Merge branch 'main' into dex-mcp

Author: cf-ml

.dockerignore

@@ -0,0 +1,6 @@
+**/node_modules/
+**/.gitignore
+**/README.md
+**/.vscode/
+**/Dockerfile
+**/out/

.github/workflows/test-and-check.yml

@@ -21,6 +21,8 @@ jobs:
           cache: 'pnpm'
       - name: Install dependencies
         run: pnpm install
+      - name: Syncpack lint
+        run: pnpm syncpack lint
       - name: Run linter
         run: pnpm check:turbo
       - name: Run linter (formatting)

.gitignore

@@ -48,5 +48,6 @@ yarn-error.log*
 .sentryclirc.lock/
 tmp.json
 tmp.ts
+.idea
 
-apps/sandbox-container/workdir
+apps/sandbox-container/workdir

.syncpackrc.cjs

@@ -14,12 +14,12 @@ const config = {
 		{
 			label: 'Sentry types that are compatible with toucan-js',
 			dependencies: ['@sentry/types', '@sentry/tracing'],
-			pinVersion: '7.76.0',
+			pinVersion: '8.9.2',
 		},
 		{
 			label: 'toucan-js that is compatible with pinned sentry types',
 			dependencies: ['toucan-js'],
-			pinVersion: '3.3.1',
+			pinVersion: '4.1.1',
 		},
 		{
 			label: 'pin vitest compatible with @cloudflare/vitest-pool-workers',

.vscode/launch.json

@@ -0,0 +1,15 @@
+{
+	"configurations": [
+		{
+			"name": "Wrangler",
+			"type": "node",
+			"request": "attach",
+			"port": 9229,
+			"cwd": "/",
+			"resolveSourceMapLocations": null,
+			"attachExistingChildren": false,
+			"autoAttachChildProcesses": false,
+			"sourceMaps": true // works with or without this line
+		}
+	]
+}

README.md

@@ -13,17 +13,14 @@ Open Claude Desktop and navigate to Settings -> Developer -> Edit Config. This o
 
 Replace the content with the following configuration. Once you restart Claude Desktop, a browser window will open showing your OAuth login page. Complete the authentication flow to grant Claude access to your MCP server. After you grant access, the tools will become available for you to use.
 
-```
+```json
 {
-  "mcpServers": {
-    "cloudflare": {
-      "command": "npx",
-      "args": [
-        "mcp-remote",
-        "https://observability.mcp.cloudflare.com/sse"
-      ]
-    }
-  }
+	"mcpServers": {
+		"cloudflare": {
+			"command": "npx",
+			"args": ["mcp-remote", "https://observability.mcp.cloudflare.com/sse"]
+		}
+	}
 }
 ```
 
@@ -54,7 +51,8 @@ Some features may require a paid Cloudflare Workers plan. Ensure your Cloudflare
 
 ### Apps
 
-- [workers-observability](apps/workers-observability/): The Workers Observability MCP server
+- [workers-observability](apps/workers-observability): The Workers Observability MCP server
+- [radar](apps/radar): The Cloudflare Radar MCP server
 
 ### Packages
 

apps/cloudflare-one-casb/.dev.vars.example

@@ -0,0 +1,2 @@
+CLOUDFLARE_CLIENT_ID=
+CLOUDFLARE_CLIENT_SECRET=

apps/cloudflare-one-casb/.eslintrc.cjs

@@ -0,0 +1,5 @@
+/** @type {import("eslint").Linter.Config} */
+module.exports = {
+	root: true,
+	extends: ['@repo/eslint-config/default.cjs'],
+}

apps/cloudflare-one-casb/README.md

@@ -0,0 +1,31 @@
+# Model Context Protocol (MCP) Server + Cloudflare OAuth
+
+This is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server that supports remote MCP connections, with Cloudflare OAuth built-in.
+
+You should use this as a template to build an MCP server for Cloudflare, provided by Cloudflare at `server-name.mcp.cloudflare.com`. It has a basic set of tools `apps/template-start-here/src/tools/logs.ts` — you can modify these to do what you need
+
+## Getting Started
+
+- Set secrets via Wrangler
+
+```bash
+wrangler secret put CLOUDFLARE_CLIENT_ID
+wrangler secret put CLOUDFLARE_CLIENT_SECRET
+```
+
+#### Set up a KV namespace
+
+- Create the KV namespace:
+  `wrangler kv:namespace create "OAUTH_KV"`
+- Update the Wrangler file with the KV ID
+
+#### Deploy & Test
+
+Deploy the MCP server to make it available on your workers.dev domain
+` wrangler deploy`
+
+Test the remote server using [Inspector](https://modelcontextprotocol.io/docs/tools/inspector):
+
+```
+npx wrangler deploy
+```

apps/cloudflare-one-casb/package.json

@@ -0,0 +1,33 @@
+{
+	"name": "cloudflare-casb-mcp-server",
+	"version": "0.0.1",
+	"private": true,
+	"scripts": {
+		"check:lint": "run-eslint-workers",
+		"check:types": "run-tsc",
+		"deploy": "wrangler deploy",
+		"dev": "wrangler dev",
+		"start": "wrangler dev",
+		"cf-typegen": "wrangler types",
+		"test": "vitest run"
+	},
+	"dependencies": {
+		"@cloudflare/workers-oauth-provider": "0.0.2",
+		"@hono/zod-validator": "0.4.3",
+		"@modelcontextprotocol/sdk": "1.9.0",
+		"@repo/mcp-common": "workspace:*",
+		"agents": "0.0.49",
+		"cloudflare": "4.2.0",
+		"hono": "4.7.6",
+		"zod": "3.24.2"
+	},
+	"devDependencies": {
+		"@cloudflare/vitest-pool-workers": "0.8.14",
+		"@cloudflare/workers-types": "4.20250410.0",
+		"@types/jsonwebtoken": "9.0.9",
+		"prettier": "3.5.3",
+		"typescript": "5.5.4",
+		"vitest": "3.0.9",
+		"wrangler": "4.10.0"
+	}
+}