English Français العربية

bunny.net CDN and Shield

Registre officiel Outils de développement

Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs

Code source Documentation

Que pouvez-vous faire avec bunny.net CDN and Shield ?

  • Explains what rules will really do. get_shield_zone returns notes that warn, for example, when Block rules only log because the zone's WAF execution mode is Log.
  • Reads WAF event logs. shield_event_logs shows what the WAF blocked, challenged or logged in the last 72 hours, grouped by rule, IP, JA4 fingerprint and more.
  • Reports what changed. Update tools return a before-and-after diff. update_pull_zone also lists settings bunny.net changed that you did not ask for.
  • Keeps responses small. Pull zones, edge rules, origin errors and event logs are summarised. Pass detail: true for the raw response.
  • Hides credentials. Token authentication keys, AWS signing keys, TLS certificates and private keys, log forwarding tokens, and cookie or Authorization values in edge rule triggers are replaced with <hidden>, also in raw responses.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package @fullfatthings/bunny-mcp
Claude Code 
claude mcp add bunny-net-cdn-and-shield -e 'BUNNY_API_KEY=<your bunny_api_key>' -e 'BUNNY_READONLY=<BUNNY_READONLY>' -- npx -y @fullfatthings/bunny-mcp@1.0.1
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "bunny-net-cdn-and-shield": {
            "command": "npx",
            "args": [
                "-y",
                "@fullfatthings/bunny-mcp@1.0.1"
            ],
            "env": {
                "BUNNY_API_KEY": "<your bunny_api_key>",
                "BUNNY_READONLY": "<BUNNY_READONLY>"
            }
        }
    }
}

Variables d'environnement

  • BUNNY_API_KEY obligatoire secret bunny.net account API key (full account access)
  • BUNNY_READONLY Set to 1 to register only read tools

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. bunny-mcp
  2. What it does differently
  3. Requirements
  4. Install
  5. Configuration
  6. Tools
  7. Development
  8. Licence

bunny-mcp

An MCP server for debugging bunny.net CDN sites and managing bunny Shield, the bunny.net web application firewall (WAF).

This is an unofficial project. It is not affiliated with or endorsed by bunny.net.

It covers pull zones (CDN sites), edge rules, cache purges, CDN statistics, origin error logs, and Shield: WAF settings, custom WAF rules, rate limits, bot detection and WAF event logs. It does not cover DNS, storage, Stream or edge scripts. For those, see anvme/bunnycdn-mcp or Digitizers/bunny-mcp.

What it does differently

  • Explains what rules will really do. get_shield_zone returns notes that warn, for example, when Block rules only log because the zone's WAF execution mode is Log.
  • Reads WAF event logs. shield_event_logs shows what the WAF blocked, challenged or logged in the last 72 hours, grouped by rule, IP, JA4 fingerprint and more.
  • Reports what changed. Update tools return a before-and-after diff. update_pull_zone also lists settings bunny.net changed that you did not ask for.
  • Keeps responses small. Pull zones, edge rules, origin errors and event logs are summarised. Pass detail: true for the raw response.
  • Hides credentials. Token authentication keys, AWS signing keys, TLS certificates and private keys, log forwarding tokens, and cookie or Authorization values in edge rule triggers are replaced with <hidden>, also in raw responses.

Requirements

  • Node.js 20 or later
  • A bunny.net account API key, from Account settings > API key in the bunny.net dashboard. This key gives full access to the account.

Install

Claude Code:

claude mcp add bunny --env BUNNY_API_KEY=your-key -- npx -y @fullfatthings/bunny-mcp

Other MCP clients (for example Claude Desktop):

{
  "mcpServers": {
    "bunny": {
      "command": "npx",
      "args": ["-y", "@fullfatthings/bunny-mcp"],
      "env": { "BUNNY_API_KEY": "your-key" }
    }
  }
}

Configuration

VariableMeaning
BUNNY_API_KEYRequired. Your bunny.net account API key.
BUNNY_READONLYSet to 1 to register only the read tools. Write tools are then absent from the tool list, so the assistant cannot call them.

Tools

Read tools:

ToolPurpose
list_pull_zonesList pull zones with IDs, origins and hostnames.
get_pull_zoneOne pull zone: hostnames, readable edge rules, and caching, origin and security settings.
cdn_statisticsBandwidth, requests, cache hit rate and error responses.
origin_errorsFailed requests from bunny.net to your origin on one day, with counts by error.
get_shield_zoneWAF settings, custom rules, rate limits and bot detection, with notes.
shield_event_logsRequests the WAF blocked, challenged or logged in the last 72 hours.

Write tools (not registered when BUNNY_READONLY=1):

ToolPurpose
update_pull_zoneChange pull zone settings.
purge_cachePurge one URL or a whole pull zone.
save_edge_ruleCreate or update an edge rule.
set_edge_rule_enabledSwitch an edge rule on or off.
delete_edge_ruleDelete an edge rule.
update_shield_zoneChange WAF settings, including adding or removing single rule IDs from lists.
update_bot_detectionChange bot detection mode and sensitivity.
save_waf_ruleCreate or update a custom WAF rule.
save_rate_limitCreate or update a rate limit.
delete_shield_ruleDelete a custom WAF rule or rate limit.

To test a new WAF rule safely, save it with action Log, check shield_event_logs, then save it again with action Block.

Development

npm install
npm test

To release, run npm version patch (or minor or major). It updates package.json and server.json, commits, tags and pushes; the tag starts a GitHub Action that publishes to npm and the MCP registry.

Licence

MIT. See LICENSE.

Questions fréquentes

Qu'est-ce que bunny.net CDN and Shield ?

Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs

Comment installer bunny.net CDN and Shield ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add bunny-net-cdn-and-shield -e 'BUNNY_API_KEY=<your bunny_api_key>' -e 'BUNNY_READONLY=<BUNNY_READONLY>' -- npx -y @fullfatthings/bunny-mcp@1.0.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour bunny.net CDN and Shield ?

Oui. Il attend BUNNY_API_KEY, à renseigner dans sa configuration.

bunny.net CDN and Shield est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient bunny.net CDN and Shield ?

Il est publié par fullfatthings. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.