Arcjet - MCP Server

Name: Arcjet - MCP Server
Author: arcjet

@arcjet

关于 Arcjet - MCP Server

Arcjet MCP server. Help your AI agents implement bot detection, rate limiting, email validation, attack protection, data redaction.

#security #mcp #devtools #bot-detection #mcp-server

基本信息

分类

其他

传输方式

stdio

发布者

arcjet

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "arcjet": {
      "type": "http",
      "url": "https://api.arcjet.com/mcp"
    }
  }
}

工具

Lists teams the authenticated user belongs to.

Lists sites within a specified team.

Creates a new site within a specified team.

Returns the SDK key (`ARCJET_KEY`) for a specific site.

Lists recent requests for a site. Supports filtering by conclusion (`ALLOW`, `DENY`, `ERROR`) and pagination.

Returns full details for a specific request including headers, rules executed, and decision information.

Explains why Arcjet allowed or denied a specific request. Returns a natural language summary, per-rule breakdown, and suggested next steps.

Returns quota usage and limits for a site in the current billing window.

Analyzes request traffic over a time period. Returns total requests, denials, denial rate, top paths, top IPs, top denial reasons, and trend vs the previous period.

Detects unusual security patterns by comparing current traffic to the previous period. Identifies traffic spikes, geographic shifts, new threat activities, new bot signatures, risk escalation, and suspicious IP patterns.

Investigates an IP address in the context of a site. Returns geo location, threat intelligence (network type, threat activities, entity classification, risk level), and the IP's recent request activity (conclusion breakdown, denial reasons, targeted paths, daily timeline).

Analyzes what would happen if dry-run rules were promoted to live. Shows how many currently-allowed requests would have been blocked by each rule type, which IPs would be most affected, and a false-positive estimate.

Returns a comprehensive security briefing: active rules summary, traffic analysis, threat intelligence, anomaly detection, dry-run promotion readiness, quota status, and prioritized actionable recommendations. Designed for daily consumption.

Lists all remote rules configured for a site with their ID, type, mode, and configuration summary.

Creates a new remote rule for a site. Supports rate limit, bot, shield, and filter rule types.

Replaces an existing remote rule configuration. All fields must be provided (full replacement).

Deletes a remote rule, immediately stopping it from being evaluated.

Promotes a remote rule from DRY_RUN to LIVE mode after verification.

概览

What is Arcjet - MCP Server?

Arcjet is a runtime security platform that ships with your code. The Arcjet - MCP Server gives AI coding assistants the skills of a security engineer by connecting to Arcjet's API. It enables AI tools to list teams and sites, create sites, get API keys, inspect requests, explain decisions, analyze traffic, manage remote rules, and more — all using natural language.

How to use Arcjet - MCP Server?

The server is hosted at https://api.arcjet.com/mcp and uses Streamable HTTP transport with OAuth-based authentication. Setup varies by client: in ChatGPT add a connector with the server URL and OAuth; for Claude Code run claude mcp add arcjet --transport http https://api.arcjet.com/mcp; for Cursor/VS Code/Windsurf add the server to the appropriate MCP configuration file.

Key features of Arcjet - MCP Server

List teams and sites within your Arcjet account.
Create new sites and retrieve SDK keys.
List and filter requests with full details.
Explain why requests were allowed or denied.
Analyze traffic, denial rates, top paths, and IPs.
Detect anomalies by comparing current to previous traffic.
Investigate IPs with geo and threat intelligence.
Get dry-run impact analysis before promoting rules.
Receive a comprehensive daily security briefing.
Create, update, delete, and promote remote rules.

Use cases of Arcjet - MCP Server

Investigate and block suspicious traffic in real time.
Get a daily security briefing covering threats and recommendations.
Set up bot protection in dry-run mode and promote to live after verification.
Monitor quota usage and analyze traffic patterns.

FAQ from Arcjet - MCP Server

What does the Arcjet - MCP Server do?

It gives AI coding assistants the abilities of a security engineer — listing teams and sites, explaining decisions, analyzing traffic, managing remote rules, and providing security briefings — all through natural language.

Which clients are supported?

Any client that supports the latest MCP specification with Streamable HTTP transport and OAuth authorization, including ChatGPT, Claude Code, Claude Desktop, Cursor, VS Code with Copilot, and Windsurf.

How do I authenticate?

The server uses OAuth-based authentication. Clients handle the OAuth flow automatically — for example, Claude Code opens a browser for authentication on first connection, and ChatGPT prompts you during setup.

Does the Arcjet - MCP Server require local installation?

No. It is a remote server hosted at https://api.arcjet.com/mcp. You only need to configure your MCP client to point to that URL.

What are remote rules and how do they differ from SDK rules?

Remote rules are managed through the MCP server or the Arcjet dashboard and apply globally to all requests for a site — no code changes or redeployment needed. Only rate_limit, bot, shield, and filter rule types are supported as remote rules; rules that need parsed request body content (email, sensitive_info, prompt_injection) require the SDK.