Purpose
BlazingCDN-MCP is the official Model Context Protocol server provided by BlazingCDN. It is aimed at AI agents (Claude, Cursor, Windsurf, and any other MCP clients), enabling agents to manage BlazingCDN's CDN resources: list and configure resources, purge and preload cache, query traffic metrics, manage custom domains, cloud storage, and Video CDN.
BlazingCDN is a CDN for video, software, and sports media, suitable for video, streaming (HLS/DASH), software distribution, games and updates, images, audio, archives, and other large files, aimed at high-load projects with monthly traffic exceeding 5 TB.
Main capabilities
- Provides 52 tools, covering Anycast CDN, cache operations, metrics, custom domains, cloud storage, and Video CDN.
- Secure by default: starts in read-only mode (plus cache purge/preload); create/update and delete operations are explicitly enabled via environment variables.
- No installation required, can be run via npx.
- Communicates directly with the BlazingCDN API (wapi.blazingcdn.com) using your API token, with no other parties in between.
Account and API token
- Register at blazingcdn.com; each new account starts with a 14-day trial. The trial is time-limited only and does not include free traffic; traffic used during the trial is billed at the regular $5/TB.
- Top up at least $10 immediately after registration to avoid the account balance going negative during testing.
- Create an API access token: in the BlazingCDN panel, open API → Create new API credentials (or POST /api/v1/access_tokens).
Pricing (Flex plan)
After the trial ends, you move to the pay-as-you-go Flex plan, with a minimum of $25 per month, covering the first 5 TB. Traffic is billed on a progressive tiered basis. All plans include custom domains, unlimited requests, origin protection, URL signing, free SSL, and geo allow/block lists, with no surcharges for features. If you exceed 100 TB per month, you can contact BlazingCDN to request custom bulk pricing.
How to use
Claude Desktop One-click install (no terminal)
Download the latest .mcpb package from Releases and double-click it; Claude Desktop will ask for the API token and show two checkboxes: Allow changes (create and change CDN settings) and Allow deleting (custom domains and Video CDN resources). Both are off by default, so the server starts in read-only mode. Node.js is not required.
Claude Desktop / Cursor / Windsurf
Add to your MCP configuration (claude_desktop_config.json, .cursor/mcp.json, etc.).
You can also run it from GitHub instead of npm: replace "args" with ["-y", "github:BlazingCDN/BlazingCDN-MCP"].
HTTP transport (self-hosted)
The server also supports Streamable HTTP for remote deployments. In HTTP mode the server is stateless, and every request must carry the caller's BlazingCDN API token as Authorization: Bearer <token> (the BLAZINGCDN_API_TOKEN environment variable serves as a fallback). Before exposing it anywhere, put it behind TLS (a reverse proxy).
Permission model
- The ability to delete CDN resources (pull zones), buckets, external storages, accounts, or users is not implemented at all; these operations cannot be triggered through this server in any mode.
- When a feature is turned off: every setting the server can change is also a toggle in the customer panel. If the feature you are asking for is off on your resource (image processing, HLS/DASH support, origin protection), the agent will tell you exactly where to turn it on (client.blazingcdn.com/anycast_cdn/<resource_id>/<tab>), or, with BLAZINGCDN_ALLOW_WRITE=1, offer to turn it on for you and wait for your confirmation.
Tool list
Anycast CDN and caching
(complete list not provided)
Cloud storage
list_buckets, get_bucket, get_bucket_metrics, get_storage_info, create_bucket ✏️, update_bucket ✏️, list_external_storages, get_external_storage, create_external_storage ✏️, update_external_storage ✏️, test_external_storage_connection ✏️.
A bucket used as the origin for a CDN resource must be of type cdn—create_bucket creates that type by default (a private bucket cannot be attached to a pull zone). For S3-compatible buckets, pass protocol: "s3"; the protocol cannot be changed after creation.
Video CDN
list_vcdn_resources, get_vcdn_resource, get_vcdn_statistics (totals, time series, by domain, top domains, HTTP status codes, bandwidth, cache/storage), list_vcdn_domains, get_vcdn_domain, list_vcdn_files, get_vcdn_files_total, list_ftp_logins, list_auto_imports, get_vcdn_proxy, get_vcdn_ftp_settings, get_vcdn_settings, create_vcdn_resource ✏️, update_vcdn_resource ✏️, create_vcdn_domain ✏️, update_vcdn_domain ✏️, upload_vcdn_file ✏️, manage_auto_import ✏️, update_vcdn_proxy ✏️, update_vcdn_ftp_settings ✏️, manage_ftp_login ✏️, update_vcdn_settings ✏️, delete_vcdn_resource 🗑️.
Other tools
search_docs—search BlazingCDN documentation and product pages. estimate_traffic_cost—calculate the monthly cost of a given amount of traffic under the Flex plan (progressive tiers, calculated offline).
✏️ requires BLAZINGCDN_ALLOW_WRITE=1 · 🗑️ requires BLAZINGCDN_ALLOW_DELETE=1
Example prompts
- "What is my CDN bandwidth broken down by day this month?"
- "Purge /images/* on the blazingcdn.com resource"
- "For the origin https://example.com Create a CDN resource and attach cdn.example.com with automatic SSL."
- "Show the HTTP 5xx ratio by region over the past 24 hours"
- "Preheat /video/intro.mp4 with brotli compression"
- "How much does 190 TB/month cost on BlazingCDN?"
- "Enable image processing for the shop-images resource and give me the 200×200 thumbnail URL for /images/iphone.jpg"
Use cases
Suitable for teams that use BlazingCDN to host large files such as video, software distribution, game updates, images, and audio, and want to operate CDN resources conversationally through an AI agent. Also suitable for scenarios that require a self-hosted MCP server for remote deployment.
Limitations and security
- The server does not collect any data: no telemetry, no analytics, no third-party calls. Your API token is kept in process memory and sent only to the BlazingCDN API over HTTPS.
- The API token is read from an environment variable and sent only to BLAZINGCDN_API_URL, and is never logged. No middleman, no telemetry.
- Read-only by default; destructive operations (zone/bucket/account deletion) are not implemented in any mode.
- Tool output is truncated at 60 KB to keep the agent context healthy.
- API requests have a 30-second timeout (file uploads: 5 minutes).
- See SECURITY.md for the complete threat model, limitations, and recommendations.
License
MIT © BlazingCDN.
