2.1.5npm · @fastly/mcp · latest release
Observed 2026-08-18T23:38:55.485Z using mcpSecurity-inventory. Protocol 2025-06-18.
| Tool | Category | Risk |
|---|---|---|
executeRun JavaScript in a sandbox with the Fastly API client pre-authenticated.
If you already know the method, call it directly. Otherwise, use `search` first and copy its `usage` snippet.
You MUST use `return` to produce output. API methods return values directly (arrays, objects), not wrapped in `.result`. Every Fastly.*Api class is pre-instantiated as a camelCase global: `serviceApi`, `purgeApi`, `backendApi`, etc.
Example: `return await serviceApi.listServices();`Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"code": {
"type": "string",
"description": "JavaScript code to execute. `Fastly` is available globally. Auth is pre-configured. Use `return` to get results."
}
},
"required": [
"code"
]
} | — | — |
inspectGet full documentation for a specific API method, including parameters, return type, and example code. Use this after search to understand how to call a method and what it returns. Accepts a method name (e.g. 'listServices') or ClassName.methodName (e.g. 'ServiceApi.listServices').Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"method": {
"type": "string",
"description": "Method name (e.g. 'listServices') or ClassName.methodName (e.g. 'ServiceApi.listServices')"
}
},
"required": [
"method"
]
} | — | — |
searchFind Fastly API methods by keyword, class name, method name, or HTTP path. Each result includes a ready-to-use `usage` snippet you can pass directly to `execute`. For simple calls, go straight from search to execute. Use `inspect` only when you need full parameter docs.Input schema{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"query": {
"type": "string",
"description": "A keyword (e.g. 'purge'), an API class name (e.g. 'PurgeApi'), a method name (e.g. 'createBackend'), or an HTTP path fragment (e.g. '/service/{service_id}/purge')"
}
},
"required": [
"query"
]
} | — | — |
No completed comparison is available.
| Risk | Change | Subject |
|---|---|---|
| No material changes recorded. | ||
| Severity | Finding | Advisory |
|---|---|---|
| No confirmed vulnerability is published for this version. | ||
Artifact SHA-256: 3c93a69e04f67bd8d72e0e105ac2ad2baff0d34161a7a0aa6bf01a88558268b4
Scanner: mcp-proof-engine 0.1.0.