mcpcfc

MCPCFC - CF2023 CLI Enhanced Edition 🚀

Overview

This is the enhanced CF2023 edition of MCPCFC, leveraging Adobe ColdFusion 2023’s capabilities to provide:

Current Status

✅ All Phases Complete

Requirements

🔒 Security Enhancements

Enhanced REPL Security Implementation

The REPL tools now include comprehensive security filtering:

  1. Pattern-Based Blocking with Word Boundaries
    • Uses regex patterns with \b word boundaries to prevent partial matches
    • Blocks over 80 dangerous patterns organized by category
    • Prevents bypass attempts through precise pattern matching
  2. Reflection and Class Loading Protection
    • Explicit blocking of .class(, .getClass(, classloader patterns
    • Prevents dynamic class loading and reflection attacks
    • Blocks access to Java internals
  3. Comprehensive Operation Blocking
    • File operations: fileread, filewrite, cffile, etc.
    • System commands: cfexecute, runtime.exec, processbuilder
    • Network operations: cfhttp, cfmail, cfsocket
    • Database operations: cfquery, queryexecute, cfstoredproc
    • Scope modifications: application., server., session.
    • Serialization: objectload, objectsave (RCE vectors)
  4. Thread Isolation and Timeout Protection
    • Code executes in separate cfthread context
    • Configurable timeout limits (default: 30 seconds)
    • Graceful thread termination on timeout

Security Recommendations

  1. Development Only: Use REPL tools only in trusted development environments
  2. Network Isolation: Run MCP server on isolated network in production
  3. Access Control: Implement authentication for all endpoints
  4. Audit Logging: All executions are logged to database
  5. Resource Monitoring: Use dashboards to monitor usage patterns

📊 Monitoring and Analytics

Database Setup

  1. Create MySQL database and configure datasource mcpcfc_ds
  2. Run http://localhost:8500/mcpcfc/database-setup.cfm to create tables:
    • tools - Tool registry
    • tool_executions - Execution logging with success/error tracking
    • example_data - Sample data for testing

Dashboards

  1. Full Dashboard (tool-dashboard.cfm)
    • Real-time statistics with auto-refresh
    • Filter by time period, tool, or session
    • Tool performance summary with success rates
    • Recent execution details with input preview
    • Visual indicators for success/failure rates
  2. Simple Dashboard (tool-dashboard-simple.cfm)
    • Basic statistics overview
    • Recent executions list
    • Lightweight alternative for quick monitoring

Log Management

Quick Start

  1. Clone the repository:

    git clone https://github.com/revsmoke/mcpcfc.git
cd mcpcfc
  2. Set up the database:
    • Create MySQL database mcpcfc_db
    • Configure datasource mcpcfc_ds in CF Admin
    • Run http://localhost:8500/mcpcfc/database-setup.cfm

  3. Configure Claude Desktop:

    Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

    {
  "mcpServers": {
    "coldfusion-mcp": {
      "command": "/path/to/mcpcfc/cf-mcp-cf2023-cli.sh"
    }
  }
}
  4. Start using 28 powerful tools!

Complete Tool List

  1. hello - Connection test
  2. sendEmail - Plain text emails
  3. sendHTMLEmail - HTML emails
  4. validateEmailAddress - Email validation
  5. queryDatabase - Database queries
  6. generatePDF - PDF generation
  7. extractPDFText - PDF text extraction

  8. mergePDFs - PDF merging

    • REPL Tools (4) - With Enhanced Security
  9. executeCode - Execute CFML with isolation
  10. evaluateExpression - Evaluate expressions
  11. testSnippet - Run code with assertions

  12. inspectVariable - Debug variables

    • Server Management (4)
  13. serverStatus - Server information
  14. configManager - Configuration management
  15. logStreamer - Log file access

  16. clearCache - Cache management

    • Package Management (6) - Requires CommandBox
  17. packageInstaller - Install packages
  18. packageList - List packages
  19. packageSearch - Search ForgeBox
  20. packageUpdate - Update packages
  21. packageRemove - Remove packages

  22. moduleManager - ColdBox modules

    • Development Workflow (6) - Requires CommandBox
  23. codeFormatter - Format CFML code
  24. codeLinter - Code analysis
  25. testRunner - Run tests
  26. generateDocs - Generate documentation
  27. watchFiles - File monitoring
  28. gitOperations - Git integration

Project Structure

/mcpcfc/
├── Application.cfc              # Main application config with tool registration
├── components/                  # Core MCP components
│   ├── JSONRPCProcessor.cfc    # Protocol handler
│   ├── SessionManager.cfc      # Session management
│   ├── ToolHandler.cfc         # Tool execution with logging
│   └── ToolRegistry.cfc        # Tool registration
├── clitools/                   # CF2023 CLI tools
│   ├── REPLTool.cfc           # REPL with enhanced security
│   ├── ServerManagementTool.cfc # Server management
│   ├── PackageManagerTool.cfc  # Package management
│   └── DevWorkflowTool.cfc    # Development workflow
├── endpoints/                   # HTTP/SSE endpoints
│   ├── sse.cfm                 # SSE transport
│   └── messages.cfm            # HTTP message handler
├── tools/                      # Original 8 tools
├── cli-bridge/                 # Bridge scripts
│   └── cf-mcp-cf2023-cli.sh  # CF2023 CLI bridge
├── client-examples/            # Test clients
├── database-setup.cfm          # Database initialization
├── tool-dashboard.cfm          # Full monitoring dashboard
├── tool-dashboard-simple.cfm   # Simple dashboard
└── tool-log-cleanup.cfm        # Log management

Implementation Highlights

Security Improvements in REPLTool.cfc

Database Logging in ToolHandler.cfc

Shell Escaping in PackageManagerTool.cfc

Future Roadmap

Potential Phase 6: Advanced Features

SDK Development

Contributing

We welcome contributions! Areas of interest:

Version History

Elevating ColdFusion development with modern AI integration!

