TencentCloudBase/CloudBase-AI-Toolkit

CloudBase-AI-Toolkit

Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & MCP.

待分类agent-skillsaiaicoding

CloudBase AI Toolkit

AI writes the code. CloudBase runs the backend.

The CloudBase integration layer for AI coding tools: Plugin installs the stack, Skills steer how code is written, MCP operates databases, functions, storage, and deploys from chat.

English · 简体中文 · [Docs][docs] · [Changelog][changelog] · [Issues][github-issues-link]

[![][npm-version-shield]][npm-link] [![][npm-downloads-shield]][npm-link] [![][github-stars-shield]][github-stars-link] [![][github-forks-shield]][github-forks-link] [![][github-issues-shield]][github-issues-link] ![][github-license-shield] ![][github-contributors-shield] [![][cnb-shield]][cnb-link] [![][deepwiki-shield]][deepwiki-link]

Recent updates

v2.36.x (2026-10)

  • MCP Apps: three panels arrive — get-started, environment usage and deployment result — shipped experimental and off by default; set CLOUDBASE_MCP_UI=on to try them
  • Safety: deletes, destructive SQL and the matching callCloudApi delete actions pause for a confirmation that names the target; a credential-shaped argument gets one delta check (length plus a sha256 fingerprint, never the value itself)
  • Environment: the usage panel gains a metrics view (QPS, invocations, errors, timeouts, MySQL and CloudRun load) with human names, and MySQL provisioning is retired from the tool surface
  • Onboarding: every initialize response carries instructions with the first read-only call to make; the remote setup docs now lead with OAuth

v2.35.x (2026-10)

  • Hosted / Auth: each hosted MCP request runs on its own transport with client metadata cached per credential, and a project-level credential now takes precedence over the account login state
  • Tools / Skills: MySQL provisioning is retired from the tool surface; every skill package ships a LICENSE.md next to SKILL.md; a new MCP reference skill documents the remote endpoints, the plugin flags and the tool schemas
  • Feedback: prepareFeedback returns the repository's new-issue page instead of an auto-filled error report, and a hosted server now enables the same default plugin set as a local one
  • Onboarding / Docs: every initialize response now carries server instructions — the call to make first, the order a first run needs, and prompts that can be copied verbatim; the remote setup docs now lead with OAuth, so the URL alone is the configuration and a key pair is the CI path

v2.34.x (2026-09)

  • i18n / IDE: full tool-copy localization with an instance-level lang, plus auth site / region params so international-site login and region routing resolve correctly
  • Cloud API: callCloudApi service allowlist widened to 57 with built-in version mapping (multi-version services such as tke / mongodb / vod require an explicit version)
  • Deploy / Env: new appBuild tool with hosting build neutralization; queryEnv reports the region actually applied and domains honors a passed envId
  • Skills / Docs: skill fallback reads now point at the official distribution repo with a references address list; SDK-first database decision gate for cloudrun; site doc links moved to the current Markdown addresses; post-deployment share offered after delivery in the expert packs and the deploy skills (opt-in, redacted, at most once)
  • Deploy / Apps: the cloud upload channel now completes end to end (deployApp accepts the timestamp getUploadUrl returns, getBuildLog accepts the build ID a deploy returns), and gateway route creation verifies the upstream exists before writing
  • Skills / Context: new PostgreSQL access-pattern best-practices skill (batching, indexes, RLS role gating, launch capacity); searchKnowledgeBase's inline skill / OpenAPI catalogs now load on demand, cutting the 43-tool surface by 9.1% on every tools/list
  • Runtime / Hosting: CloudRun Function mode must not bind PORT (the function framework does) and gets a credential decision gate naming CLOUDBASE_APIKEY; hosting paths and prefixes are normalized so a leading slash can no longer read as an empty directory
  • Connectors: the international-site WorkBuddy connector (cloudbase-intl) is built from the same config/source/** corpus as the domestic one — remote streamableHttp with standard MCP OAuth instead of local stdio, with China-site hosts rewritten to their international equivalents

[Releases][changelog] · [Star][github-stars-link] · Watch → Releases

What it is

AI IDEs (Cursor, Claude Code, Codex, CodeBuddy, and others) are strong at generating code. What usually blocks you is the backend: schemas, permissions, functions, storage, environments, and release.

CloudBase is Tencent Cloud’s AI-native all-in-one backend (database, storage, auth, cloud functions, Cloud Run, and more). This repo is the Toolkit that connects that backend to AI tools:

Piece · Role Plugin · Installs MCP Server, Agent Skills, and Hooks together—less per-IDE wiring Agent Skills · Scenario skills (Web / Mini Program / database / auth / functions, etc.) toward workable CloudBase practice MCP · Login, query and change data, manage functions and hosting, read logs—from the conversation

This repository ships the npm package @cloudbase/cloudbase-mcp, Skills, and AI plugins.

