admin only. It reads and never writes. action "access_apps": each Access application's id, name, domain, type, self_hosted_domains, destinations (type, uri, hostname) and its policies (name, decision). action "access_policies": each reusable policy's id, name, decision and its include, exclude and require rules as types, with the value only for email (the address), email_domain (the domain), group (the group id) and service_token (the token id). action "email_rules": each zone's Email Routing rules (name, enabled, priority, matchers, actions); zone narrows it to one zone name, else every zone in the account. action "email_addresses": each destination address and whether it is verified. Client secrets, SCIM credentials and aud tags are never returned. A 403 names the permission the token lacks: ${CF_PERMISSION.access} for Access, ${CF_PERMISSION.zones} and ${CF_PERMISSION.rules} for rules, ${CF_PERMISSION.addresses} for addresses.`,
25      inputSchema: {
26        action: z.enum(CF_CONFIG_ACTIONS).describe("access_apps | access_policies | email_rules | email_addresses."),
27        zone: bounded(253).regex(ZONE_NAME).optional().describe("For email_rules: one zone name, such as example.com. Omitted reads every zone in the account."),
28      },
29    },
30    async (args) => {
31      try {
32        if (args.zone !== undefined && args.action !== "email_rules") return fail(`zone applies to email_rules only, and this call is ${args.action}.`);
33        // Looked up per call, not captured, so the Worker's fetch is the one in scope.
34        return ok(await readCloudflareConfig(env, args.action, args.zone?.toLowerCase(), (url, init) => fetch(url, init)));
35      } catch (err) {
36        return fail(err instanceof Error ? err.message : String(err));
37      }
38    }
39  );
40}