Skip to content

Commit d16c67c

Browse files
andre-j3susandre-j3sus
committed
Add Radar MCP server
1 parent f9b1f7e commit d16c67c

File tree

20 files changed

+6869
-17
lines changed

20 files changed

+6869
-17
lines changed

‎.gitignore‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,5 +48,6 @@ yarn-error.log*
4848
.sentryclirc.lock/
4949
tmp.json
5050
tmp.ts
51+
.idea
5152

52-
apps/sandbox-container/workdir
53+
apps/sandbox-container/workdir

‎README.md‎

Lines changed: 9 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -13,17 +13,14 @@ Open Claude Desktop and navigate to Settings -> Developer -> Edit Config. This o
1313

1414
Replace the content with the following configuration. Once you restart Claude Desktop, a browser window will open showing your OAuth login page. Complete the authentication flow to grant Claude access to your MCP server. After you grant access, the tools will become available for you to use.
1515

16-
```
16+
```json
1717
{
18-
"mcpServers": {
19-
"cloudflare": {
20-
"command": "npx",
21-
"args": [
22-
"mcp-remote",
23-
"https://observability.mcp.cloudflare.com/sse"
24-
]
25-
}
26-
}
18+
"mcpServers": {
19+
"cloudflare": {
20+
"command": "npx",
21+
"args": ["mcp-remote", "https://observability.mcp.cloudflare.com/sse"]
22+
}
23+
}
2724
}
2825
```
2926

@@ -54,7 +51,8 @@ Some features may require a paid Cloudflare Workers plan. Ensure your Cloudflare
5451

5552
### Apps
5653

57-
- [workers-observability](apps/workers-observability/): The Workers Observability MCP server
54+
- [workers-observability](apps/workers-observability): The Workers Observability MCP server
55+
- [radar](apps/radar): The Cloudflare Radar MCP server
5856

5957
### Packages
6058

‎apps/radar/.dev.vars.example‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
CLOUDFLARE_CLIENT_ID=
2+
CLOUDFLARE_CLIENT_SECRET=
3+
URL_SCANNER_API_TOKEN=

‎apps/radar/.eslintrc.cjs‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
/** @type {import("eslint").Linter.Config} */
2+
module.exports = {
3+
root: true,
4+
extends: ['@repo/eslint-config/default.cjs'],
5+
}

‎apps/radar/README.md‎

Lines changed: 117 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,117 @@
1+
# Cloudflare Radar MCP Server 📡
2+
3+
This is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server that supports remote MCP
4+
connections, with Cloudflare OAuth built-in.
5+
6+
It integrates tools powered by the [Cloudflare Radar API](https://developers.cloudflare.com/radar/) to provide global
7+
Internet traffic insights, trends and other utilities.
8+
9+
## 🔨 Available Tools
10+
11+
Currently available tools:
12+
13+
| **Category** | **Tool** | **Description** |
14+
| ---------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------- |
15+
| **HTTP Requests** | `get_http_requests_data` | Fetches HTTP request data (timeseries, summaries, and grouped timeseries across dimensions like `deviceType`, `botClass`) |
16+
| **Autonomous Systems** | `list_autonomous_systems` | Lists ASes; filter by location and sort by population size |
17+
| | `get_as_details` | Retrieves detailed info for a specific ASN |
18+
| **IP Addresses** | `get_ip_details` | Provides details about a specific IP address |
19+
| **Traffic Anomalies** | `get_traffic_anomalies` | Lists traffic anomalies; filter by AS, location, start date, and end date |
20+
| **Domains** | `get_domains_ranking` | Get top or trending domains |
21+
| | `get_domain_rank_details` | Get domain rank details |
22+
| **URL Scanner** | `scan_url` | Scans a URL via [Cloudflare’s URL Scanner](https://developers.cloudflare.com/radar/investigate/url-scanner/) |
23+
24+
