HuaweiCloud DevKit (Community Preview)

io.github.glqffPublished by GitHub account glqffv1.1.1Updated Oct 24, 2026

Community preview of HuaweiCloud DevKit MCP server (official: io.github.huaweicloud)

VerifiedStreamable HTTPWeb executableCloud & InfrastructureDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Community preview of HuaweiCloud DevKit: gives AI coding agents guided Huawei Cloud operations, KooCLI tooling, and safety guardrails.

What you can do
  • Get step-by-step guidance for 20+ Huawei Cloud services such as ECS, OBS, VPC, RDS, GaussDB, FunctionGraph, APIG and CCE
  • Run Huawei Cloud CLI (KooCLI) commands and route other services through CLI, API or SDK access
  • Manage credentials and switch accounts at runtime through auth tools
  • Check regions and service availability, and run pre-execution risk checks on public exposure, credential leaks and destructive actions
  • Deploy web apps to a temporary sandbox runtime with public URL preview
When to use it
Use it when an AI coding agent needs to work with Huawei Cloud resources — provisioning or inspecting services, running KooCLI commands, or deploying a quick web app — and you want write operations gated behind explicit approval.
Requirements
Node.js 22 or newer for the npx-based installer and MCP server; a Huawei Cloud account with AK/SK configured via the auth init command; network access to Huawei Cloud services, optionally through a configured HTTP/HTTPS proxy. The manifest lists a remote endpoint, but the README describes local npx and localhost remote setups.
Before you install
Write operations are meant to require explicit approval, but the server can still change or delete cloud resources. Never put your own AK/SK in the MCP config env field; HW_ACCESS_KEY and HW_SECRET_KEY are reserved for platform/CI injection. The locally started remote server has no built-in auth, so do not expose it publicly. Anonymous telemetry is on by default and can be disabled with HUAWEICLOUD_DEVKIT_TELEMETRY=off. This is a community preview, not the official HuaweiCloud package.

Installation

In SourceWeft

  1. Open HuaweiCloud DevKit (Community Preview) in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.glqff%2Fhuaweicloud-devkit/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "huaweicloud-devkit-community-preview": {
      "type": "http",
      "url": "https://erx5uqu4-8931.cn-north-4-bridge.myhuaweicloud.com/mcp"
    }
  }
}

README

HuaweiCloud DevKit

[Discussions] [License] [CI] [npm version] [Beta]

中文 | English

Help AI coding agents use Huawei Cloud safely and accurately — a single integration that gives agents cloud knowledge, CLI tooling, and safety guardrails.

Supports OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), OfficeAce, Hermes, OpenClaw, and AtomCode.

Prerequisites

  • Node.js >= 22

China mainland users: If you experience slow downloads or connection issues with the default npm registry, configure the Huawei Cloud npm mirror:

bash
npm config set registry https://mirrors.huaweicloud.com/repository/npm/

Restore the default registry: npm config delete registry

Mirror lag: npm mirrors (npmmirror, mirrors.huaweicloud.com) may lag behind the official registry for hours after a new release. If install fails with ETARGET or you get an older version, install via the official registry instead:

bash
npx --yes --registry=https://registry.npmjs.org huaweicloud-devkit install --target <target>

Quick Start

If --target is omitted, the installer auto-detects agents on your machine:

  • None detected: interactive terminals ask what you want (install to one explicit target / install to all / wire up a generic MCP agent); non-interactive shells error out with the supported target list.
  • One detected: installs directly to it.
  • Multiple detected: interactive terminals show a multi-select chooser; non-interactive shells error and point at --target <agent> / --target all. For a one-shot full setup, run npx --yes huaweicloud-devkit install --target all (Codex is skipped when its CLI is missing).

The commands below are global (they act on every agent):

bash
npx --yes huaweicloud-devkit version  # print CLI version and installed plugin versions per agentnpx --yes huaweicloud-devkit uninstall --target all --clean-global  # also remove KooCLI + OBS config

OpenCode

bash
npx --yes huaweicloud-devkit install --target opencode

Restart the session after installation.

bash
npx --yes huaweicloud-devkit doctor --target opencodenpx --yes huaweicloud-devkit status --target opencodenpx --yes huaweicloud-devkit update --target opencodenpx --yes huaweicloud-devkit uninstall --target opencoderm -rf ~/.npm/_npx/  # Linux/macOS; Windows: rmdir /s /q %LOCALAPPDATA%\npm-cache\_npx

Codex

bash
npx --yes huaweicloud-devkit install --target codex

Restart the Codex session after installation.

bash
codex plugin list  # verify huaweicloud-devkit@huaweicloud-devkit is installed and enablednpx --yes huaweicloud-devkit doctor --target codexnpx --yes huaweicloud-devkit status --target codexnpx --yes huaweicloud-devkit update --target codexnpx --yes huaweicloud-devkit uninstall --target codex

Then mention @huaweicloud-devkit in Codex or describe your Huawei Cloud task directly.