You still need your own CloudBase environment, and you should confirm sensitive actions the AI proposes. The Toolkit provides capability and path—not judgment.

Related repositories

Publishing and sync repos live under TencentCloudBase. Directly related to this Toolkit:

Repository · Contents · Typical entry CloudBase-AI-Toolkit (this repo) · MCP Server source; marketplace source for Claude Code / Codex · npx @cloudbase/cloudbase-mcp@latest dsh-plugin · DeepSeek Harness plugin (@cloudbase/dsh-plugin): MCP bridge + DB/Storage/Auth panel · dsh plugin add @cloudbase/dsh-plugin cloudbase-plugin · Open Plugin Spec publish repo (CI-synced): MCP + Skills + Hooks · npx plugins add TencentCloudBase/cloudbase-plugin · CNB fallback: npx plugins add https://cnb.cool/tencent/cloud/cloudbase/cloudbase-plugin.git cloudbase-sites-plugin · Sites plugin: Vite Web create & deploy · npx plugins add TencentCloudBase/cloudbase-sites-plugin · CNB: https://cnb.cool/tencent/cloud/cloudbase/cloudbase-sites-plugin.git cloudbase-skills · Agent Skills collection · npx skills add TencentCloudBase/cloudbase-skills · CNB: https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills.git skills · Per-skill install catalog (also on skills.sh) · npx skills add tencentcloudbase/skills --skill awesome-cloudbase-examples · CloudBase examples and case studies · Browse / clone examples OpenVibeCoding · Vibecoding template on CloudBase · Use as a project starter

Prefer Plugin for the full stack; Skills alone when you only need knowledge constraints. For marketplace IDEs use this repo—do not also run npx plugins add on the same tool.

Quick start

Fastest way to get started

Copy this AI prompt into your AI IDE. The agent reads skill.md and completes the setup:

Set up CloudBase for me:
1. Open https://docs.cloudbase.net/skill.md and complete the setup following its instructions.
2. Tell me when you're done, and suggest the most relevant next step.

Pick one default path for your tool (Plugin / CLI / MCP)

Your tool · Suggested path Claude Code / Codex (native marketplace) · Add this repo as marketplace, then install the cloudbase plugin (plugin docs) Open Plugin Spec tools · npx plugins add TencentCloudBase/cloudbase-plugin Prefer one CLI for many tools · CloudBase AI CLI: npm i -g @cloudbase/cli && tcb ai CodeBuddy / WorkBuddy / Doubao / MiniMax Code / DeepSeek Harness / ZCode / Kimi (built-in) · Use the IDE's built-in CloudBase plugin or connector; for CodeBuddy you can also install via plugin marketplace Other MCP-capable IDEs · MCP config only (below)

Plugin

npx plugins add TencentCloudBase/cloudbase-plugin

Details and IDE differences: AI plugin docs.

MCP only

{
  "mcpServers": {
    "cloudbase": {
      "command": "npx",
      "args": ["@cloudbase/cloudbase-mcp@latest"]
    }
  }
}

Remote HTTP, self-hosted Cloud Mode, and plugin scoping: Install & connect.

First prompts

Login to CloudBase
Use CloudBase Skills to build a todo app with login, database and permissions, then deploy

Skills shape structure and practice; MCP handles environment and resources. You should be able to verify data and APIs in your own environment—not only get local source files.

Supported AI IDEs

Tool · Platform · Guide CloudBase AI CLI · CLI · Guide OpenClaw · CLI · Guide WorkBuddy · Standalone IDE · Guide Doubao · Desktop & web (plugin marketplace) · Guide MiniMax Code · Desktop app & terminal CLI (plugin marketplace) · Guide DeepSeek Harness · Desktop app (plugin) · Guide ZCode · Standalone IDE (≥ 3.4.1 built-in) · Guide Kimi Code · CLI (plugin marketplace) · Guide Kimi Work · Desktop app (plugin panel) · Guide Codex App · App · Guide Cursor · Standalone IDE · Guide WindSurf · IDE / plugins · Guide CodeBuddy · Standalone IDE (built-in) · Guide CLINE · VS Code plugin · Guide GitHub Copilot · VS Code plugin · Guide Trae · Standalone IDE · Guide Tongyi Lingma · IDE / plugins · Guide RooCode · VS Code plugin · Guide Baidu Comate · Plugins · Guide Augment Code · Plugins · Guide Claude Code · CLI · Guide Gemini CLI · CLI · Guide Codex CLI · CLI · Guide OpenCode · CLI · Guide Qwen Code · CLI · Guide

Full setup: IDE guides.

