CloudBase MCP Server: Setup for Claude Code, Cursor and Other Apps

• Signs you in to CloudBase and picks an environment

  Checks your login state, starts sign-in, signs in with an API key, binds an environment or signs out. Other tools work only after an environment is bound.

  Try: “Check my CloudBase login and bind my test environment.”

  Write · auth

• Lists environments, domains, usage and metrics

  Returns your environments, one environment's details, its security domains, resource usage and monitoring metrics.

  Try: “List my CloudBase environments.”

  Network · queryEnv

• Creates, upgrades or renews environments

  Lists plans, creates an environment, changes its plan, renews it, or adds and removes browser-origin (CORS) domains. Actions that cost money ask for confirmation.

  Try: “Add https://myapp.com to the allowed domains.”

  Write · manageEnv

• Old way to edit allowed domains

  Deprecated. It manages the browser (CORS) allow-list and is replaced by the environment management tool, which does the same thing.

  Try: “Remove an old domain from the allow-list.”

  Write · envDomainManagement

• Lists NoSQL collections and indexes

  Shows collections, their details and indexes, and checks whether an index exists.

  Try: “List the collections in my database.”

  Network · readNoSqlDatabaseStructure

• Creates or deletes collections and indexes

  Adds or removes NoSQL collections and their indexes. Removing a collection drops it from the environment.

  Try: “Create a collection named orders with an index on userId.”

  Delete · writeNoSqlDatabaseStructure

• Queries NoSQL records

  Reads records with filters, sorting and paging. Up to 1000 per call, 100 by default.

  Try: “Show the last 20 orders for user 42.”

  Network · readNoSqlDatabaseContent

• Inserts, updates or deletes NoSQL records

  Writes records with insert, update, upsert and delete. Server-side writes carry no _openid, which can break row-level rules.

  Try: “Set status to shipped on order 123.”

  Delete · writeNoSqlDatabaseContent

• Lists data models and their fields

  Read-only. Lists models, shows one model with its fields and relations, or generates SDK usage docs for it.

  Try: “Show the fields of the Product model.”

  Network · manageDataModel

• Creates a data model from a diagram

  Builds a new data model from a Mermaid class diagram and waits for it to finish. It only creates new models.

  Try: “Create a Customer and Order model from this diagram.”

  Write · modifyDataModel

• Reads from a PostgreSQL database

  Shows the Postgres context, objects, metadata and object structure, and runs read-only SQL.

  Try: “List the tables in my Postgres database.”

  Network · queryPgDatabase

• Changes a PostgreSQL database

  Runs confirmed write SQL, checks SQL risk first, and manages migrations. Schema changes such as CREATE, ALTER and DROP go through migrations that are also saved as local files.

  Try: “Add an email column to users with a migration.”

  Delete · managePgDatabase

• Explains PostgreSQL-mode file storage

  Returns bucket and capability summaries and upload plans for environments in Postgres mode. It does not read local files.

  Try: “How do I upload files in my Postgres environment?”

  Network · queryPgStorage

• Reads from a MySQL database

  Runs read-only SQL and shows instance state, task status, and slow-query and error logs.

  Try: “Show slow queries from the last day.”

  Network · queryMysqlDatabase

• Changes or destroys a MySQL instance

  Runs write SQL or DDL, initializes a schema, or destroys an existing instance. It no longer creates instances.

  Try: “Run this ALTER TABLE on my MySQL database.”

  Delete · manageMysqlDatabase

• Lists cloud functions, logs and triggers

  Read-only view of functions, details, run logs, layers, triggers, code download links, versions and traffic aliases.

  Try: “Show the last errors from my resize-image function.”

  Network · queryFunctions

• Creates, updates and runs cloud functions

  Creates functions, updates code and configuration, invokes them, publishes versions, sets traffic aliases and manages timer triggers and layers.

  Try: “Create a function that runs every night at 2am.”

  Runs code · manageFunctions

• Reads static site hosting status and files

  Shows the website config, service status, files and custom-domain status. It has no side effects.

  Try: “Is my static site live, and which files are in it?”

  Network · queryHosting

• Uploads to or deletes from static hosting

  Uploads local build output, deletes files or folders (with confirmation), sets the index and error pages, enables the service and binds domains.

  Try: “Upload ./dist to my hosting.”

  Delete · manageHosting

• Lists cloud storage files and links

  Lists files, gets file info and makes temporary download links, valid for one hour by default.

  Try: “List the files in my uploads folder.”

  Network · queryStorage

• Uploads, downloads or deletes storage files

  Uploads or downloads files and folders and deletes them. Deletion requires force to be set.

  Try: “Upload report.pdf to cloud storage.”

  Delete · manageStorage

• Downloads a starter project template

  Downloads and sets up a CloudBase template such as React, Vue or a mini program in your project folder.

  Try: “Start a new React app from the CloudBase template.”

  Write · downloadTemplate

• Searches CloudBase docs and guides

  Looks up the official docs, fixed skill guides and OpenAPI docs. Use it first when a tool returns an error code.

