Cloud Manage MCP Server

Instructions

Implementation Reference

• main.py:419-430 (registration)

  MCP tool registration and thin handler wrapper that delegates to DigitalOcean provider's power_off_droplet method with security confirmation parameters.

  def power_off_digitalocean_droplet(
      droplet_id: int, 
      ip_confirmation: str = "", 
      name_confirmation: str = "", 
      operation_confirmation: str = ""
  ) -> Dict:
      """
      强制关闭DigitalOcean Droplet（需要三次确认）
      """
      return digitalocean_provider.power_off_droplet(
          droplet_id, ip_confirmation, name_confirmation, operation_confirmation
      )

• providers/digitalocean_provider.py:274-356 (handler)

  Core handler logic for all DigitalOcean power operations ('power_on', 'power_off', etc.), including triple confirmation validation using SecurityConfirmation, droplet info fetch, and API call to client.droplet_actions.post for executing the power action.

  def _execute_power_operation(
      self, 
      droplet_id: int, 
      operation: str, 
      ip_confirmation: str, 
      name_confirmation: str, 
      operation_confirmation: str
  ) -> Dict:
      """
      执行电源操作的通用函数
      """
      if not self.available:
          return {
              'error': f'DigitalOcean服务不可用: {getattr(self, "error", "未知错误")}',
              'provider': 'digitalocean'
          }
      
      # 首先获取droplet信息
      try:
          droplet_response = self.client.droplets.get(droplet_id)
          droplet = droplet_response.get("droplet", {})
          
          if not droplet:
              return {
                  'error': f'未找到ID为 {droplet_id} 的Droplet',
                  'provider': 'digitalocean'
              }
          
          # 格式化droplet信息用于确认
          droplet_info = self._format_droplet_for_confirmation(droplet)
          
      except Exception as e:
          return {
              'error': f'获取Droplet信息时发生错误: {str(e)}',
              'provider': 'digitalocean'
          }
      
      # 检查是否提供了确认信息
      if not ip_confirmation or not name_confirmation or not operation_confirmation:
          # 返回确认要求
          return require_triple_confirmation(droplet_info, operation)
      
      # 验证确认信息
      security = SecurityConfirmation()
      is_valid, error_message = security.validate_power_operation(
          droplet_info, operation, ip_confirmation, name_confirmation, operation_confirmation
      )
      
      if not is_valid:
          return {
              'error': f'确认验证失败: {error_message}',
              'provider': 'digitalocean',
              'requires_confirmation': True
          }
      
      # 执行实际操作
      try:
          action_data = {"type": operation}
          response = self.client.droplet_actions.post(droplet_id=droplet_id, body=action_data)
          
          action = response.get("action", {})
          
          return {
              'provider': 'digitalocean',
              'droplet_id': droplet_id,
              'operation_success': True,
              'action': {
                  'id': action.get("id"),
                  'status': action.get("status"),
                  'type': action.get("type"),
                  'started_at': action.get("started_at"),
                  'resource_id': action.get("resource_id")
              },
              'message': f'已成功提交 {operation} 操作，操作ID: {action.get("id")}',
              'confirmation_validated': True
          }
          
      except Exception as e:
          return {
              'error': f'执行 {operation} 操作时发生错误: {str(e)}',
              'provider': 'digitalocean'
          }

• utils/security.py:13-68 (helper)

  Security helper that validates the triple confirmation (IP, instance name, operation type) required before executing destructive power operations.

  def validate_power_operation(
      instance_info: Dict,
      operation: str,
      ip_confirmation: str,
      name_confirmation: str,
      operation_confirmation: str
  ) -> Tuple[bool, str]:
      """
      验证电源操作的三次确认
      
      Args:
          instance_info (dict): 实例信息
          operation (str): 操作类型 ('shutdown', 'reboot', 'power_off', 'power_on')
          ip_confirmation (str): 用户确认的IP地址
          name_confirmation (str): 用户确认的实例名称
          operation_confirmation (str): 用户确认的操作类型
          
      Returns:
          Tuple[bool, str]: (是否通过验证, 错误信息)
      """
      errors = []
      
      # 获取实例的实际信息
      actual_ip = instance_info.get('public_ip', instance_info.get('public_ipv4', '未知'))
      actual_name = instance_info.get('name', instance_info.get('instance_name', '未知'))
      
      # 第一次确认：IP地址
      if ip_confirmation.strip() != actual_ip:
          errors.append(f"IP地址确认失败: 期望 '{actual_ip}', 但收到 '{ip_confirmation}'")
      
      # 第二次确认：实例名称
      if name_confirmation.strip() != actual_name:
          errors.append(f"实例名称确认失败: 期望 '{actual_name}', 但收到 '{name_confirmation}'")
      
      # 第三次确认：操作类型
      valid_operations = {
          'shutdown': ['shutdown', '关机', '优雅关机'],
          'power_off': ['power_off', '强制关机', '强制断电'],
          'reboot': ['reboot', '重启', '重新启动'],
          'power_on': ['power_on', '开机', '启动']
      }
      
      operation_confirmed = False
      for op, variations in valid_operations.items():
          if op == operation and operation_confirmation.strip().lower() in [v.lower() for v in variations]:
              operation_confirmed = True
              break
      
      if not operation_confirmed:
          expected_ops = valid_operations.get(operation, [operation])
          errors.append(f"操作确认失败: 期望 '{expected_ops[0]}', 但收到 '{operation_confirmation}'")
      
      if errors:
          return False, "; ".join(errors)
      
      return True, "所有确认项目验证通过"

• providers/digitalocean_provider.py:232-244 (helper)

  Provider-specific entry point for power_off operation that specifies the operation type 'power_off' and delegates to the shared _execute_power_operation helper.

  def power_off_droplet(
      self, 
      droplet_id: int, 
      ip_confirmation: str = "", 
      name_confirmation: str = "", 
      operation_confirmation: str = ""
  ) -> Dict:
      """
      强制关闭Droplet（需要三次确认）
      """
      return self._execute_power_operation(
          droplet_id, 'power_off', ip_confirmation, name_confirmation, operation_confirmation
      )