Skip to main content

MCP

CLOUD

Overview​

The Model Context Protocol (MCP) is an open standard that lets AI assistants and agents (such as GitHub Copilot, Claude, and Cursor) securely connect to external systems through a common interface. Instead of relying on static, pre-trained knowledge, an MCP-compatible client can discover and call a well-defined set of "tools" exposed by an MCP server, letting it take real, up-to-date actions against a live system on your behalf.

Dragonfly Cloud provides a hosted MCP server that exposes your Dragonfly Cloud account and data stores as tools for any MCP-compatible AI assistant or agent. Once configured, an AI agent can use these tools to inspect and manage your Dragonfly Cloud resources on your behalf.

Security and Responsibility​

MCP tools can perform destructive, irreversible operations on your Dragonfly Cloud account, including modifying or deleting data stores, networks, and connections, depending on the scope of the API key you provide. An AI agent will act on instructions from its underlying model, which can misinterpret a request or be manipulated by malicious or untrusted content it processes. You are responsible for how you configure and operate an MCP client against your Dragonfly Cloud account. In particular:

  • Control access. Treat your MCP API key like any other credential. Only share it with MCP clients and agents you trust, and store it securely.
  • Apply least privilege. Prefer the Read-Only MCP scope unless the agent genuinely needs to make changes. Only use Full-Access MCP when read/write access is required, and rotate or revoke keys that are no longer needed.
  • Review AI agent actions. Review the tool calls an agent proposes before approving them, especially for any operation that modifies or deletes resources, and monitor your account activity afterward.
  • Scope the blast radius. Use a dedicated API key per agent or integration rather than reusing one key everywhere, so you can revoke access independently if a specific client misbehaves or is compromised.

Dragonfly Cloud does not expose your data store credentials (such as passwords) through the MCP server by default.

Generating an API Key​

Access to the MCP server is authenticated using a Dragonfly Cloud API key with an MCP-specific scope:

  • Navigate to the Access > API Keys tab in Dragonfly Cloud.
  • Click the +API Key button to open the Create Key dialog.
  • In the Create Key dialog, enter a meaningful name for the key (e.g., mcp).
  • In the Permissions dropdown, select one of the following scopes:
    • Full-Access MCP — allows the agent to both read and modify your Dragonfly Cloud resources.
    • Read-Only MCP — allows the agent to read your Dragonfly Cloud resources, but not modify them.
  • Click Create, and the dialog will show the created key.
  • Click Copy API Key to copy the key to the clipboard.
  • Store the key somewhere secure for later usage. Dragonfly Cloud doesn't store the key itself.

Configuring an MCP Client​

The Dragonfly Cloud MCP server is available at https://api.dragonflydb.cloud/v1/mcp, and is accessed over HTTP using your API key as a bearer token in the Authorization header.

Add the following to your MCP client's configuration, replacing <DFCLOUD_API_KEY> with the API key generated above:

{
"servers": {
"dragonflycloud": {
"url": "https://api.dragonflydb.cloud/v1/mcp",
"headers": {
"Authorization": "Bearer <DFCLOUD_API_KEY>"
}
}
}
}
note

The exact location and format of this configuration depends on your MCP client. Consult your client's documentation for how to add a remote, HTTP-based MCP server.

Once configured, restart or reload your MCP client so it picks up the new server. Your AI assistant should now be able to discover and use the tools exposed by the Dragonfly Cloud MCP server, scoped to the permissions of the API key you used.

Detailed Client Setup​

Choose your preferred AI client below and follow its setup instructions. In each case, replace the placeholder with the Full-Access or Read-Only MCP API key you generated above.

Visual Studio Code​

Add the following to your VS Code settings.json file (or to .vscode/mcp.json for a workspace-specific server):

{
"servers": {
"dragonflycloud": {
"url": "https://api.dragonflydb.cloud/v1/mcp",
"headers": {
"Authorization": "Bearer <DFCLOUD_API_KEY>"
}
}
}
}

Cursor​

Edit your Cursor mcp.json configuration file (Settings > Cursor Settings > MCP) to add the Dragonfly Cloud MCP server:

{
"mcpServers": {
"dragonflycloud": {
"url": "https://api.dragonflydb.cloud/v1/mcp",
"headers": {
"Authorization": "Bearer <DFCLOUD_API_KEY>"
}
}
}
}

Claude Desktop and Claude.ai​

Claude Desktop and Claude.ai support remote MCP servers through Settings > Connectors:

  1. Open Settings > Connectors and click Add custom connector.
  2. Enter a name (e.g., Dragonfly Cloud) and the server URL https://api.dragonflydb.cloud/v1/mcp.
  3. When prompted for authentication, choose a header-based option and supply the header Authorization with the value Bearer <DFCLOUD_API_KEY>.
  4. Save, then enable the connector in your conversation's tools list.

