cloudarmor-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CLOUDARMOR_PROJECT | Yes | GCP project ID that receives the load-balancer logs | |
| CLOUDARMOR_RULES_INI | No | Path to a rules INI (labels + known-normal priorities) | |
| CLOUDARMOR_HOME_REGION | No | ISO region code treated as home traffic, e.g. JP. Enables the false-positive lens | |
| CLOUDARMOR_BACKEND_SERVICES | No | Comma-separated backend service names to filter (default: all) | all |
| GOOGLE_APPLICATION_CREDENTIALS | Yes | Path to the service-account key file |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| health_checkA | Service health: version, config presence and a minimal API probe. Returns a fixed shape (status/service/version + backend fields) so a monitoring caller never has to branch on missing keys. status is "healthy" when the config loads and a 1-entry probe query succeeds, "degraded" when config loads but the probe fails, "error" when the config itself is unusable. |
| enforce_deniesD | Enforced DENY counts per Cloud Armor rule priority over the window. |
| preview_deniesA | Preview (dry-run) DENY counts per rule priority over the window. A preview rule that stays free of false positives is a candidate for promotion to enforce. |
| home_region_deniesA | Enforced DENYs whose source IP geolocates to the home region. This is the false-positive lens: home-region users being denied on a priority that is not marked known-normal deserves review. Requires CLOUDARMOR_HOME_REGION. |
| daily_briefB | Morning patrol summary: enforced DENYs by rule, home-region false-positive check, and preview DENYs, in one call. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/shigechika/cloudarmor-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server