@blazingcdn/mcp

BlazingCDN MCP Server

Official Model Context Protocol server for BlazingCDN. Lets AI agents (Claude, Cursor, Windsurf and any other MCP client) manage your CDN: list and configure resources, purge and warm up cache, query traffic metrics, manage custom domains, cloud storage and the Video CDN.

BlazingCDN is a CDN for video, software & sports media — best for videos, streaming (HLS/DASH), software distribution, games and updates, images, audio, archives and other large files. Built for high-volume projects pushing 5 TB+ per month.

Highlights

• 52 tools covering Anycast CDN, cache operations, metrics, custom domains, Cloud Storage and Video CDN
• Safe by default — starts in read-only mode (plus cache purge/warmup); create/update and delete operations are opt-in via environment flags
• No install required — runs with npx
• Talks directly to the BlazingCDN API (wapi.blazingcdn.com) with your API token; nothing else sits in between

Getting an account and API token

• Sign up at blazingcdn.com — every new account starts with a 14-day trial. The trial is time-limited only: there is no free traffic included, traffic used during the trial is billed at the regular $5/TB rate.
• Top up your balance with at least $10 right after signing up so your account doesn't go negative while you test.
• Create an API access token: BlazingCDN panel → Account → API tokens (or POST /api/v1/access_tokens).

Pricing (Flex plan)

After the trial you are on the pay-as-you-go Flex plan with a $25/month minimum, which covers your first 5 TB. Traffic is billed on a progressive scale:

Monthly traffic	Price per TB
First 5 TB	$5.00
5–25 TB	$4.50
25–100 TB	$4.00
100–500 TB	$3.50
500–1000 TB	$3.00
1000–1500 TB	$2.50

All plans include custom domains, unlimited requests, origin shield, URL signatures, free SSL and geo allow/block lists — no per-feature surcharges. Pushing more than 100 TB/month? Contact BlazingCDN to request custom volume pricing.

Quick start

Claude Desktop — one-click install (no terminal needed)

Download the latest .mcpb bundle from Releases and double-click it — Claude Desktop will ask for your API token and install the server. Node.js is not required.

Claude Code

claude mcp add blazingcdn --env BLAZINGCDN_API_TOKEN=your-token -- npx -y @blazingcdn/mcp

Claude Desktop / Cursor / Windsurf

Add to your MCP configuration (claude_desktop_config.json, .cursor/mcp.json, etc.):

{
  "mcpServers": {
    "blazingcdn": {
      "command": "npx",
      "args": ["-y", "@blazingcdn/mcp"],
      "env": {
        "BLAZINGCDN_API_TOKEN": "your-token"
      }
    }
  }
}

Running from GitHub instead of npm also works: replace "args" with ["-y", "github:BlazingCDN/BlazingCDN-MCP"].

Configuration

Environment variable	Required	Description
BLAZINGCDN_API_TOKEN	yes	API access token (Bearer)
BLAZINGCDN_API_URL	no	API base URL, default https://wapi.blazingcdn.com
BLAZINGCDN_ALLOW_WRITE	no	1 enables create/update tools
BLAZINGCDN_ALLOW_DELETE	no	1 enables delete tools (delete_custom_domain, delete_vcdn_resource)

Permission model

Mode	Tools	What agents can do
default	29	Read everything + purge/warm up cache
BLAZINGCDN_ALLOW_WRITE=1	50	…plus create/update CDN resources, domains, buckets, Video CDN
…+ BLAZINGCDN_ALLOW_DELETE=1	52	…plus delete custom domains and vCDN resources

Deleting CDN resources (pull zones), buckets, external storages, accounts or users is not implemented at all — those operations cannot be triggered through this server in any mode.

