readonly-mcp-akamai
Read-only MCP server for Akamai CDN. Search properties, browse EdgeWorker code, query DNS zones, inspect network lists, and translate error codes.
Read-only by design. This server can only read data. It cannot create, modify, delete, activate, deactivate, or purge anything. See blog.wentland.io for the rationale.
Tools
Properties (CDN configurations)
| Tool | Description |
|---|---|
search_properties |
Fuzzy search CDN properties by name. Uses a preloaded in-memory index refreshed every 5 minutes. |
get_property_details |
Get property versions, hostnames, and activation status. |
get_property_rules |
Get the rule tree for a property version — the full CDN configuration. |
get_property_activations |
List deployment history for a property. |
DNS
| Tool | Description |
|---|---|
list_dns_zones |
List all DNS zones, optionally filtered by name or type. |
search_dns_records |
Search DNS records within a zone by name or record type. |
EdgeWorkers (serverless functions)
| Tool | Description |
|---|---|
list_edgeworkers |
List all EdgeWorker IDs with names and descriptions. |
list_edgeworker_versions |
List versions for an EdgeWorker. |
get_edgeworker_files |
Download a version's code bundle and list all files. Cached in memory. |
get_edgeworker_file |
Read a specific file from a cached bundle with line-range support. |
search_edgeworker_code |
Regex search across all files in a cached bundle. |
Network Lists
| Tool | Description |
|---|---|
search_network_lists |
Search network lists (IP allowlists, blocklists, geo lists) by name. |
get_network_list |
Get the full contents of a network list. |
Utility
| Tool | Description |
|---|---|
list_groups |
List account groups in the Akamai hierarchy. |
list_cp_codes |
List CP codes (billing/reporting identifiers) for a contract and group. |
translate_error_code |
Translate Akamai reference error codes to human-readable descriptions. |
Install
# With uv (recommended)
uv pip install readonly-mcp-akamai
# With pip
pip install readonly-mcp-akamai
Docker
docker run -e AKAMAI_HOST=... -e AKAMAI_CLIENT_TOKEN=... \
-e AKAMAI_CLIENT_SECRET=... -e AKAMAI_ACCESS_TOKEN=... \
ghcr.io/desty2k/readonly-mcp-akamai
Configuration
All settings are via environment variables with the AKAMAI_ prefix.
| Variable | Required | Default | Description |
|---|---|---|---|
AKAMAI_HOST |
Yes | — | Akamai API hostname (e.g., akab-xxxx.luna.akamaiapis.net) |
AKAMAI_CLIENT_TOKEN |
Yes | — | EdgeGrid client token |
AKAMAI_CLIENT_SECRET |
Yes | — | EdgeGrid client secret |
AKAMAI_ACCESS_TOKEN |
Yes | — | EdgeGrid access token |
AKAMAI_TRANSPORT |
No | stdio |
Transport: stdio, http, or sse |
AKAMAI_HTTP_PORT |
No | 8080 |
Port for HTTP/SSE transport |
AKAMAI_LOG_FORMAT |
No | json |
Log format: json or text |
AKAMAI_LOG_LEVEL |
No | INFO |
Log level: DEBUG, INFO, WARNING, ERROR |
AKAMAI_INDEX_REFRESH_INTERVAL |
No | 300 |
Property index refresh interval in seconds |
Get credentials from Akamai Control Center > Identity & Access Management > API Clients.
MCP client configuration
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"akamai": {
"command": "readonly-mcp-akamai",
"env": {
"AKAMAI_HOST": "akab-xxxx.luna.akamaiapis.net",
"AKAMAI_CLIENT_TOKEN": "akab-xxxx",
"AKAMAI_CLIENT_SECRET": "xxxx",
"AKAMAI_ACCESS_TOKEN": "akab-xxxx"
}
}
}
}
Claude Code
claude mcp add akamai -- readonly-mcp-akamai
Set the AKAMAI_* environment variables before starting Claude Code.
Example questions
An agent with this server can answer:
- "Find the CDN property for api.example.com and show me its caching rules"
- "What version is currently deployed to production for the main website?"
- "Show me all DNS records for example.com"
- "What EdgeWorkers are configured? Show me the code for the request router"
- "Search for all uses of
setResponseHeaderin EdgeWorker 42" - "What IPs are in the blocklist network list?"
- "Translate this Akamai error: 9.6f64d440.1318965461.2f2b078"
- "List all CP codes for the main contract"
Development
# Clone
git clone https://github.com/desty2k/readonly-mcp-akamai.git
cd readonly-mcp-akamai
# Install with dev dependencies
uv pip install -e ".[dev]"
# Run tests
pytest --cov
# Lint
ruff check .
ruff format --check .
License
MIT
Metadata
Release files for readonly-mcp-akamai 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| readonly_mcp_akamai-0.1.1.tar.gz | 92.3 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| readonly_mcp_akamai-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 115.4 kB
Release files / readonly_mcp_akamai-0.1.1.tar.gz
| Download URL | readonly_mcp_akamai-0.1.1.tar.gz |
|---|---|
| Size | 92.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c186fcacd29b1806ce8047a6c83ae1436ecd1fb8ca87d26de7add877b8b5bb85
|
|
BLAKE2b-256 checksum How to use checksums |
406b3e7b012fd335e4ade4d045778e7bb768d4da10d97468cb4a985213b1513a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 28, 2026.
Transparency logRelease files / readonly_mcp_akamai-0.1.1-py3-none-any.whl
| Download URL | readonly_mcp_akamai-0.1.1-py3-none-any.whl |
|---|---|
| Size | 23.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d4f16b5921fe16c7a7408171f5ee3efa57758739a41c222fdc14dc1195fc09b6
|
|
BLAKE2b-256 checksum How to use checksums |
91ff736acd8bba82207f15e7fb6ac4834d5676e29d9f1ee975a3daea07394c45
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 28, 2026.
Transparency logSecurity for readonly-mcp-akamai 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for readonly_mcp_akamai-0.1.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Apr 28, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.