🚀 MCPCFC - ColdFusion MCP Server

-Bring AI Superpowers to Your ColdFusion Applications

The world’s first Model Context Protocol (MCP) server for ColdFusion!

License: MIT ColdFusion 2016+ Lucee 5+ Status: Working Claude Desktop: Working

Get Started → View Demo Documentation

🎉 NEW: Version 1.0.3 - All 8 tools working perfectly with Claude Desktop! See what’s new →

🌟 What is MCPCFC?

MCPCFC enables ColdFusion applications to serve as tool providers for AI assistants like Claude, ChatGPT, and other LLMs through the standardized Model Context Protocol.

In simple terms: Your ColdFusion apps can now talk to AI, and AI can use your CF tools!

🎯 Perfect For

⚡ Features at a Glance

🛠️ 8 Production-Ready Tools

✅ PDF Operations - Generate, extract text, and merge PDFs
✅ Email Automation - Send HTML/plain emails, validate addresses
✅ Database Queries - Natural language database interactions
✅ Extensible Design - Easy to add your own tools

🔧 Technical Excellence

✅ JSON-RPC 2.0 Protocol - Industry-standard communication
✅ Real-time SSE Support - Live updates and streaming
✅ Thread-Safe Design - Production-ready architecture
✅ Claude Desktop Ready - Works out of the box

🚀 Quick Start

Option 1: Browser Testing (5 minutes)

# Clone the repository
git clone https://github.com/revsmoke/mcpcfc.git

# Place in your ColdFusion webroot
# Navigate to http://localhost:8500/mcpcfc/
# Open the test client and start using AI tools!

Option 2: Claude Desktop Integration (10 minutes)

  1. Install MCPCFC in your CF webroot
  2. Make bridge executable: chmod +x cf-mcp-clean-bridge.sh

  3. Add to Claude Desktop config:

    {
"mcpServers": {
   "coldfusion-mcp": {
      "command": "/path/to/mcpcfc/cf-mcp-clean-bridge.sh"
   }
}
}
  4. Restart Claude Desktop - Your CF tools are now available!

📚 Full Setup Guide →

🎬 See It In Action

Working Tools Demo

🤖 Claude: "Generate a PDF invoice for customer John Doe"
📄 MCPCFC: *Creates PDF with CF's built-in PDF tools*

🤖 Claude: "Email it to john@example.com"  
📧 MCPCFC: *Sends email with the PDF attached*

🤖 Claude: "Show me all customers from the database"
🗄️ MCPCFC: *Queries your CF datasource and returns results*

Live Example

// Your existing CF code
component {
    function generateReport(customerId) {
        // Your business logic here
    }
}

// Now accessible to AI assistants!
// Claude can call: "Generate a report for customer 123"

📊 Why MCPCFC?

Challenge MCPCFC Solution
Legacy CF systems can’t use modern AI ✅ Bridge CF to any AI assistant
Complex integration requirements ✅ Drop-in solution, minimal setup
Security concerns ✅ Built-in controls and query limits
Limited CF community tools ✅ Open source and extensible

🏗️ Architecture

┌─────────────┐     ┌──────────────┐     ┌─────────────┐
│   Claude    │────▶│    MCPCFC    │────▶│ Your CF App │
│  Desktop    │◀────│  MCP Server  │◀────│   & Tools   │
└─────────────┘     └──────────────┘     └─────────────┘
       ↓                    ↓                     ↓
   AI Assistant      JSON-RPC 2.0          PDF, Email,
                    + SSE Transport          Database

Directory Structure

/mcpcfc/
├── Application.cfc           # Application configuration
├── /components/             # Core MCP components
├── /endpoints/              # HTTP/SSE endpoints
├── /tools/                  # Tool implementations
├── /client-examples/        # Test clients
├── cf-mcp-clean-bridge.sh   # Claude Desktop bridge
└── README.md               # You are here!

🔧 Available Tools

Current Tools (v1.0.3)

Tool Description Status
hello Simple greeting tool ✅ Working
queryDatabase Execute SELECT queries ✅ Working
generatePDF Create PDFs from HTML ✅ Working
extractPDFText Extract text from PDFs ✅ Working
mergePDFs Combine multiple PDFs ✅ Working
sendEmail Send plain text emails ✅ Working
sendHTMLEmail Send HTML emails ✅ Working
validateEmailAddress Validate email format ✅ Working

Adding Custom Tools

// 1. Register in Application.cfc
application.toolRegistry.registerTool("myTool", {
    "description": "My custom tool",
    "inputSchema": {
        "type": "object",
        "properties": {
            "param1": {"type": "string"}
        }
    }
});

// 2. Implement in ToolHandler.cfc
case "myTool":
    return executeMyTool(arguments.args);

🛡️ Security & Configuration

Database Security

🤝 Contributing

We need your help to make MCPCFC even better!

How to Contribute

  1. Star the repo - Help others discover MCPCFC
  2. Report issues - Found a bug? Let us know!
  3. Submit PRs - Add features or fix issues
  4. Share your use cases - Tell us how you’re using it
  5. Write documentation - Help others get started

Contributing Guide →

Roadmap

📚 Resources

Community

🙏 Acknowledgments

📄 License

MCPCFC is open source software licensed under the MIT License.

🚀 Ready to Get Started?

Download MCPCFC | View on GitHub | Read the Docs

Show Your Support

If MCPCFC helps your project, please consider:

CFLOVE

-Made with ❤️ for the ColdFusion community

🌐 mcpcfc.dev 📧 hello@mcpcfc.dev
This site is open source. Improve this page.