This MCP server is still a work in progress, and we plan to add more tools in the future.
25+
26+
### Prompt Examples
27+
28+
- `What are the most used operating systems?`
29+
- `What are the top 5 ASes in Portugal?`
30+
- `Get information about ASN 13335.`
31+
- `What are the details of IP address 1.1.1.1?`
32+
- `List me traffic anomalies in Brazil over the last year.`
33+
- `Compare domain rankings in the US and UK.`
34+
- `Give me rank details for google.com in March 2025.`
35+
- `Scan https://example.com.`
36+
37+
## Access the remote MCP server from Claude Desktop
38+
39+
Open Claude Desktop and navigate to `Settings -> Developer -> Edit Config`.
40+
This opens the configuration file that controls which MCP servers Claude can access.
41+
42+
Replace the content with the following configuration:
43+
44+
```json
45+
{
46+
"mcpServers": {
47+
"cloudflare": {
48+
"command": "npx",
49+
"args": ["mcp-remote", "https://radar.mcp.cloudflare.com/sse"]
50+
}
51+
}
52+
}
53+
```
54+
55+
Once you restart Claude Desktop, a browser window will open showing your OAuth login page.
56+
Complete the authentication flow to grant Claude access to your MCP server.
57+
After you grant access, the tools will become available for you to use.
58+
59+
## Setup
60+
61+
#### Secrets
62+
63+
Set secrets via Wrangler:
64+
65+
```bash
66+
npx wrangler secret put CLOUDFLARE_CLIENT_ID -e <ENVIRONMENT>
67+
npx wrangler secret put CLOUDFLARE_CLIENT_SECRET -e <ENVIRONMENT>
68+
npx wrangler secret put URL_SCANNER_API_TOKEN -e <ENVIRONMENT>
69+
```
70+
71+
#### Set up a KV namespace
72+
73+
Create the KV namespace:
74+
75+
```bash
76+
npx wrangler kv namespace create "OAUTH_KV"
77+
```
78+
79+
Then, update the Wrangler file with the generated KV namespace ID.
80+
81+
#### Deploy & Test
82+
83+
Deploy the MCP server to make it available on your workers.dev domain:
84+
85+
```bash
86+
npx wrangler deploy -e <ENVIRONMENT>
87+
```
88+
89+
Test the remote server using [Inspector](https://modelcontextprotocol.io/docs/tools/inspector):
90+
91+
```bash
92+
npx @modelcontextprotocol/inspector@latest
93+
```
94+
95+
## Local Development
96+
97+
If you'd like to iterate and test your MCP server, you can do so in local development.
98+
This will require you to create another OAuth App on Cloudflare:
99+
100+
1. Create a `.dev.vars` file in your project root with:
101+
102+
```
103+
CLOUDFLARE_CLIENT_ID=your_development_cloudflare_client_id
104+
CLOUDFLARE_CLIENT_SECRET=your_development_cloudflare_client_secret
105+
URL_SCANNER_API_TOKEN=your_development_url_scanner_api_token
106+
```
107+
108+
2. Start the local development server:
109+
110+
```bash
111+
npx wrangler dev
112+
```
113+
114+
3. To test locally, open Inspector, and connect to `http://localhost:8788/sse`.
115+
Once you follow the prompts, you'll be able to "List Tools".
116+
117+
You can also connect to Claude Desktop.

‎apps/radar/package.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"name": "cloudflare-radar-mcp-server",
3+
"version": "0.0.1",
4+
"private": true,
5+
"scripts": {
6+
"check:lint": "run-eslint-workers",
7+
"check:types": "run-tsc",
8+
"deploy": "run-wrangler-deploy",
9+
"dev": "wrangler dev",
10+
"start": "wrangler dev",
11+
"cf-typegen": "wrangler types",
12+
"test": "vitest run"
13+
},
14+
"dependencies": {
15+
"@cloudflare/workers-oauth-provider": "0.0.3",
16+
"@hono/zod-validator": "0.4.3",
17+
"@modelcontextprotocol/sdk": "1.10.2",
18+
"@repo/mcp-common": "workspace:*",
19+
"@repo/mcp-observability": "workspace:*",
20+
"agents": "0.0.67",
21+
"cloudflare": "4.2.0",
22+
"hono": "4.7.6",
23+
"zod": "3.24.2"
24+
},
25+
"devDependencies": {
26+