Requires Codex CLI — the codex command must be in PATH. If Codex is installed via WindowsApps (Microsoft Store), use --target codex-desktop instead. Run codex --version to verify CLI availability.

Codex Desktop

Use this target when the Codex CLI is unavailable or when Codex is installed through WindowsApps on Windows.

bash
npx --yes huaweicloud-devkit install --target codex-desktop

Restart the Codex Desktop session after installation.

bash
npx --yes huaweicloud-devkit doctor --target codex-desktopnpx --yes huaweicloud-devkit status --target codex-desktopnpx --yes huaweicloud-devkit update --target codex-desktopnpx --yes huaweicloud-devkit uninstall --target codex-desktop

Then mention @huaweicloud-devkit in a new Codex Desktop task or describe your Huawei Cloud task directly.

CodeArts Agent

bash
npx --yes huaweicloud-devkit install --target codearts

Restart the session after installation.

bash
npx --yes huaweicloud-devkit doctor --target codeartsnpx --yes huaweicloud-devkit status --target codeartsnpx --yes huaweicloud-devkit update --target codeartsnpx --yes huaweicloud-devkit uninstall --target codearts

Sandbox mode: CodeArts defaults to sandbox mode which blocks KooCLI. install-hcloud detects this and shows how to resolve it — install KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Chats → Agents Terminal Command Running Mode → Auto Running).

CodeArts Work

bash
npx --yes huaweicloud-devkit install --target codearts-work

Restart the session after installation.

bash
npx --yes huaweicloud-devkit doctor --target codearts-worknpx --yes huaweicloud-devkit status --target codearts-worknpx --yes huaweicloud-devkit update --target codearts-worknpx --yes huaweicloud-devkit uninstall --target codearts-work

CodeArts Work (CodeArts Space, appId: com.codearts.work) uses user-level config at %USERPROFILE%\.codeartswork\. No project-level .codeartswork directory is created.

WorkBuddy

bash
npx --yes huaweicloud-devkit install --target workbuddy

Restart the session after installation.

bash
npx --yes huaweicloud-devkit doctor --target workbuddynpx --yes huaweicloud-devkit status --target workbuddynpx --yes huaweicloud-devkit update --target workbuddynpx --yes huaweicloud-devkit uninstall --target workbuddy

DeepSeek Harness (DSH)

bash
npx --yes huaweicloud-devkit install --target dsh

Restart the DSH session after installation.

bash
npx --yes huaweicloud-devkit doctor --target dshnpx --yes huaweicloud-devkit status --target dshnpx --yes huaweicloud-devkit update --target dshnpx --yes huaweicloud-devkit uninstall --target dsh

DSH V1 reuses the existing MCP server through @deepseek-ai/dsh-mcp-client. If the installer reports that the client is not detected, run: npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client.

OfficeAce

bash
npx --yes huaweicloud-devkit install --target officeace

Restart OfficeAce after installation.

bash
npx --yes huaweicloud-devkit doctor --target officeacenpx --yes huaweicloud-devkit status --target officeacenpx --yes huaweicloud-devkit update --target officeacenpx --yes huaweicloud-devkit uninstall --target officeace

Hermes

bash
npx --yes huaweicloud-devkit install --target hermes

Restart the Hermes session after installation.

bash
npx --yes huaweicloud-devkit doctor --target hermesnpx --yes huaweicloud-devkit status --target hermesnpx --yes huaweicloud-devkit update --target hermesnpx --yes huaweicloud-devkit uninstall --target hermes

Uninstall notes: On Linux, run rm -rf ~/.npm/_npx/* && npm cache clean --force after uninstall to ensure a clean slate. On Windows, close all Hermes sessions first to release file locks, then after uninstall check %LOCALAPPDATA%\hermes\config.yaml for YAML corruption and manually remove %LOCALAPPDATA%\hermes\huaweicloud-plugins if any files remain. Safety hooks: The installer configures Hermes shell hooks (config.yaml → hooks.pre_tool_call) to intercept unsafe terminal commands such as credential file reads, environment variable dumps, and unapproved hcloud write operations. Hermes shows a consent prompt the first time; approve it or set hooks_auto_accept: true in config.yaml to auto-accept. MCP Python SDK: The installer automatically installs the mcp Python package required by Hermes for MCP tool discovery. If you see [FAIL] Hermes MCP Python SDK in doctor, run pip3 install mcp manually. Windows: See docs/hermes-windows.md for known issues and workarounds.

