CloudStack MCP Server

Instructions

Implementation Reference

• src/handlers/security-handlers.ts:72-83 (handler)

  The main handler function that implements the tool logic by authorizing a security group ingress rule via the CloudStack client and returning a formatted response.

  async handleCreateSecurityGroupRule(args: any) {
    const result = await this.cloudStackClient.authorizeSecurityGroupIngress(args);
    
    return {
      content: [
        {
          type: 'text',
          text: `Created security group rule. Job ID: ${result.authorizesecuritygroupingressresponse?.jobid}\nRule ID: ${result.authorizesecuritygroupingressresponse?.id}`
        }
      ]
    };
  }

• src/tool-definitions/security-tools.ts:57-91 (schema)

  The tool definition object including name, description, and input schema (parameters with types and requirements) for validating tool inputs.

  {
    name: 'create_security_group_rule',
    description: 'Create a security group ingress rule',
    inputSchema: {
      type: 'object',
      properties: {
        securitygroupid: {
          type: 'string',
          description: 'Security group ID',
        },
        protocol: {
          type: 'string',
          description: 'Protocol (TCP, UDP, ICMP)',
        },
        startport: {
          type: 'number',
          description: 'Start port',
        },
        endport: {
          type: 'number',
          description: 'End port',
        },
        cidrlist: {
          type: 'string',
          description: 'CIDR list (comma-separated)',
        },
        usersecuritygrouplist: {
          type: 'string',
          description: 'User security group list',
        },
      },
      required: ['securitygroupid', 'protocol'],
      additionalProperties: false,
    },
  },

• src/server.ts:206-207 (registration)

  The dispatch case in the main tool request handler that routes 'create_security_group_rule' calls to the appropriate security handler method.

  case 'create_security_group_rule':
    return await this.securityHandlers.handleCreateSecurityGroupRule(args);