Akamai CDN

readonly-mcp-akamai

A read-only Model Context Protocol (MCP) server that lets AI agents explore an Akamai account: CDN properties and their rule trees, EdgeWorker code, Edge DNS zones, network lists, CP codes, and error references. 16 tools, all of them reads.

Quick start

With uv installed, there is nothing else to install:

claude mcp add akamai \

-e AKAMAI_HOST=akab-xxxx.luna.akamaiapis.net \ -e AKAMAI_CLIENT_TOKEN=akab-xxxx \ -e AKAMAI_CLIENT_SECRET=xxxx \ -e AKAMAI_ACCESS_TOKEN=akab-xxxx \ -- uvx readonly-mcp-akamai

uvx downloads the package into a cached, isolated environment and runs it. Python 3.11 or newer.

Read-only by design. Every call this server makes reads. It uses GET,

plus one POST to Akamai's error translator, which takes an error reference

and returns what it means without changing anything. The client refuses a

POST to any other path before sending it, and a test checks that. It cannot

create, modify, delete, activate, deactivate, or purge anything. Give the API client

read-only access as a second line of defense: see Credentials.

Read the post about this server and

why I build read-only MCP servers.

Credentials

Create an API client in Akamai Control Center under Identity & Access Management → API clients. Grant read-only access, where the API offers it, to the APIs the tools use:

The client's host, client_token, client_secret and access_token map to the four AKAMAI_* variables below.

Tools

Properties (CDN configurations)

DNS

EdgeWorkers (serverless functions)

Network Lists

Utility

Install

uv tool install readonly-mcp-akamai   # or: pip install readonly-mcp-akamai

Not needed for the Quick start, which runs it with uvx.

Docker

docker run -i --rm \

-e AKAMAI_HOST=akab-xxxx.luna.akamaiapis.net \ -e AKAMAI_CLIENT_TOKEN=akab-xxxx \ -e AKAMAI_CLIENT_SECRET=xxxx \ -e AKAMAI_ACCESS_TOKEN=akab-xxxx \ ghcr.io/desty2k/readonly-mcp-akamai:latest

-i keeps stdin open for the default stdio transport.

Configuration

All settings are environment variables with the AKAMAI_ prefix.

The http and sse transports have no authentication: anyone who can reach the port can read the Akamai account with the configured credentials. They listen on 127.0.0.1 by default. Setting AKAMAI_HTTP_HOST to any other address logs a warning at startup. The Docker image sets AKAMAI_HTTP_HOST=0.0.0.0 so a published port works; publish it on loopback only:

docker run --rm -p 127.0.0.1:8080:8080 -e AKAMAI_TRANSPORT=http \

-e AKAMAI_HOST=... -e AKAMAI_CLIENT_TOKEN=... \ -e AKAMAI_CLIENT_SECRET=... -e AKAMAI_ACCESS_TOKEN=... \ ghcr.io/desty2k/readonly-mcp-akamai:latest

MCP client configuration

Claude Desktop

Add to claude_desktop_config.json (~/Library/Application Support/Claude/ on macOS, %APPDATA%\Claude\ on Windows):

{

"mcpServers": { "akamai": { "command": "uvx", "args": ["readonly-mcp-akamai"], "env": { "AKAMAI_HOST": "akab-xxxx.luna.akamaiapis.net", "AKAMAI_CLIENT_TOKEN": "akab-xxxx", "AKAMAI_CLIENT_SECRET": "xxxx", "AKAMAI_ACCESS_TOKEN": "akab-xxxx" } } } }

Claude Code

See Quick start.

How it compares

As of November 2026. Akamai's own MCP servers under akamai-developers cover other products: Akamai Cloud (Linode, also read-only), Akamai Functions, and the documentation. None of them reads Property Manager, EdgeWorkers, Edge DNS, or Network Lists. Check the projects themselves before relying on this.

Example questions

An agent with this server can answer:

• "Find the CDN property for api.example.com and show me its caching rules"
• "What version is currently deployed to production for the main website?"
• "Show me all DNS records for example.com"
• "What EdgeWorkers are configured? Show me the code for the request router"
• "Search for all uses of setResponseHeader in EdgeWorker 42"
• "What IPs are in the blocklist network list?"
• "Translate this Akamai error: 9.6f64d440.1318965461.2f2b078"
• "List all CP codes for the main contract"

Development

git clone https://github.com/desty2k/readonly-mcp-akamai

cd readonly-mcp-akamai uv sync --extra dev uv run pytest --cov uv run ruff check . uv run ruff format --check .

License

MIT — see LICENSE.