MCP API 串接

Model Context Protocol（MCP）入門

James Chapman

AI Curriculum Manager, DataCamp

API 改進

逾時與錯誤處理

import requests

@mcp.tool()
def convert_timezone(date_time: str, from_timezone: str, to_timezone: str) -> str:
    payload = {"dateTime": date_time, "fromTimezone": from_timezone, "toTimezone": to_timezone}


    try:
        r = requests.post("https://api.opentimezone.com/convert", json=payload, timeout=10)

        r.raise_for_status()

        data = r.json()
        converted_time = data.get("dateTime", "N/A")
        return f"Time in {to_timezone}: {converted_time}"

    except requests.exceptions.RequestException as e:
        return f"Error converting timezone: {e}"

API 驗證：該做與不要做

API keys → 一律在 server-side 存取

API 驗證：該做與不要做

API keys → 一律在 server-side 存取
- 本機：環境變數、.env

API 驗證：該做與不要做

API keys → 一律在 server-side 存取
- 本機：環境變數、.env
- 遠端：環境變數、受管密鑰

API 驗證：該做與不要做

API keys → 一律在 server-side 存取
- 本機：環境變數、.env
- 遠端：環境變數、受管密鑰

用戶端絕不傳送、接收或存取憑證

API 驗證：該做與不要做

API keys → 一律在 server-side 存取
- 本機：環境變數、.env
- 遠端：環境變數、受管密鑰

用戶端絕不傳送、接收或存取憑證

❌ 硬編碼、放入 URL、寫入日誌

❌ 放在工具參數或工具結果中

import os
import requests

@mcp.tool()
def convert_timezone(date_time: str, from_timezone: str, to_timezone: str) -> str:

    headers = {"Content-Type": "application/json"}

    api_key = os.environ.get("TIMEZONE_API_KEY")
    if api_key:
        headers["Authorization"] = f"Bearer {api_key}"

    payload = {"dateTime": date_time, "fromTimezone": from_timezone, "toTimezone": to_timezone}
    try:
        r = requests.post("https://api.opentimezone.com/convert", json=payload, headers=headers, timeout=10)
        r.raise_for_status()
        data = r.json()
        converted_time = data.get("dateTime", "N/A")
        return f"Time in {to_timezone}: {converted_time}"
    except requests.exceptions.RequestException as e:
        return f"Error converting timezone: {e}"

一起來練習吧！

Model Context Protocol（MCP）入門