Alibaba Cloud Edge Security Acceleration MCP server

The ESA MCP Server allows you to conveniently access and manage various Alibaba Cloud Edge Service Architecture (ESA) services through the Model Context Protocol. It provides a simple way to interact with Edge Routines, DNS configurations, certificates, and more without leaving your MCP-enabled client.

Installation and Setup

Prerequisites

1. Apply for Alibaba Cloud's AK and SK on the Accesskey page: https://ram.console.aliyun.com/profile/access-keys

2. Enable Edge Routine service: https://esa.console.aliyun.com/edge/function/list

Configuration

Configure the MCP server in your MCP-enabled client config:

{
  "mcpServers": {
    "esa-mcp-server": {
      "command": "npx",
      "args": ["-y", "mcp-server-esa"],
      "env": {
        "ALIBABA_CLOUD_ACCESS_KEY_ID": "your AK",
        "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "your SK",
        "ALIBABA_CLOUD_SECURITY_TOKEN": "sts_security_token optional, required when using STS Token (By default, no need to pass)"
      }
    }
  }
}

Available Tools

The ESA MCP Server provides access to various tools across multiple categories:

HTML Management

• html_deploy: Quickly deploy HTML in a new Edge Routine (ER)

Edge Routine Management

• routine_create: Create a new Edge Routine
• routine_delete: Delete an existing Edge Routine
• routine_list: List all Edge Routines in your account
• routine_get: Get details of a specific Edge Routine

Deployment Operations

• routine_code_commit: Save a code version for future modifications
• routine_code_deploy: Deploy a selected code version to staging or production
• deployment_delete: Delete a specified code version

Route Management

• route_create: Create a new route for an Edge Routine
• route_update: Modify an existing Edge Routine route
• route_delete: Delete a route
• route_get: Get details of a specific route
• routine_route_list: List all routes for a specific Edge Routine
• site_route_list: List all routes for a specific site

Record Management

• er_record_create: Create a new Edge Routine record
• er_record_delete: Delete an Edge Routine record
• er_record_list: List all records for a specific Edge Routine

Site Management

• site_active_list: List all active sites
• site_match: Identify which site matches provided criteria
• site_record_list: List DNS records for a site
• create_site_a_or_aaaa_record: Create A/AAAA DNS records
• create_site_cname_record: Create CNAME DNS records
• create_site_txt_record: Create TXT DNS records
• create_site_ns_record: Create NS DNS records
• create_site_mx_record: Create MX DNS records
• get_site_pause: Query ESA proxy configuration
• update_site_pause: Modify ESA proxy configuration
• create_site: Add a new website
• update_record: Update DNS records
• get_record: Query DNS record configuration
• list_record: Query DNS records list
• delete_record: Delete a DNS record
• update_ipv6: Modify IPv6 configuration
• get_ipv6: Query IPv6 configuration
• update_managed_transform: Modify managed transforms
• get_managed_transform: Query managed transform configuration
• list_sites: List all registered sites

Certificate Management

• set_certificate: Enable/update certificate information
• apply_certificate: Apply for a free SSL certificate
• get_certificate: Retrieve certificate information
• delete_certificate: Delete a certificate
• list_certificates: List certificates for a website
• get_certificate_quota: Query certificate quota and usage

Example Prompts

Here are some examples of prompts you can use with the MCP server:

• Write a 2048 game and deploy it on Edge Routine, and display the default access URL provided by the Edge Routine.
• Delete Edge routines created after May 2025.
• List all Edge routines are under my account.
• What is the default access address for my Edge Routine named "hello-world"?
• Create a CNAME record for test.example.com with the value set to example2.com
• Create a A record for test.example.com with the value set to 1.1.1.1

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "esa-mcp-server" '{"command":"npx","args":["-y","mcp-server-esa"],"env":{"ALIBABA_CLOUD_ACCESS_KEY_ID":"your AK","ALIBABA_CLOUD_ACCESS_KEY_SECRET":"your SK","ALIBABA_CLOUD_SECURITY_TOKEN":"sts_security_token optional, required when using STS Token (By default, no need to pass)"}}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "esa-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "mcp-server-esa"
            ],
            "env": {
                "ALIBABA_CLOUD_ACCESS_KEY_ID": "your AK",
                "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "your SK",
                "ALIBABA_CLOUD_SECURITY_TOKEN": "sts_security_token optional, required when using STS Token (By default, no need to pass)"
            }
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json
• Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "esa-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "mcp-server-esa"
            ],
            "env": {
                "ALIBABA_CLOUD_ACCESS_KEY_ID": "your AK",
                "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "your SK",
                "ALIBABA_CLOUD_SECURITY_TOKEN": "sts_security_token optional, required when using STS Token (By default, no need to pass)"
            }
        }
    }
}

3. Restart Claude Desktop for the changes to take effect