Capabilities

After setup, the AI can do typical backend work in your environment (confirm critical steps):

  • Database: PostgreSQL and document DB, data models, CRUD, permissions and security rules
  • Compute: author, deploy, invoke, and debug cloud functions / Cloud Run
  • Auth & storage: login methods, object storage, permission linkage with data
  • Release & ops: static hosting / Mini Program publish; inspect logs and redeploy

Fits Web, WeChat Mini Programs, and backend services. Platform overview: CloudBase docs.

Evaluation

Under controlled conditions, the same Todo application brief and frontend scaffold were used to compare two backend paths: a traditional cloud VM (self-managed runtime, process, and network exposure) and CloudBase (managed database, anonymous auth, and related backend services). An AI agent performed end-to-end development and verification. Given the model and task setup, the CloudBase path was more favorable in completion latency, token usage, and tool-call count. These outcomes are conditioned on the model, agent framework, and task definition, and should not be generalized beyond that scope.

Methods, data, and limits: Same-task evaluation: cloud VM vs CloudBase

Install & connect

Prerequisites

  • Node.js v18.15.0+
  • A CloudBase environment
  • An AI tool that supports Plugin / Skills / MCP

Setup options

  1. Plugin (when the tool supports it)

npx plugins add TencentCloudBase/cloudbase-plugin

  1. CloudBase AI CLI

npm i -g @cloudbase/cli && tcb ai

  1. Manual MCP (write the IDE config file)

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "cloudbase": {
      "command": "npx",
      "args": ["@cloudbase/cloudbase-mcp@latest"]
    }
  }
}

WindSurf (.windsurf/settings.json)

{
  "mcpServers": {
    "cloudbase": {
      "command": "npx",
      "args": ["@cloudbase/cloudbase-mcp@latest"]
    }
  }
}

CodeBuddy

CloudBase is built in (MCP / Skills); manual config is usually unnecessary.

You can also install via the plugin marketplace: see the CodeBuddy setup guide.

Others: IDE setup guide.

MCP connection modes

Remote (recommended): your IDE connects over HTTP to Tencent Cloud MCP. No local Node, and interactive clients finish authorization in the browser.

Site · MCP endpoint China (domestic) · https://tcb-api.cloud.tencent.com/mcp/v1 International · https://tcb-api.tencentcloud.com/mcp/v1

Pick the endpoint matching the site your environment lives in—the two sites use separate accounts, consoles, and credentials.

OAuth (interactive, recommended): the URL is the whole configuration. Your IDE opens the browser for login and consent, and you pick the environment there—no keys in the config file, and nothing to rotate.

{
  "mcpServers": {
    "cloudbase": {
      "type": "http",
      "url": "https://tcb-api.cloud.tencent.com/mcp/v1"
    }
  }
}

Static credentials (for a client without OAuth, and for CI/CD): append env_id and a key pair created on the same site as the endpoint.

{
  "mcpServers": {
    "cloudbase": {
      "type": "http",
      "url": "https://tcb-api.cloud.tencent.com/mcp/v1?env_id=<env_id>",
      "headers": {
        "X-TencentCloud-SecretId": "<Tencent Cloud Secret ID>",
        "X-TencentCloud-SecretKey": "<Tencent Cloud Secret Key>"
      }
    }
  }
}
A static key pair stays valid until it is rotated or deleted; an OAuth session ends when you log out. Use the static form only where the browser flow is impossible—and keep it out of a repository.

Local: runs npx @cloudbase/cloudbase-mcp@latest on your machine—full features, including local filesystem upload and template download.

Remote trade-off: local-filesystem features (upload, template download) are unavailable, and the international site does not yet expose NoSQL tools.

Remote URLs also accept site (domestic / intl, only needed for a China-site environment in ap-singapore, where the region is ambiguous), plus enable_plugins / disable_plugins to trim tools. Canonical names live in mcp/src/server.ts.

Remote MCP E2E (official SDK client): npm run test:hosted-mcp:e2e — see tests/hosted-mcp-e2e/README.md for apikey/OAuth modes, TLS-insecure staging, and env vars. Missing credentials skip (exit 0).

Self-hosted Cloud Mode: set CLOUDBASE_MCP_CLOUD_MODE=true (or MCP_CLOUD_MODE=true) so local file and process tools are disabled for remote callers.