"@cloudflare/vitest-pool-workers": "0.8.14",
27+
"@cloudflare/workers-types": "4.20250410.0",
28+
"@types/node": "22.14.1",
29+
"prettier": "3.5.3",
30+
"typescript": "5.5.4",
31+
"vitest": "3.0.9",
32+
"wrangler": "4.10.0"
33+
}
34+
}

‎apps/radar/src/context.ts‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
import type { RadarMCP } from './index'
2+
3+
export interface Env {
4+
OAUTH_KV: KVNamespace
5+
ENVIRONMENT: 'development' | 'staging' | 'production'
6+
ACCOUNT_ID: '6702657b6aa048cf3081ff3ff3c9c52f'
7+
MCP_SERVER_NAME: string
8+
MCP_SERVER_VERSION: string
9+
CLOUDFLARE_CLIENT_ID: string
10+
CLOUDFLARE_CLIENT_SECRET: string
11+
URL_SCANNER_API_TOKEN: string
12+
MCP_OBJECT: DurableObjectNamespace<RadarMCP>
13+
MCP_METRICS: AnalyticsEngineDataset
14+
}

‎apps/radar/src/index.ts‎

Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
import OAuthProvider from '@cloudflare/workers-oauth-provider'
2+
import { McpAgent } from 'agents/mcp'
3+
4+
import {
5+
createAuthHandlers,
6+
handleTokenExchangeCallback,
7+
} from '@repo/mcp-common/src/cloudflare-oauth-handler'
8+
import { getEnv } from '@repo/mcp-common/src/env'
9+
import { CloudflareMCPServer } from '@repo/mcp-common/src/server'
10+
import { MetricsTracker } from '@repo/mcp-observability'
11+
12+
import { registerRadarTools } from './tools/radar'
13+
import { registerUrlScannerTools } from './tools/url-scanner'
14+
15+
import type { UserSchema } from '@repo/mcp-common/src/cloudflare-oauth-handler'
16+
import type { Env } from './context'
17+
18+
const env = getEnv<Env>()
19+
20+
const metrics = new MetricsTracker(env.MCP_METRICS, {
21+
name: env.MCP_SERVER_NAME,
22+
version: env.MCP_SERVER_VERSION,
23+
})
24+
25+
// Context from the auth process, encrypted & stored in the auth token
26+
// and provided to the DurableMCP as this.props
27+
export type Props = {
28+
accessToken: string
29+
user: UserSchema['result']
30+
}
31+
32+
export type State = never
33+
34+
export class RadarMCP extends McpAgent<Env, State, Props> {
35+
_server: CloudflareMCPServer | undefined
36+
set server(server: CloudflareMCPServer) {
37+
this._server = server
38+
}
39+
40+
get server(): CloudflareMCPServer {
41+
if (!this._server) {
42+
throw new Error('Tried to access server before it was initialized')
43+
}
44+
45+
return this._server
46+
}
47+
48+
constructor(
49+
public ctx: DurableObjectState,
50+
public env: Env
51+
) {
52+
super(ctx, env)
53+
}
54+
55+
async init() {
56+
this.server = new CloudflareMCPServer({
57+
userId: this.props.user.id,
58+
wae: this.env.MCP_METRICS,
59+
serverInfo: {
60+
name: this.env.MCP_SERVER_NAME,
61+
version: this.env.MCP_SERVER_VERSION,
62+
},
63+
})
64+
65+
registerRadarTools(this)
66+
registerUrlScannerTools(this)
67+
}
68+
}
69+
70+
// TODO add radar:read and url_scanner:write scopes once they are available
71+
// Also remove URL_SCANNER_API_TOKEN env var
72+
const RadarScopes = {
73+
'user:read': 'See your user info such as name, email address, and account memberships.',
74+
offline_access: 'Grants refresh tokens for long-lived access.',
75+
} as const
76+
77+
export default new OAuthProvider({
78+
apiRoute: '/sse',
79+
// @ts-ignore
80+
apiHandler: RadarMCP.mount('/sse'),
81+
// @ts-ignore
82+
defaultHandler: createAuthHandlers({ scopes: RadarScopes, metrics }),
83+
authorizeEndpoint: '/oauth/authorize',
84+
tokenEndpoint: '/token',
85+
tokenExchangeCallback: (options) =>
86+
handleTokenExchangeCallback(options, env.CLOUDFLARE_CLIENT_ID, env.CLOUDFLARE_CLIENT_SECRET),
87+
// Cloudflare access token TTL
88+
accessTokenTTL: 3600,
89+
clientRegistrationEndpoint: '/register',
90+
})

0 commit comments

Comments
 (0)