anas-mcp

Cloudflare-hosted, read-only Remote MCP service for Firstsun analytics.

Architecture

ChatGPT / MCP client
        |
        | OAuth + PKCE
        v
Cloudflare Access (Managed OAuth + policy)
        |
        | authenticated Streamable HTTP
        v
Cloudflare Worker: anas-mcp
        |
        +--> Google Analytics Data API
        +--> Google Search Console API
        +--> Hyperdrive --> PostgreSQL --> Clarity analytics

• HTTP API contract: repository-root openapi.yaml uses OpenAPI 3.2.0 and is intended for Swagger-compatible tooling. It documents the HTTP surface; MCP tools remain MCP-native schemas rather than fake REST endpoints.
• MCP authentication: production /mcp is protected by Cloudflare Access Managed OAuth. ChatGPT should authenticate through Access; no shared static bearer token is required for the normal interactive flow.
• GA4: direct Google Analytics Data API queries.
• Search Console: direct Search Console API queries.
• Clarity: read normalized PostgreSQL data populated by firstsun-dev/windmill-flows; this service never calls the Clarity API directly.
• Credentials: Secrets Store first. Any long-lived secret consumed directly by this Worker should come from Cloudflare Secrets Store whenever supported.
• Google OAuth: one JSON credential stored in Cloudflare Secrets Store.
• Database: read-only PostgreSQL access through Cloudflare Hyperdrive; the database password remains managed by Hyperdrive and is not duplicated into Worker secrets.
• CI/CD: Cloudflare Worker deployment is implemented centrally in firstsun-dev/.github; this repository must use a thin caller for the shared _cf-worker-template.yml workflow rather than duplicating deploy steps.

See:

• openapi.yaml and docs/api.md for the HTTP/OpenAPI contract
• docs/cloudflare-access.md for MCP authentication and Access setup
• docs/credentials.md for credential ownership/storage policy
• docs/cicd.md for centralized deployment policy and caller-workflow contract

OpenAPI / Swagger policy

openapi.yaml is the canonical HTTP API description.

Current documented HTTP surface:

GET  /health
POST /mcp

Use Swagger-compatible OpenAPI 3.2 tooling to inspect/render the contract.

Do not represent MCP tools such as future ga4_run_report, gsc_search_analytics, or clarity_page as fake REST routes. Those contracts belong to MCP tool schemas and are discovered through MCP.

Any change to an HTTP route, method, authentication requirement, status code, content type, or stable payload must update openapi.yaml in the same change.

Automated OpenAPI validation is tracked in openspec/changes/adopt-openapi-http-contract/ and must be included in the project check/centralized CI path before being considered complete.

Authentication policy summary

Cloudflare Access Managed OAuth is the production identity boundary for /mcp.

Do not replace it with:

• shared static bearer tokens
• query-string secrets
• OpenAI IP allowlisting
• User-Agent checks
• a custom username/password system

Cloudflare Access owns the MCP client-facing OAuth state and token lifecycle. anas-mcp must not add KV, D1, Durable Objects, or PostgreSQL tables solely to duplicate Managed OAuth state.

Credential policy summary

Use Cloudflare Secrets Store as the production source of truth for application-held secrets such as Google OAuth credentials, API tokens, client secrets, signing keys, and encryption keys.

Do not put production credentials in:

• Wrangler vars
• committed configuration
• .env or .dev.vars
• source code
• logs

Do not use wrangler secret when Secrets Store can serve the same production credential unless an accepted OpenSpec change documents why.

Intentional exceptions:

• Cloudflare Access Managed OAuth token/session material remains managed by Cloudflare Access.
• PostgreSQL credentials stay in the Hyperdrive connection.
• The Microsoft Clarity API token stays in firstsun-dev/windmill-flows because this service never calls Clarity directly.
• Derived short-lived Google OAuth access tokens stay in runtime memory only.
• CI bootstrap credentials such as the Cloudflare deploy token/account ID may use the protected GitHub Actions mechanism required by the organization-managed reusable deployment workflow.

CI/CD policy summary

The deployment implementation belongs to:

firstsun-dev/.github/.github/workflows/_cf-worker-template.yml

anas-mcp may add a thin caller workflow similar to:

jobs:
  pipeline:
    uses: firstsun-dev/.github/.github/workflows/_cf-worker-template.yml@v1
    secrets: inherit
    with:
      app_name: anas-mcp
      app_path: .
      app_version: <project version>
      build_cmd: <verified build/check command>

Do not copy the shared wrangler versions upload/deploy, rollback, or generic runner logic into this repository.

The current project uses npm scripts while the central workflow currently invokes pnpm exec wrangler internally. Package-manager compatibility must be verified before the caller is enabled; if there is a mismatch, prefer aligning the project or improving the central workflow rather than forking deploy logic locally.

See docs/cicd.md and openspec/changes/use-centralized-cf-worker-ci/.

Current state

The repository currently contains the MCP foundation and architecture specifications:

• stateless /mcp endpoint using Cloudflare Agents SDK
• /health HTTP endpoint
• MCP health tool
• OpenAPI 3.2.0 HTTP contract
• OpenSpec architecture, requirements, design, and implementation tasks
• Secrets Store first credential policy
• Cloudflare Access Managed OAuth production-auth decision
• centralized firstsun-dev/.github Cloudflare Worker CI/CD decision

Cloudflare dashboard Access configuration, datasource integrations, deployment caller, automated OpenAPI validation, and end-to-end ChatGPT authentication are not considered verified until actually tested.

Development

npm install
npm run dev

Health endpoint:

http://localhost:8787/health

MCP endpoint:

http://localhost:8787/mcp

Test MCP locally with:

npx @modelcontextprotocol/inspector@latest

Local MCP behavior may be tested before production Access is provisioned, but production authentication must be verified against the deployed Access-protected endpoint.

Verification

npm run check

The final project check should also validate openapi.yaml with an OpenAPI 3.2-capable validator. Until that validator is actually wired in, OpenAPI automated validation remains pending.

For production auth, follow docs/cloudflare-access.md and verify both allowed and denied identities.

Deployment

Do not make npm run deploy or locally copied Wrangler deployment commands the normal production CI path.

Production/development CI deployment must be invoked through the reusable workflow maintained by firstsun-dev/.github. The application repository should contain only the thin caller after package-manager compatibility, versioning, URLs, and Cloudflare bootstrap credentials have been resolved.

See docs/cicd.md.

Do not commit real Cloudflare resource IDs, database credentials, Google OAuth credentials, access tokens, Access assertions, or private analytics payloads.

OpenSpec

Start with:

• openspec/project.md — project architecture and boundaries
• openspec/specs/analytics-mcp/spec.md — baseline capability requirements
• openspec/changes/bootstrap-analytics-mcp/ — bootstrap design/tasks
• openspec/changes/add-cloudflare-access-auth/ — Cloudflare Access authentication decision and rollout tasks
• openspec/changes/use-centralized-cf-worker-ci/ — organization-managed Cloudflare Worker CI/CD decision
• openspec/changes/adopt-openapi-http-contract/ — OpenAPI/Swagger HTTP contract decision
• docs/api.md — OpenAPI/Swagger ownership and drift policy
• docs/cloudflare-access.md — production Access authentication model and operator checklist
• docs/credentials.md — credential ownership, storage, and exception policy
• docs/cicd.md — reusable deployment workflow policy

See AGENTS.md before making code or architecture changes.