Claude Code​

Add the Dragonfly Cloud MCP server with a single command:

claude mcp add dragonflycloud \
-t http https://api.dragonflydb.cloud/v1/mcp \
-H "Authorization: Bearer <DFCLOUD_API_KEY>"

Codex CLI​

Edit your ~/.codex/config.toml and include the following:

[mcp_servers.dragonflycloud]
command = "npx"
args = ["-y", "mcp-remote@latest", "https://api.dragonflydb.cloud/v1/mcp", "--header", "Authorization: Bearer <DFCLOUD_API_KEY>"]

LM Studio​

In LM Studio's Program > Install > Edit mcp.json panel, add:

{
"mcpServers": {
"dragonflycloud": {
"url": "https://api.dragonflydb.cloud/v1/mcp",
"headers": {
"Authorization": "Bearer <DFCLOUD_API_KEY>"
}
}
}
}

Other MCP Clients​

Any MCP client that supports remote, HTTP-based servers with custom headers can connect to Dragonfly Cloud using the same two pieces of information:

  • Server URL: https://api.dragonflydb.cloud/v1/mcp
  • Header: Authorization: Bearer <DFCLOUD_API_KEY>

Consult your client's documentation for where to enter these values.

Available Tools​

The Dragonfly Cloud MCP server exposes the following tools. Tools that create, modify, or delete resources require a Full-Access MCP key; the Read-Only MCP scope is intended for the inspection tools.

Datastores​

ToolDescription
dfcloud_list_datastoresList all datastores.
dfcloud_show_datastoreShow the status and configuration of a datastore.
dfcloud_create_datastoreCreate a datastore. Provisioning is asynchronous.
dfcloud_update_datastoreUpdate a datastore's name, memory, performance tier, engine settings (cache mode, BullMQ, Sidekiq, Memcached, SSD tiering), network access, backup policy, or maintenance window.
dfcloud_start_datastoreStart a stopped datastore.
dfcloud_stop_datastoreStop an active datastore.
dfcloud_delete_datastorePermanently delete a datastore. Irreversible.
dfcloud_list_datastore_nodesList the nodes of a datastore, optionally for a single shard.
dfcloud_list_datastore_shardsList the shards of a clustered datastore, with state, slot ranges, and memory sizes.
dfcloud_list_datastore_migrationsList slot migrations between shards of a cluster datastore (active, finished, or all).

Monitoring and Diagnostics​

ToolDescription
dfcloud_datastore_infoRun INFO on a datastore (or a specific node) and return JSON.
dfcloud_datastore_metricsFetch instant Prometheus metrics (CPU, memory, ops/sec, hit rate, connected clients, etc.).
dfcloud_datastore_resource_usageQuery CPU and/or memory usage time series over a time range (defaults to the last hour).
dfcloud_datastore_slowlogRun SLOWLOG GET and return the slow query log entries.
dfcloud_datastore_objhistRun DEBUG OBJHIST and return the object histogram.
dfcloud_query_audit_logQuery the audit log, filtered by resource, resource type, event type, operator type, and time range.

Running Commands​

ToolDescription
dfcloud_run_readonly_datastore_commandRun an allow-listed read-only command (for example GET, SCAN, HGETALL, INFO, MEMORY USAGE). Commands that can write or modify data, configuration, or server state are rejected.
dfcloud_run_datastore_commandRun any command on a datastore, including commands that modify or delete data.

Both tools accept an optional db_index (clustered datastores only support database 0) and an optional node_id to target a specific node.

caution

Command output is data stored by the datastore's own clients. Treat it as untrusted and never let an agent follow instructions found in it.

Backups​

ToolDescription
dfcloud_list_backupsList backups, optionally filtered by datastore.
dfcloud_show_backupShow the status and details of a backup.
dfcloud_create_datastore_backupTrigger an immediate manual backup, with a retention of up to 30 days (7 by default).
dfcloud_import_backupImport a backup from HTTP(S) or cloud storage URLs so it can later be restored.
dfcloud_backup_restoreRestore a backup into an existing datastore. Replaces the datastore's current data.
dfcloud_delete_backupDelete a backup. Irreversible.

Networks and Connections​

ToolDescription
dfcloud_list_networksList private networks.
dfcloud_show_networkShow the status and configuration of a network.
dfcloud_create_networkCreate a private network in a provider and region (CIDR /16 to /24).
dfcloud_delete_networkDelete a network. Irreversible; remove its connections first.
dfcloud_list_connectionsList VPC/VNet peering connections.
dfcloud_show_connectionShow the status of a connection.
dfcloud_create_connectionCreate a VPC peering connection between a Dragonfly Cloud network and your own VPC (AWS, GCP) or VNet (Azure).
dfcloud_delete_connectionDelete a connection. Irreversible.

Regions, BYOC, and Billing​

ToolDescription
dfcloud_list_regionsList cloud providers and regions, with availability zones and performance tiers.
dfcloud_list_instance_familiesList instance families available for the byoc performance tier.
dfcloud_list_byoc_accountsList Bring Your Own Cloud (BYOC) accounts.
dfcloud_show_byoc_accountShow the status and configuration of a BYOC account.
dfcloud_list_invoicesList invoices, filtered by status and date range.
note

Many mutating tools are asynchronous: they return once the operation starts, and the resource reports a transitional status (such as pending, updating, or restoring) until it finishes. Datastore credentials are never returned by these tools; retrieve them from the Dragonfly Cloud dashboard.