  Try: “What does error OperationDenied.FreePackageDenied mean?”

  Network · searchKnowledgeBase

• Reads Cloud Run services and logs

  Lists services and templates, shows service details, build and run logs, deploy history and whether Cloud Run is enabled.

  Try: “Show the run logs of my api service.”

  Network · queryCloudRun

• Deploys or deletes Cloud Run services

  Enables Cloud Run, creates projects, downloads code, runs functions locally, deploys from source or an image, updates configuration and deletes services.

  Try: “Deploy this folder to Cloud Run as api.”

  Delete · manageCloudRun

• Builds your site locally before deploy

  Reads cloudbaserc and runs the buildCommand for each hosting entry. It does not install dependencies or upload.

  Try: “Build the site defined in cloudbaserc.”

  Runs code · deployBuild

• Previews what a deploy would change

  A dry run over cloudbaserc that lists each resource as create, update, skip or conflict. It changes nothing.

  Try: “Show me the deploy plan.”

  Files · deployPlan

• Deploys everything in cloudbaserc

  Applies cloudbaserc in order: database, functions, app, hosting, gateway. It changes cloud resources and needs confirm set to true.

  Try: “Apply the deploy plan.”

  Runs code · deployApply

• Reads HTTP gateway routes and domains

  Lists routes, one route, custom domains, privileges and cache purge tasks.

  Try: “List the gateway routes for my domain.”

  Network · queryGateway

• Creates, edits or deletes gateway routes

  Creates, updates and deletes routes that send a path to a function, Cloud Run, hosting or storage, and enables or disables them.

  Try: “Route /api to my api function.”

  Delete · manageGateway

• Reads sign-in settings for your app

  Shows login methods, providers, publishable key, API keys, client settings and static domains. It does not sign anyone in.

  Try: “Which login methods are enabled?”

  Network · queryAppAuth

• Changes sign-in settings and keys

  Changes login methods, providers and clients, ensures a publishable key, and creates or deletes API keys and custom login keys.

  Try: “Enable username and password login.”

  Delete · manageAppAuth

• Lists deployed web apps and build logs

  Lists apps, versions and build status, and gets a pre-signed upload URL for code.

  Try: “Is the latest build of my web app done?”

  Network · queryApps

• Builds and deploys a web app

  Deploys a web app, frontend and backend, to its own subdomain, with a cloud upload route for setups with no local files.

  Try: “Deploy this web app.”

  Runs code · manageApps

• Reads access rules, roles and users

  Shows permissions on databases, functions and storage, roles, app users and gateway policies.

  Try: “Who can read my uploads bucket?”

  Network · queryPermissions

• Changes access rules, roles and users

  Updates resource permissions, manages roles, members and policies, creates, edits and deletes app users, and sets gateway policies.

  Try: “Make the uploads bucket private.”

  Delete · managePermissions

• Searches logs across CloudBase services

  Checks whether log service is on and searches log entries across services.

  Try: “Search logs for "timeout" in the last hour.”

  Network · queryLogs

• Turns on the log service

  Enables the CLS log service for the environment. Setup runs in the background.

  Try: “Turn on logging for my environment.”

  Write · manageLogs

• Lists agents, details and logs

  Shows the agents in your environment, one agent in detail, and its run logs, without changing anything.

  Try: “List my CloudBase agents.”

  Network · queryAgents

• Creates, updates or deletes agents

  Creates a remote agent, changes its settings, or removes it from your environment.

  Try: “Delete the test-bot agent.”

  Delete · manageAgents

• Calls any Tencent Cloud API action

  A general tool for calling Tencent Cloud management APIs by service and action. Its description tells you to read the action index first.

  Try: “Describe my CloudBase environments through the Cloud API.”

  Delete · callCloudApi

• Makes a link to file feedback on GitHub

  Returns a new-issue page address for sharing a showcase or a bad experience. It does not submit anything.

  Try: “Give me the link to report this problem.”

  Read · prepareFeedback

• Reads mini program message push settings

  Shows push mode, callbacks and the supported message events.

  Try: “What is my message push setup?”

  Network · queryMessagePush

• Changes mini program message push settings

  Updates push configuration, with a version check and a required confirmation.

  Try: “Switch message push to functions mode.”

  Write · manageMessagePush

Watch out for

• It can delete data, files and services

  Tools delete NoSQL records and collections, storage and hosting files, Cloud Run services, gateway routes, API keys and agents. Use a test environment first. github.com

• It can create, renew and change paid plans

  The environment tool can create, upgrade or renew environments. These ask for confirmation, but read each request before you approve it. github.com

• A static key pair never expires

  The README says a Secret ID and Key stays valid until rotated or deleted. Prefer browser sign-in, and keep keys out of repositories. github.com

• Local mode reads and writes your files

  Upload, template download, deploy and local build tools use your project folder and run build commands. The README says local mode is equivalent to running the tools yourself. github.com

• Any Tencent Cloud API can be called

  One general tool calls Tencent Cloud management actions by name, so it reaches past the CloudBase-specific tools. Review what it is asked to do. github.com

Security advisories