# Arcjet MCP

Arcjet is the runtime security platform that ships with your AI code. Enforce budgets, stop prompt injection, detect bots, and protect personal information with Arcjet's AI security building blocks.

## Quick Start

```bash
# Connect this server (installs CLI if needed)
npx -y @smithery/cli@latest mcp add arcjet/arcjet-mcp

# Browse available tools
npx -y @smithery/cli@latest tool list arcjet/arcjet-mcp

# Get full schema for a tool
npx -y @smithery/cli@latest tool get arcjet/arcjet-mcp analyze-traffic

# Call a tool
npx -y @smithery/cli@latest tool call arcjet/arcjet-mcp analyze-traffic '{}'
```

## Direct MCP Connection

Endpoint: `https://arcjet-mcp--arcjet.run.tools`

## Tools (18)

- `analyze-traffic` — Analyze request traffic for an Arcjet site over a configurable time period (1-30 days). Returns total requests, denials…
- `create-rule` — # Create remote rule
- `create-site` — Create a new Arcjet site within a team. Use this when onboarding a new application to Arcjet protection. Returns the si…
- `delete-rule` — Delete a remote rule from an Arcjet site. Takes effect immediately — requests previously blocked by this rule will star…
- `explain-decision` — Explain why Arcjet allowed or denied a specific request in natural language. Returns a plain-English summary, per-rule …
- `get-anomalies` — Detect unusual security patterns for an Arcjet site by comparing a recent period to the previous period of equal length…
- `get-dry-run-impact` — Analyze the potential impact of promoting dry-run rules to live. Shows precisely how many currently-allowed requests wo…
- `get-request-details` — Get full details for a specific request, including headers, rule execution results, IP, and fingerprint. Use this when …
- `get-security-briefing` — Get a comprehensive security briefing for an Arcjet site in a single call. Composes active rules, traffic analysis, thr…
- `get-site-key` — Get the SDK key (ARCJET_KEY) for an Arcjet site. Use this when setting up Arcjet in a new application or retrieving the…
- `get-site-quota` — Get quota usage and limits for an Arcjet site. Shows the current plan, usage by category (e.g. protected requests, bot …
- `investigate-ip` — Investigate an IP address in the context of a specific Arcjet site. Returns threat intelligence (network type, threat a…
- `list-requests` — List recent requests for an Arcjet site, filtered by decision (ALLOW/DENY/ERROR). Use this to analyze traffic patterns,…
- `list-rules` — List all remote rules configured for an Arcjet site. Returns each rule's ID, type, mode (LIVE/DRY_RUN), and configurati…
- `list-sites` — List all Arcjet sites belonging to a team. Each site represents one application protected by Arcjet (e.g. your API, das…
- `list-teams` — List all Arcjet teams the authenticated user belongs to. This is the entry point — call this first to get team IDs requ…
- `promote-rule` — Promote a remote rule from DRY_RUN to LIVE mode. Convenience wrapper — reads the existing rule, changes its mode to LIV…
- `update-rule` — Update an existing remote rule for an Arcjet site. This is a full replacement, not a partial patch — all fields must be…

```bash
# Get full input/output schema for a tool
npx -y @smithery/cli@latest tool get arcjet/arcjet-mcp <tool-name>
```
