Fastly NGWAF MCP Server

Set Fastly NGWAF API credentials (email and access token)

Test the API connection and validate credentials

Set the default corporation and site context for subsequent operations

Get the current context (corp and site names)

Discover available corporations and sites for the authenticated user

List all corporations accessible to the authenticated user

Get attack overview for a corporation

List sites in a corporation

Get details of a specific site

Create a new site in a corporation

Update site configuration

Delete a site

List rules at corporation level

List rules for a specific site

Create a corporation-level rule

Create a site-level rule

Delete a corporation-level rule

Delete a site-level rule

Search requests with advanced filtering

List security events (attacks, blocks, etc.)

Manually expire an event (unblock IP)

Get list of suspicious IP addresses

Manage IP whitelist (allowlist)

Manage IP blacklist (blocklist)

Manage custom lists (IP, country, string, etc.)

Manage alerts for monitoring attack patterns

Get analytics data (top attacks, timeseries, etc.)

Manage CloudWAF instances

Manage corporation users