Model Context Protocol moderate risk

Qiniu

Qiniu MCP Server enables AI models to interact with Qiniu cloud services like storage, media processing, CDN, and live streaming, managed via environment variables.

Connections & Capabilities

Connects To

GitHubS3

Capabilities

readwriteexec

Quickstart

Install

brew install uv

Config

{
  "mcpServers": {
    "qiniu": {
      "command": "uvx",
      "args": [
        "qiniu-mcp-server"
      ],
      "env": {
        "QINIU_ACCESS_KEY": "YOUR_ACCESS_KEY",
        "QINIU_SECRET_KEY": "YOUR_SECRET_KEY",
        "QINIU_REGION_NAME": "YOUR_REGION_NAME",
        "QINIU_ENDPOINT_URL": "YOUR_ENDPOINT_URL",
        "QINIU_BUCKETS": "YOUR_BUCKET_A,YOUR_BUCKET_B"
     },
      "disabled": false
    }
  }
}

Exposed MCP Tools (16)

safe

get_bucket_list

Lists all available buckets in the configured Qiniu account.

Read-only operation; no data modification.

safe

get_file_list

Lists files within a specified bucket.

Read-only operation; no data modification.

moderate

upload_file

Uploads a file to a specified bucket.

Writes data to the bucket; potential for data corruption or overwriting.

safe

read_file_content

Reads the content of a file from a specified bucket.

Read-only operation; no data modification.

safe

get_file_download_link

Generates a download link for a file in a specified bucket.

Read-only operation; no data modification.

moderate

image_scale

Scales an image stored in a bucket.

Modifies image data; potential for data corruption.

moderate

image_round_corner

Applies rounded corners to an image stored in a bucket.

Modifies image data; potential for data corruption.

moderate

cdn_refresh

Refreshes a CDN link.

Triggers CDN refresh, potentially incurring costs.

moderate

cdn_prefetch

Prefetches a CDN link.

Triggers CDN prefetch, potentially incurring costs.

moderate

create_live_space

Creates a new live streaming space (bucket).

Creates a new resource; potential for resource exhaustion.

moderate

create_live_stream

Creates a new live streaming stream within a space.

Creates a new resource; potential for resource exhaustion.

safe

get_live_space_list

Lists all live streaming spaces.

Read-only operation; no data modification.

safe

get_live_stream_list

Lists all live streams within a space.

Read-only operation; no data modification.

high

bind_push_pull_domain

Binds push and pull domains to a live streaming space.

Modifies live streaming configuration; potential for service disruption.

safe

get_live_address

Retrieves the push and pull addresses for a live stream.

Read-only operation; no data modification.

safe

get_live_usage

Retrieves live streaming usage data.

Read-only operation; no data modification.

Safety Assessment

The Qiniu MCP Server's safety depends heavily on proper configuration and environment variable management. While it offers read-only operations, the presence of write capabilities and reliance on environment variables for authentication introduce moderate risks. It is safe when used for read-only tasks and with carefully managed credentials, but risky if misconfigured or used with overly permissive credentials.

Requires explicit configuration of access keys and secret keys.
Buckets are explicitly defined, limiting the scope of access.
Provides tools for CDN refresh and prefetch, which don't directly modify data.
Supports read-only operations like listing buckets and files.

Exposes Qiniu cloud credentials via environment variables.
Includes write operations such as file uploads and live stream creation.
Lacks built-in sandboxing, relying on correct configuration.
Potential for data modification or deletion if misconfigured.
Live streaming tools can create and manage live streams, potentially impacting service availability.