Is io.github.fullfatthings/bunny-mcp safe to use?

io.github.fullfatthings/bunny-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.fullfatthings/bunny-mcp?

io.github.fullfatthings/bunny-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.fullfatthings/bunny-mcp?

io.github.fullfatthings/bunny-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.fullfatthings/bunny-mcp actively maintained?

io.github.fullfatthings/bunny-mcp is actively maintained - last commit was 1 day ago.

io.github.fullfatthings/bunny-mcp

@fullfatthings/bunny-mcp

Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs

110/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio

0 tools

Grade F

MCPpedia last refreshed this data 17h ago

Edit this pageView history

io.github.fullfatthings/bunny-mcp is an MCP server that debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs. Its tool list has not been published yet over stdio, requires no API key, and scores 63/100 on MCPpedia's security, maintenance and efficiency rubric.

Cloud

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "bunny": {
      "env": {
        "BUNNY_API_KEY": "your-key"
      },
      "args": [
        "-y",
        "@fullfatthings/bunny-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-fullfatthings-bunny-mcp)](https://mcppedia.org/s/io-github-fullfatthings-bunny-mcp)

Read me

What io.github.fullfatthings/bunny-mcp does

Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@fullfatthings/bunny-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @fullfatthings/bunny-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.fullfatthings/bunny-mcp safe to use?: io.github.fullfatthings/bunny-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.fullfatthings/bunny-mcp?: io.github.fullfatthings/bunny-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.fullfatthings/bunny-mcp?: io.github.fullfatthings/bunny-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.fullfatthings/bunny-mcp actively maintained?: io.github.fullfatthings/bunny-mcp is actively maintained - last commit was 1 day ago.

Similar servers

Others in cloud

View all →

io.github.ruvnet/flow-nexus94

Cloud-powered AI platform with multi-agent swarms, sandboxes, and workflow automation

107 4

io.github.firebase/firebase-mcp94

Gives AI development tools Firebase-specific capabilities and expertise.

4.5k 3

io.github.RamaAditya49/titen-memory92

Evidence-grounded agent memory with mandatory provenance, on local SQLite or Cloudflare D1

16 6

io.github.patrickchugh/terravision91

Draw cloud architecture diagrams with official AWS, Azure and GCP icons from a prompt or Terraform.

1.7k 9

MCP Security Weekly

Get CVE alerts and security updates for io.github.fullfatthings/bunny-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Cloud

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "bunny": {
      "env": {
        "BUNNY_API_KEY": "your-key"
      },
      "args": [
        "-y",
        "@fullfatthings/bunny-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-fullfatthings-bunny-mcp)](https://mcppedia.org/s/io-github-fullfatthings-bunny-mcp)

Read me

What io.github.fullfatthings/bunny-mcp does

Debug bunny.net CDN pull zones and manage bunny Shield: WAF, rate limits, bot detection, event logs

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@fullfatthings/bunny-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

bunny-mcp

An MCP server for debugging bunny.net CDN sites and managing bunny Shield, the bunny.net web application firewall (WAF).

This is an unofficial project. It is not affiliated with or endorsed by bunny.net.

It covers pull zones (CDN sites), edge rules, cache purges, CDN statistics, origin error logs, and Shield: WAF settings, custom WAF rules, rate limits, bot detection and WAF event logs. It does not cover DNS, storage, Stream or edge scripts. For those, see anvme/bunnycdn-mcp or Digitizers/bunny-mcp.

What it does differently

Explains what rules will really do. get_shield_zone returns notes that warn, for example, when Block rules only log because the zone's WAF execution mode is Log.
Reads WAF event logs. shield_event_logs shows what the WAF blocked, challenged or logged in the last 72 hours, grouped by rule, IP, JA4 fingerprint and more.
Reports what changed. Update tools return a before-and-after diff. update_pull_zone also lists settings bunny.net changed that you did not ask for.
Keeps responses small. Pull zones, edge rules, origin errors and event logs are summarised. Pass detail: true for the raw response.
Hides credentials. Token authentication keys, AWS signing keys, TLS certificates and private keys, log forwarding tokens, and cookie or Authorization values in edge rule triggers are replaced with <hidden>, also in raw responses.

Requirements

Node.js 20 or later
A bunny.net account API key, from Account settings > API key in the bunny.net dashboard. This key gives full access to the account.

Install

Claude Code:

claude mcp add bunny --env BUNNY_API_KEY=your-key -- npx -y @fullfatthings/bunny-mcp

Other MCP clients (for example Claude Desktop):

{
  "mcpServers": {
    "bunny": {
      "command": "npx",
      "args": ["-y", "@fullfatthings/bunny-mcp"],
      "env": { "BUNNY_API_KEY": "your-key" }
    }
  }
}

Configuration

Variable	Meaning
`BUNNY_API_KEY`	Required. Your bunny.net account API key.
`BUNNY_READONLY`	Set to `1` to register only the read tools. Write tools are then absent from the tool list, so the assistant cannot call them.

Tools

Read tools:

Tool	Purpose
`list_pull_zones`	List pull zones with IDs, origins and hostnames.
`get_pull_zone`	One pull zone: hostnames, readable edge rules, and caching, origin and security settings.
`cdn_statistics`	Bandwidth, requests, cache hit rate and error responses.
`origin_errors`	Failed requests from bunny.net to your origin on one day, with counts by error.
`get_shield_zone`	WAF settings, custom rules, rate limits and bot detection, with `notes`.
`shield_event_logs`	Requests the WAF blocked, challenged or logged in the last 72 hours.

Write tools (not registered when BUNNY_READONLY=1):

Tool	Purpose
`update_pull_zone`	Change pull zone settings.
`purge_cache`	Purge one URL or a whole pull zone.
`save_edge_rule`	Create or update an edge rule.
`set_edge_rule_enabled`	Switch an edge rule on or off.
`delete_edge_rule`	Delete an edge rule.
`update_shield_zone`	Change WAF settings, including adding or removing single rule IDs from lists.
`update_bot_detection`	Change bot detection mode and sensitivity.
`save_waf_rule`	Create or update a custom WAF rule.
`save_rate_limit`	Create or update a rate limit.
`delete_shield_rule`	Delete a custom WAF rule or rate limit.

To test a new WAF rule safely, save it with action Log, check shield_event_logs, then save it again with action Block.

Development

npm install
npm test

To release, run npm version patch (or minor or major). It updates package.json and server.json, commits, tags and pushes; the tag starts a GitHub Action that publishes to npm and the MCP registr

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @fullfatthings/bunny-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.fullfatthings/bunny-mcp safe to use?: io.github.fullfatthings/bunny-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.fullfatthings/bunny-mcp?: io.github.fullfatthings/bunny-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.fullfatthings/bunny-mcp?: io.github.fullfatthings/bunny-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.fullfatthings/bunny-mcp actively maintained?: io.github.fullfatthings/bunny-mcp is actively maintained - last commit was 1 day ago.