OpenClaw

bash
# Recommended (ClawHub)openclaw plugins install clawhub:huaweicloud-devkitopenclaw plugins uninstall huaweicloud-devkitopenclaw plugins update huaweicloud-devkit

Restart OpenClaw after installation. If prompted for security risk acknowledgment, add --acknowledge-clawhub-risk.

bash
# Or via npxnpx --yes huaweicloud-devkit install --target openclawnpx --yes huaweicloud-devkit status --target openclawnpx --yes huaweicloud-devkit update --target openclawnpx --yes huaweicloud-devkit uninstall --target openclawrm -rf ~/.npm/_npx/  # Linux/macOS; Windows: rmdir /s /q %LOCALAPPDATA%\npm-cache\_npx

AtomCode

bash
npx --yes huaweicloud-devkit install --target atomcode

Restart the AtomCode session after installation.

bash
npx --yes huaweicloud-devkit doctor --target atomcodenpx --yes huaweicloud-devkit status --target atomcodenpx --yes huaweicloud-devkit update --target atomcodenpx --yes huaweicloud-devkit uninstall --target atomcode

Other Agents

Any agent that supports MCP can use the standard config:

json
{  "mcpServers": {    "huaweicloud-devkit": {      "command": "npx",      "args": ["-y", "-p", "huaweicloud-devkit", "huaweicloud-devkit-mcp"]    }  }}

No installation required — npx handles everything.

For manual MCP registrations like this, do not put credentials in the config. HW_ACCESS_KEY/HW_SECRET_KEY are reserved for platform/CI-injected accounts (e.g. a DevSpace-managed default account) — configure your own account via npx huaweicloud-devkit auth init (the single entry point), and switch accounts at runtime with the huaweicloud_auth_init / huaweicloud_auth_switch MCP tools. See plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md for the full credential-resolution priority.

Connecting over Remote (HTTP)

If your agent supports type: "remote" (Streamable HTTP) instead of stdio, start the devkit remote MCP server locally first:

bash
npx --yes huaweicloud-devkit-mcp --transport remote

It listens on 127.0.0.1:9528 by default. Then connect with a remote config (opencode example):

jsonc
{  "mcp": {    "huaweicloud-devkit": {      "type": "remote",      "url": "http://localhost:9528",      "enabled": true,    },  },}

Use --port <port> if 9528 is taken and update url accordingly; add --host 0.0.0.0 for LAN access. The remote server has no built-in auth — do not expose it anonymously to the public internet.

Install KooCLI

bash
npx --yes huaweicloud-devkit install-hcloud

Configure Credentials

bash
npx --yes huaweicloud-devkit auth init

Synchronizes AK/SK to KooCLI, OBS, and sandbox APIs in one step — this is the single entry point. Never hard-code AK/SK into agent or shell config.

Account switching at runtime (within an agent session): use the MCP tools huaweicloud_auth_init (in-memory, highest priority) or huaweicloud_auth_switch (actions: temporary / persist / clear). In sandbox/DevSpace environments where a default account is injected via HW_ACCESS_KEY/HW_SECRET_KEY, a plain auth init will not override it — use huaweicloud_auth_switch action=persist to make the session account win.

Credential resolution priority (highest first):

#SourceSet by
1Runtime (session) credentialshuaweicloud_auth_init / huaweicloud_auth_switch action=temporary
2S1 global file with configuredBySession: truehuaweicloud_auth_switch action=persist
3Environment variables (HW_ACCESS_KEY/HW_SECRET_KEY)platform/DevSpace-injected default account
4CodeArts / CodeArts Work.codeartsdoer/mcp/mcp_settings.json / .codeartswork/mcp/mcp_settings.json
5S1 global file (no session flag)auth init
6KooCLI profile~/.hcloud/config.json (KooCLI commands only)

Security: never put your own AK/SK into the MCP config env field — they'd be stored in plaintext and could leak if the config file is committed to git. env is for platform/CI injection only.

