Dapr MCP Server

io.github.dapr由 GitHub 帳號 dapr 發布v0.0.3更新於 Nov 4, 2026

Dapr state, pub/sub, bindings, secrets, locks, crypto, conversation, actors, invocation as MCP tools

已驗證STDIO僅桌面雲端與基礎設施開發者工具安全與監控

概覽

AI 產生的概覽

以 Go 撰寫的 MCP 伺服器，連接 Dapr sidecar，將狀態、發布訂閱、繫結、密鑰、鎖定、加密、actor 與服務呼叫等能力以工具形式提供給 AI 助理。

可以做什麼
  • 檢視 sidecar 的元件，並呼叫服務或 actor 方法
  • 讀取、儲存、批次讀取、刪除狀態項目，以及原子批次交易
  • 發布發布訂閱事件，可選擇附帶標頭與 TTL 等中繼資料
  • 從已設定的密鑰存放區取得單一或批次密鑰
  • 加密與解密資料，取得與釋放分散式鎖定
  • 呼叫輸出繫結存取外部系統，並將請求轉交給下游 LLM
適用情境
適合助理與啟用 Dapr 的應用程式協同工作，需要讀寫其狀態、發布事件、呼叫其他服務或 actor，或使用 Dapr 管理的密鑰、鎖定與加密時。只有部署中實際存在的建構區塊才會註冊對應工具。
執行需求
以本機程序與 Dapr sidecar 一起執行，透過 dapr run 啟動；可用容器映像、發行版二進位檔，或以 Go 1.26.6+ 從原始碼建置。需要以 DAPR_GRPC_PORT 指定 sidecar 的 gRPC 連接埠，若 sidecar 要求則還需 DAPR_API_TOKEN。選用參數可切換為 streamable HTTP 與健康檢查。
安裝前請注意
多個工具會變更或刪除資料：save_state、delete_state、execute_transaction、publish_event、invoke_output_binding、invoke_service 與 invoke_actor_method 都會作用於實際系統。get_bulk_secrets 被標示為高風險，get_secret 會將密鑰值暴露給助理。DAPR_API_TOKEN 屬於憑證。HTTP 模式可對外開放，並可用 OIDC、SPIFFE 或 Dapr Sentry 控管存取。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Dapr MCP Server，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

dapr-mcp-server

A Model Context Protocol (MCP) server that exposes Dapr's building blocks as tools for AI agents.

[OpenSSF Scorecard]

What it is

dapr-mcp-server is a Go MCP server that fronts a Dapr sidecar and hands AI agents a curated set of tools over every Dapr building block: state, pub/sub, secrets, service invocation, actors, bindings, distributed locks, cryptography, and conversation components. Tools register dynamically from the live component set — if your deployment has no pub/sub broker, the pub/sub tools aren't exposed.

Two transports are supported: stdio for local IDE integrations (Claude Desktop, Cursor, VS Code, Claude Code) and streamable HTTP for remote or shared deployments. Every tool call is annotated with OpenTelemetry spans, metrics, and optional log export; requests can be gated by OIDC, SPIFFE, Dapr Sentry, or a hybrid of the three.

Full documentation lives at docs.dapr.io / developing-ai / mcp.

Quick start

Run the binary next to a Dapr sidecar with dapr run (install it from Install):

bash
dapr init
# stdio, for local MCP clients that launch the server themselvesdapr run --app-id dapr-mcp-server --resources-path resources -- dapr-mcp-server
# streamable HTTP, for remote clientsdapr run --app-id dapr-mcp-server --resources-path resources -- dapr-mcp-server --http :8080

With --http, connect any MCP client to http://localhost:8080/. The container image is meant for Kubernetes, where the Dapr sidecar injector adds the sidecar through the dapr.io/enabled: "true" and dapr.io/app-id pod annotations. For the complete walk-through (components, auth, OTEL, verification), see the getting started guide.

