# Build an MCP server for your internal data

Give agents read-only access to the records they need, and nothing else.

- Category: Operations
- Runs on: Claude Code
- Level: Advanced
- Setup time: about 120 minutes
- Source: https://crimsonbot.ronskaggs.workers.dev/playbooks/internal-data-mcp-server

## You will need

- A Cloudflare account
- A list of the records agents should read

## You will end up with

- An MCP server your agents can call, with read-only scopes

## Steps

### 1. List what agents may read

Write down each record type and field agents should see. Leave out anything sensitive.

### 2. Build the server with the Agents SDK

Create one read-only tool per record type, each with a narrow input schema.

### 3. Review every tool before connecting it (human checkpoint)

Check each tool returns only the fields on your list, then connect your agents.

## Tools used

- [Cloudflare Agents SDK](https://developers.cloudflare.com/agents/): Build stateful agents and MCP servers on Workers.