Full details: plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md.

Install All Agents

bash
npx --yes huaweicloud-devkit install --target all

Update All Agents

bash
npx --yes huaweicloud-devkit@latest versionnpx --yes huaweicloud-devkit@latest update --target all

update is incremental — it refreshes installed files without touching your config. Always keep @latest so npm fetches the newest version instead of a locally cached older one.

Configure Proxy

bash
npx --yes huaweicloud-devkit proxy init    # configure proxy (interactive)npx --yes huaweicloud-devkit proxy show    # show effective proxy settingsnpx --yes huaweicloud-devkit proxy clear   # remove proxy configuration

Configures HTTP/HTTPS proxy for connections to Huawei Cloud services (e.g. enterprise intranet environments). Settings are saved to ~/.config/huaweicloud/proxy.json.

Environment variables HTTPS_PROXY, HTTP_PROXY, and NO_PROXY take precedence over the file configuration — use proxy show to inspect the effective settings.

Telemetry

HuaweiCloud DevKit collects anonymous telemetry to understand usage patterns and improve the plugin. Telemetry is enabled by default.

What We Collect

  • Installation ID — a SHA-256 hash derived from a machine fingerprint (hostname + MAC address + OS type + home directory). The raw values are never sent or stored.
  • User hash — a server-generated user identifier hash (produced by the Huawei Cloud backend check-user / generatorUserIDHash API). It is cached locally and sent with every event; it is not derived from any local PII.
  • Plugin version — the installed huaweicloud-devkit version.
  • Agent harness — which AI coding agent is running (e.g. opencode, codex, codearts).
  • Agent version — the agent's version string.
  • OS type and version — e.g. Linux, Darwin, Windows_NT.
  • Capability — how the event was triggered: mcp (MCP tool invocation) or cli (CLI command), derived from the event key.
  • Event type — what happened, e.g. plugin:install, plugin:first_use, dau:active_today (daily active), tool:<tool_name>, skill:retrieve, sandbox:connect.
  • Event value — a short sanitized string (max 255 chars, newlines/tabs stripped). For tool events this is typically 1; for skill retrieval it is the skill name.

What We Do Not Collect

  • No AK/SK, access keys, or any credentials
  • No user input, prompts, or code content
  • No IP addresses
  • No personally identifiable information (PII)
  • No file paths or project names

How Data Is Transmitted

Events are queued in memory and sent in batches (up to 100 events per batch) via HTTP POST to Huawei Cloud's telemetry endpoint every 60 seconds. Transmission respects your proxy configuration. Failed requests are retried up to 3 times, then dropped.

Disable Telemetry (Opt-Out)

Set the environment variable:

bash
export HUAWEICLOUD_DEVKIT_TELEMETRY=off

When set to off, no telemetry events are collected or transmitted.

Debug Mode

To log telemetry activity for troubleshooting:

bash
export HUAWEICLOUD_DEVKIT_DEBUG=true

Debug logs are written to the plugin's telemetry/telemetry-debug.log file.

What It Does

  • Guided cloud operations — agents get step-by-step guidance for 20+ commonly used Huawei Cloud services (ECS, OBS, VPC, RDS, GaussDB, FunctionGraph, APIG, CCE, and more)
  • Safety-first execution — all write operations require explicit user approval; credentials and secrets are automatically redacted from output
  • Pre-execution risk checks — public exposure, credential leaks, and destructive operations are caught before they run
  • Regional awareness — auto-discovers available regions and checks service availability before creating resources
  • Sandbox (DevStation) — temporary cloud runtime for web app deployment with instant public URL preview

Supported Services

ECS, OBS, VPC, IAM, RDS, GaussDB, FunctionGraph, APIG, CCE, SMN/DMS, ModelArts, Cloud Eye, CTS, DEW, Billing, CBR, WAF/AAD, DDS/DCS, Deployment, and Getting Started guides.

Above is the pre-wired guidance list; the remaining 200+ Huawei Cloud services are still reachable via KooCLI / API / SDK routing (see capability-discovery and cli-and-auth meta-skills).

Documentation

Contributors

[Image]

License

This project is licensed under the Apache-2.0 License. See LICENSE.

Source: README.md at commit 4ed0780

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.1.1LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts