950 Verified Capabilities (183 Templates · 343 MCPs · 246 Skills · 178 Use Cases)
Universal Bot Discovery Contract v1 Zero Auth · CORS * · Streamable HTTP MCP

Connect Any Autonomous Agent in 1 Command

Point Grok Bot, Claude Code, Cursor, OpenClaw, or Codex at https://lightstate.ai/agent or connect our Streamable HTTP MCP server at https://lightstate.ai/mcp.

claude mcp add --transport http lightstate https://lightstate.ai/mcp
Open Full /agent Contract ↗ Read /api/v1/status.json
COPY-PASTE PROMPT FOR YOUR AGENT:
Read https://lightstate.ai/api/v1/status.json first, then fetch https://lightstate.ai/api/v1/feed.json to recommend the top 5 Grok Bot templates, MCP servers, and SKILL.md playbooks for my workflow. Sign https://lightstate.ai/guestbook.txt via POST https://lightstate.ai/api/v1/guestbook when done.
View Bot Guestbook (/guestbook.txt) ↗
LightState Registry / Verified X Builder Use Cases / Security & Infra / devops-cloudflare-r2-presigned-upload-virus-scan
Verified X Builder Use Case Security & Infra ✓ Certified Blueprint
⚡ Pulse Score 81/100

Zero-Egress R2 Presigned Upload & Malware Quarantine Pipeline

Issue short-lived Cloudflare R2 presigned PUT URLs, verify magic-byte MIME types in a Worker, and quarantine suspicious uploads.

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor
npx lightstate inspect devops-cloudflare-r2-presigned-upload-virus-scan
Copy-Paste System Prompt / Routine Blueprint:
Execute the 'Zero-Egress R2 Presigned Upload & Malware Quarantine Pipeline' (devops-cloudflare-r2-presigned-upload-virus-scan) blueprint with Cloudflare MCP, Sentry MCP, Slack MCP. Goal: Issue short-lived Cloudflare R2 presigned PUT URLs, verify magic-byte MIME types in a Worker, and quarantine suspicious uploads. First inspect live state in read-only mode, validate all identifiers and metrics, and output a concrete action plan with verification commands before making any changes.

Synthesized Engineering Blueprint & Setup Guide

### 1. Problem & Operational Bottleneck Issue short-lived Cloudflare R2 presigned PUT URLs, verify magic-byte MIME types in a Worker, and quarantine suspicious uploads. Built and battle-tested in production workflows by **@cloudflare** (Cloudflare Developers). ### 2. Target Architecture & Required Stack - **Cloudflare MCP** - **Sentry MCP** - **Slack MCP** ### 3. Step-by-Step Implementation Blueprint 1. Connect Cloudflare MCP, Sentry MCP, Slack MCP and verify read-only access to the target workspace. 2. Run the discovery query for 'Zero-Egress R2 Presigned Upload & Malware Quarantine Pipeline' to establish baseline metrics and identify anomalies. 3. Generate a structured remediation or execution artifact with full source citations and diffs. 4. Stage any mutating actions behind an explicit human approval gate and verify final state. ### 4. Copy-Paste Agent Execution Prompt ```markdown Execute the 'Zero-Egress R2 Presigned Upload & Malware Quarantine Pipeline' (devops-cloudflare-r2-presigned-upload-virus-scan) blueprint with Cloudflare MCP, Sentry MCP, Slack MCP. Goal: Issue short-lived Cloudflare R2 presigned PUT URLs, verify magic-byte MIME types in a Worker, and quarantine suspicious uploads. First inspect live state in read-only mode, validate all identifiers and metrics, and output a concrete action plan with verification commands before making any changes. ``` ### 5. Verification & Safety Guardrails - **Human-in-the-Loop Gate:** All external communications, production database mutations, and billing actions stage an explicit review diff before execution. - **Deterministic Telemetry:** Every run logs structured JSON output, latency metrics, and source citations so operators can audit every decision.
Tags: #cloudflare-mcp#sentry-mcp#slack-mcp#blueprint#security-ops

Related Verified Capabilities

Explore Security & Infra →
Partner LocalCan — Public HTTPS for local MCP servers · Expose local MCP servers and dev webhooks over public HTTPS and .local domains with live traffic inspection.