Alibaba_cloud_MCP_server

# Alibaba Cloud MCP Server A comprehensive, high-performance [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server for managing Alibaba Cloud resources. This server enables AI assistants (like Claude, Cursor, and others) to seamlessly interact with Alibaba Cloud infrastructure using natural language. It features a **Hybrid Architecture**: 1. **Explicit Service Tools**: Pre-configured, typed handlers for the most common services (ECS, VPC, RDS, RAM, ACK, SLB) to ensure rapid, error-free AI interactions. 2. **Universal API Invoker**: A dynamic tool built on `@alicloud/pop-core` that can invoke *any* of the 10,000+ API endpoints across all Alibaba Cloud services, giving you true 100% cloud management coverage. ## Features - 🚀 **Zero-Config Universal Management**: Dynamically call any Alibaba Cloud RPC/ROA API. - 📦 **Explicit Typed Tools**: - **ECS**: Manage Compute Instances (`ecs_list_instances`, `ecs_start_instance`) - **VPC**: Manage Networking (`vpc_list`, `vpc_create`) - **RDS**: Manage Databases (`rds_list_instances`) - **RAM**: Manage IAM & Security (`ram_list_users`) - **ACK**: Manage Kubernetes Clusters (`ack_list_clusters`) - **SLB**: Manage Load Balancers (`slb_list`) - 🐳 **Docker Ready**: Run safely in an isolated container. - 🛡️ **Secure**: Uses Zod for strict parameter validation and environment variables for credentials. ## Prerequisites - Node.js 18+ (if running locally) - Docker (optional, for containerized execution) - Alibaba Cloud Access Key ID and Secret with appropriate IAM permissions. ## Setup & Installation ### Option 1: Running Locally 1. Clone the repository and install dependencies: ```bash npm install ``` 2. Build the TypeScript source: ```bash npm run build ``` 3. Create a `.env` file in the root directory: ```env ALIBABA_CLOUD_ACCESS_KEY_ID="your_access_key" ALIBABA_CLOUD_ACCESS_KEY_SECRET="your_access_secret" ALIBABA_CLOUD_REGION_ID="cn-hangzhou" ``` ### Option 2: Running with Docker 1. Build the Docker image: ```bash docker build -t alibaba-cloud-mcp . ``` ## Configuring Your MCP Client ### Claude Desktop To integrate this server with Claude Desktop, add the following to your `claude_desktop_config.json` (usually located at `%APPDATA%\Claude\claude_desktop_config.json` on Windows or `~/Library/Application Support/Claude/claude_desktop_config.json` on Mac): **If using Node.js locally:** ```json { "mcpServers": { "alibaba-cloud": { "command": "node", "args": ["/absolute/path/to/Alibaba_cloud_MCP_server/dist/index.js"], "env": { "ALIBABA_CLOUD_ACCESS_KEY_ID": "your_access_key", "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "your_access_secret", "ALIBABA_CLOUD_REGION_ID": "cn-hangzhou" } } } } ``` **If using Docker:** ```json { "mcpServers": { "alibaba-cloud": { "command": "docker", "args": [ "run", "-i", "--rm", "-e", "ALIBABA_CLOUD_ACCESS_KEY_ID", "-e", "ALIBABA_CLOUD_ACCESS_KEY_SECRET", "-e", "ALIBABA_CLOUD_REGION_ID", "alibaba-cloud-mcp" ], "env": { "ALIBABA_CLOUD_ACCESS_KEY_ID": "your_access_key", "ALIBABA_CLOUD_ACCESS_KEY_SECRET": "your_access_secret", "ALIBABA_CLOUD_REGION_ID": "cn-hangzhou" } } } } ``` *Note: Restart Claude Desktop after updating the configuration.* ## Security Warning > **⚠️ IMPORTANT:** This MCP server is incredibly powerful, especially due to the `aliyun_invoke_api` tool which can manage *any* resource. Always adhere to the Principle of Least Privilege. Ensure that the IAM/RAM user associated with your Access Keys only has the minimum permissions necessary for the tasks you intend the AI to perform. ## Architecture Built using: - `@modelcontextprotocol/sdk` - `@alicloud/pop-core` - `zod` for validation - `TypeScript`