Tools

Anycast CDN

Tool	Description
list_cdn_resources	List all CDN resources (pull zones)
get_cdn_resource	Full settings of one resource
purge_cache	Purge everything or specific URLs; works per-resource or across resources by URL
warmup_cache	Pre-fetch paths into the cache (per compression method)
get_cdn_metrics	Bandwidth, cache hit, requests, HTTP codes, traffic — by day/hour/minute, filter by region/domain
get_prometheus_metrics	Prometheus-format metrics for monitoring
create_cdn_resource ✏️	Create a pull zone (origin, bucket or external storage)
update_cdn_resource ✏️	TTLs, compression, origin shield, HTTPS redirect, …
bulk_update_cdn_resources ✏️	Same settings on several resources
update_cdn_locations ✏️	Per-path cache rules

Domains & DNS

Tool	Description
list_custom_domains / search_custom_domains	Domains of a resource / match domains account-wide
list_system_dns_zones	System DNS zones for CDN hostnames
add_custom_domain ✏️ / update_custom_domain ✏️	Attach domains, manage SSL (auto SSL / certificate)
delete_custom_domain 🗑️	Remove a custom domain

Cloud Storage

list_buckets, get_bucket, get_bucket_metrics, get_storage_info, create_bucket ✏️, update_bucket ✏️, list_external_storages, get_external_storage, create_external_storage ✏️, update_external_storage ✏️, test_external_storage_connection ✏️

Video CDN

list_vcdn_resources, get_vcdn_resource, get_vcdn_statistics (totals, timeseries, by domain, top domains, HTTP codes, bandwidth, cache/storage), list_vcdn_domains, get_vcdn_domain, list_vcdn_files, get_vcdn_files_total, list_ftp_logins, list_auto_imports, get_vcdn_proxy, get_vcdn_ftp_settings, get_vcdn_settings, create_vcdn_resource ✏️, update_vcdn_resource ✏️, create_vcdn_domain ✏️, update_vcdn_domain ✏️, upload_vcdn_file ✏️, manage_auto_import ✏️, update_vcdn_proxy ✏️, update_vcdn_ftp_settings ✏️, manage_ftp_login ✏️, update_vcdn_settings ✏️, delete_vcdn_resource 🗑️

Docs & pricing

search_docs — search BlazingCDN documentation and product pages. estimate_traffic_cost — calculate the monthly Flex-plan cost for a given traffic volume (progressive tiers, offline).

✏️ requires BLAZINGCDN_ALLOW_WRITE=1 · 🗑️ requires BLAZINGCDN_ALLOW_DELETE=1

Example prompts

• "What's my CDN bandwidth this month, broken down by day?"
• "Purge /images/* on the blazingcdn.com resource"
• "Create a CDN resource for origin https://example.com and attach cdn.example.com with auto SSL"
• "Show HTTP 5xx rates for the last 24 hours per region"
• "Warm up /video/intro.mp4 with brotli compression"
• "How much would 190 TB/month cost on BlazingCDN?"

HTTP transport (self-hosting)

The server also speaks Streamable HTTP for remote deployments:

BLAZINGCDN_ALLOW_WRITE=1 npx -y @blazingcdn/mcp --transport http --port 8462

In HTTP mode the server is stateless and each request must carry the caller's BlazingCDN API token as Authorization: Bearer <token> (an env BLAZINGCDN_API_TOKEN acts as fallback). Put it behind TLS (reverse proxy) before exposing it anywhere.

Development

npm install
npm test        # vitest
npm run build   # tsc -> dist/
npx @modelcontextprotocol/inspector node dist/index.js   # interactive inspector

Privacy Policy

The server collects nothing: no telemetry, no analytics, no third-party calls. Your API token stays in process memory and is sent only to the BlazingCDN API over HTTPS. Full policy: PRIVACY.md · service-level data handling: BlazingCDN Legal Information.

Security notes

• The API token is read from the environment and sent only to BLAZINGCDN_API_URL; it is never logged. No middleman, no telemetry.
• Read-only by default; destructive operations (zone/bucket/account deletion) are not implemented in any mode.
• Tool output is truncated at 60 KB to keep agent contexts healthy.
• API requests time out after 30 s (file uploads: 5 min).

Full threat model, limitations and recommendations: SECURITY.md.

License

MIT © BlazingCDN