Install

MethodCommand
Containerdocker pull ghcr.io/dapr/dapr-mcp-server:latest
BinaryDownload from Releases and place on PATH
From source (Go 1.26.6+)go install github.com/dapr/dapr-mcp-server/cmd/dapr-mcp-server@latest

The server is listed in the official MCP Registry as io.github.dapr/dapr-mcp-server, so MCP clients that browse the registry can install it as a container.

Configuration

The configuration guide has the full environment variable reference.

FlagDefaultPurpose
--http <addr>unset (stdio)Serve streamable HTTP on this address instead of stdin/stdout. Health probes are served on /livez, /readyz and /startupz.
--health-checkfalseProbe /livez of a running server and exit 0 if it answers 200, 1 otherwise. Used by the container HEALTHCHECK.
--health-check-addr <host:port>from --http, else localhost:8080Address --health-check probes. A wildcard host such as 0.0.0.0 is probed as localhost.
--versionfalsePrint the version and exit.

Logs are written as JSON to stderr, so they never mix with the stdio transport on stdout. /readyz returns 503 while the Dapr sidecar is unreachable.

Settings specific to the HTTP transport:

Environment variableDefaultPurpose
DAPR_MCP_CORS_ORIGINunset (no CORS headers)Origin allowed to call the server from a browser, for example https://app.example.com. Set it only when a browser-based MCP client on another origin needs access.

Documentation

PagePurpose
OverviewWhat the server is, architecture, capabilities, when to use it
Getting startedInstall, configure components, run, verify
Tool referenceSchemas, inputs, outputs, and safety flags for every tool
ConfigurationEnvironment variables, flags, and transport settings
AuthenticationOIDC, SPIFFE, Dapr Sentry, hybrid mode
ObservabilityTraces, metrics, and logs

AI coding agents contributing to this repo: see AGENTS.md. For human contributors: see CONTRIBUTING.md.

Tools at a glance

All tools, with links to their entries in the tool reference. Core tools are always registered; conditional tools register only when a matching Dapr component exists. The server follows components that Dapr hot-reloads: each time a client lists tools or calls get_components, it checks the sidecar, adds a building block's tools when its first component appears and removes them when its last one goes, and tells connected clients the tool list changed.

CategoryToolRegistrationNotes
metadataget_componentsCoreAlways call first
invokeinvoke_serviceCoreService-to-service HTTP invocation
actorsinvoke_actor_methodCoreVirtual-actor method call
statesave_statestate.*Idempotent save
stateget_statestate.*Read-only
stateget_bulk_statestate.*Read-only; several keys
statedelete_statestate.*Destructive, idempotent
stateexecute_transactionstate.*Atomic batch
pubsubpublish_eventpubsub.*Not idempotent
pubsubpublish_event_with_metadatapubsub.*Adds headers/TTL
bindingsinvoke_output_bindingbindings.*External-system I/O
secretsget_secretsecretstores.*Single secret
secretsget_bulk_secretssecretstores.*High-risk; bulk fetch
conversationconverse_with_llmconversation.*Delegate to a downstream LLM
cryptoencrypt_datacrypto.*RSA encrypt
cryptodecrypt_datacrypto.*RSA decrypt
lockacquire_locklock.*Distributed mutex
lockrelease_locklock.*Pair with acquire_lock

Development

bash
go build -o dapr-mcp-server ./cmd/dapr-mcp-servergo test -race ./...golangci-lint run ./...

See AGENTS.md for the full contributor / AI-agent playbook (build commands, tool-addition pattern, testing strategy, DCO flow).

Contributing

Contributions welcome — open issues via the issue templates, sign your commits per the DCO, and follow the pull request template. See CONTRIBUTING.md for the full workflow.

Security issues: do not open a public issue — follow the Dapr security disclosure process instead.

License

Apache 2.0 — see LICENSE.

來源：README.md，提交 93f9446

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.0.3最新Oct 14, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分