bunny.net CDN and Shield
Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs
ماذا يمكنك أن تفعل مع bunny.net CDN and Shield؟
- Explains what rules will really do.
get_shield_zonereturnsnotesthat warn, for example, when Block rules only log because the zone's WAF execution mode is Log. - Reads WAF event logs.
shield_event_logsshows what the WAF blocked, challenged or logged in the last 72 hours, grouped by rule, IP, JA4 fingerprint and more. - Reports what changed. Update tools return a before-and-after diff.
update_pull_zonealso lists settings bunny.net changed that you did not ask for. - Keeps responses small. Pull zones, edge rules, origin errors and event logs are summarised. Pass
detail: truefor the raw response. - Hides credentials. Token authentication keys, AWS signing keys, TLS certificates and private keys, log forwarding tokens, and cookie or
Authorizationvalues in edge rule triggers are replaced with<hidden>, also in raw responses.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
@fullfatthings/bunny-mcpclaude mcp add bunny-net-cdn-and-shield -e 'BUNNY_API_KEY=<your bunny_api_key>' -e 'BUNNY_READONLY=<BUNNY_READONLY>' -- npx -y @fullfatthings/bunny-mcp@1.0.1
{
"mcpServers": {
"bunny-net-cdn-and-shield": {
"command": "npx",
"args": [
"-y",
"@fullfatthings/bunny-mcp@1.0.1"
],
"env": {
"BUNNY_API_KEY": "<your bunny_api_key>",
"BUNNY_READONLY": "<BUNNY_READONLY>"
}
}
}
}
متغيرات البيئة
BUNNY_API_KEYإلزامي سري bunny.net account API key (full account access)BUNNY_READONLYSet to 1 to register only read tools
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
bunny-mcp
An MCP server for debugging bunny.net CDN sites and managing bunny Shield, the bunny.net web application firewall (WAF).
This is an unofficial project. It is not affiliated with or endorsed by bunny.net.
It covers pull zones (CDN sites), edge rules, cache purges, CDN statistics, origin error logs, and Shield: WAF settings, custom WAF rules, rate limits, bot detection and WAF event logs. It does not cover DNS, storage, Stream or edge scripts. For those, see anvme/bunnycdn-mcp or Digitizers/bunny-mcp.
What it does differently
- Explains what rules will really do.
get_shield_zonereturnsnotesthat warn, for example, when Block rules only log because the zone's WAF execution mode is Log. - Reads WAF event logs.
shield_event_logsshows what the WAF blocked, challenged or logged in the last 72 hours, grouped by rule, IP, JA4 fingerprint and more. - Reports what changed. Update tools return a before-and-after diff.
update_pull_zonealso lists settings bunny.net changed that you did not ask for. - Keeps responses small. Pull zones, edge rules, origin errors and event logs are summarised. Pass
detail: truefor the raw response. - Hides credentials. Token authentication keys, AWS signing keys, TLS certificates and private keys, log forwarding tokens, and cookie or
Authorizationvalues in edge rule triggers are replaced with<hidden>, also in raw responses.
Requirements
- Node.js 20 or later
- A bunny.net account API key, from Account settings > API key in the bunny.net dashboard. This key gives full access to the account.
Install
Claude Code:
claude mcp add bunny --env BUNNY_API_KEY=your-key -- npx -y @fullfatthings/bunny-mcp
Other MCP clients (for example Claude Desktop):
{
"mcpServers": {
"bunny": {
"command": "npx",
"args": ["-y", "@fullfatthings/bunny-mcp"],
"env": { "BUNNY_API_KEY": "your-key" }
}
}
}
Configuration
| Variable | Meaning |
|---|---|
BUNNY_API_KEY | Required. Your bunny.net account API key. |
BUNNY_READONLY | Set to 1 to register only the read tools. Write tools are then absent from the tool list, so the assistant cannot call them. |
Tools
Read tools:
| Tool | Purpose |
|---|---|
list_pull_zones | List pull zones with IDs, origins and hostnames. |
get_pull_zone | One pull zone: hostnames, readable edge rules, and caching, origin and security settings. |
cdn_statistics | Bandwidth, requests, cache hit rate and error responses. |
origin_errors | Failed requests from bunny.net to your origin on one day, with counts by error. |
get_shield_zone | WAF settings, custom rules, rate limits and bot detection, with notes. |
shield_event_logs | Requests the WAF blocked, challenged or logged in the last 72 hours. |
Write tools (not registered when BUNNY_READONLY=1):
| Tool | Purpose |
|---|---|
update_pull_zone | Change pull zone settings. |
purge_cache | Purge one URL or a whole pull zone. |
save_edge_rule | Create or update an edge rule. |
set_edge_rule_enabled | Switch an edge rule on or off. |
delete_edge_rule | Delete an edge rule. |
update_shield_zone | Change WAF settings, including adding or removing single rule IDs from lists. |
update_bot_detection | Change bot detection mode and sensitivity. |
save_waf_rule | Create or update a custom WAF rule. |
save_rate_limit | Create or update a rate limit. |
delete_shield_rule | Delete a custom WAF rule or rate limit. |
To test a new WAF rule safely, save it with action Log, check shield_event_logs, then save it again with action Block.
Development
npm install
npm test
To release, run npm version patch (or minor or major). It updates package.json and server.json, commits, tags and pushes; the tag starts a GitHub Action that publishes to npm and the MCP registry.
Licence
MIT. See LICENSE.
الأسئلة الشائعة
ما هو bunny.net CDN and Shield؟
Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs
كيف أثبّت bunny.net CDN and Shield؟
يعمل على جهازك. في Claude Code: claude mcp add bunny-net-cdn-and-shield -e 'BUNNY_API_KEY=<your bunny_api_key>' -e 'BUNNY_READONLY=<BUNNY_READONLY>' -- npx -y @fullfatthings/bunny-mcp@1.0.1. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج bunny.net CDN and Shield إلى مفتاح API؟
نعم. يتطلب BUNNY_API_KEY، وتضبطها في إعداداته.
هل bunny.net CDN and Shield مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون bunny.net CDN and Shield؟
ينشره fullfatthings. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.