feat(radar): add BGP RPKI ASPA endpoint tools (#301)

Add three new MCP tools for Cloudflare Radar BGP RPKI ASPA endpoints:
- get_bgp_rpki_aspa_snapshot: retrieve current/historical ASPA objects
- get_bgp_rpki_aspa_changes: track ASPA additions, removals, modifications
- get_bgp_rpki_aspa_timeseries: monitor ASPA adoption over time

Also adds corresponding Zod parameter schemas for ASPA-specific fields
(customer/provider ASN, RIR, change type, date, pagination, sorting).

Co-authored-by: André Jesus <74548852+andre-j3sus@users.noreply.github.com>

Author: digizeph

apps/radar/src/tools/radar.tools.ts

@@ -19,6 +19,14 @@ import {
 	AsnArrayParam,
 	AsnParam,
 	AsOrderByParam,
+	AspaChangeTypeParam,
+	AspaCustomerAsnParam,
+	AspaDateParam,
+	AspaPageParam,
+	AspaPerPageParam,
+	AspaProviderAsnParam,
+	AspaRirParam,
+	AspaSortByParam,
 	AttackNormalizationParam,
 	BgpHijackerAsnParam,
 	BgpInvalidOnlyParam,
@@ -3043,4 +3051,179 @@ export function registerRadarTools(agent: RadarMCP) {
 			}
 		}
 	)
+
+	// ============================================================
+	// BGP RPKI ASPA Tools
+	// ============================================================
+
+	agent.server.tool(
+		'get_bgp_rpki_aspa_snapshot',
+		'Retrieve a snapshot of current or historical RPKI ASPA (Autonomous System Provider Authorization) objects. ASPA objects define which ASNs are authorized upstream providers for a customer ASN, helping prevent route leaks and hijacks.',
+		{
+			customerAsn: AspaCustomerAsnParam,
+			providerAsn: AspaProviderAsnParam,
+			rir: AspaRirParam,
+			location: LocationParam.optional().describe('Filter by country (alpha-2 code).'),
+			date: AspaDateParam,
+			page: AspaPageParam,
+			per_page: AspaPerPageParam,
+			sortBy: AspaSortByParam,
+			sortOrder: BgpSortOrderParam,
+		},
+		async ({
+			customerAsn,
+			providerAsn,
+			rir,
+			location,
+			date,
+			page,
+			per_page,
+			sortBy,
+			sortOrder,
+		}) => {
+			try {
+				const props = getProps(agent)
+				const result = await fetchRadarApi(props.accessToken, '/bgp/rpki/aspa/snapshot', {
+					customerAsn,
+					providerAsn,
+					rir,
+					location,
+					date,
+					page,
+					per_page,
+					sortBy,
+					sortOrder,
+				})
+
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: JSON.stringify({ result }),
+						},
+					],
+				}
+			} catch (error) {
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: `Error getting BGP RPKI ASPA snapshot: ${error instanceof Error ? error.message : String(error)}`,
+						},
+					],
+				}
+			}
+		}
+	)
+
+	agent.server.tool(
+		'get_bgp_rpki_aspa_changes',
+		'Retrieve RPKI ASPA changes over time, including additions, removals, and modifications of ASPA objects.',
+		{
+			customerAsn: AspaCustomerAsnParam,
+			providerAsn: AspaProviderAsnParam,
+			changeType: AspaChangeTypeParam,
+			rir: AspaRirParam,
+			location: LocationParam.optional().describe('Filter by country (alpha-2 code).'),
+			dateRange: DateRangeParam.optional(),
+			dateStart: DateStartParam.optional(),
+			dateEnd: DateEndParam.optional(),
+			sortBy: AspaSortByParam,
+			sortOrder: BgpSortOrderParam,
+			page: AspaPageParam,
+			per_page: AspaPerPageParam,
+		},
+		async ({
+			customerAsn,
+			providerAsn,
+			changeType,
+			rir,
+			location,
+			dateRange,
+			dateStart,
+			dateEnd,
+			sortBy,
+			sortOrder,
+			page,
+			per_page,
+		}) => {
+			try {
+				const props = getProps(agent)
+				const result = await fetchRadarApi(props.accessToken, '/bgp/rpki/aspa/changes', {
+					customerAsn,
+					providerAsn,
+					changeType,
+					rir,
+					location,
+					dateRange,
+					dateStart,
+					dateEnd,
+					sortBy,
+					sortOrder,
+					page,
+					per_page,
+				})
+
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: JSON.stringify({ result }),
+						},
+					],
+				}
+			} catch (error) {
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: `Error getting BGP RPKI ASPA changes: ${error instanceof Error ? error.message : String(error)}`,
+						},
+					],
+				}
+			}
+		}
+	)
+
+	agent.server.tool(
+		'get_bgp_rpki_aspa_timeseries',
+		'Retrieve a timeseries of RPKI ASPA object counts over time.',
+		{
+			rir: AspaRirParam,
+			location: LocationParam.optional().describe('Filter by country (alpha-2 code).'),
+			dateRange: DateRangeParam.optional(),
+			dateStart: DateStartParam.optional(),
+			dateEnd: DateEndParam.optional(),
+		},
+		async ({ rir, location, dateRange, dateStart, dateEnd }) => {
+			try {
+				const props = getProps(agent)
+				const result = await fetchRadarApi(props.accessToken, '/bgp/rpki/aspa/timeseries', {
+					rir,
+					location,
+					dateRange,
+					dateStart,
+					dateEnd,
+				})
+
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: JSON.stringify({ result }),
+						},
+					],
+				}
+			} catch (error) {
+				return {
+					content: [
+						{
+							type: 'text' as const,
+							text: `Error getting BGP RPKI ASPA timeseries: ${error instanceof Error ? error.message : String(error)}`,
+						},
+					],
+				}
+			}
+		}
+	)
 }

apps/radar/src/types/radar.ts

@@ -1043,3 +1043,56 @@ export const TrafficAnomalyStatusParam = z
 	.enum(['VERIFIED', 'UNVERIFIED'])
 	.optional()
 	.describe('Filter by anomaly verification status.')
+
+// ============================================================
+// BGP RPKI ASPA Parameters
+// ============================================================
+
+export const AspaCustomerAsnParam = z
+	.number()
+	.int()
+	.positive()
+	.optional()
+	.describe('Filter by customer ASN (the ASN that authorizes upstream providers).')
+
+export const AspaProviderAsnParam = z
+	.number()
+	.int()
+	.positive()
+	.optional()
+	.describe('Filter by provider ASN (the authorized upstream provider ASN).')
+
+export const AspaRirParam = z
+	.enum(['AFRINIC', 'APNIC', 'ARIN', 'LACNIC', 'RIPE_NCC'])
+	.optional()
+	.describe('Filter by Regional Internet Registry (RIR).')
+
+export const AspaChangeTypeParam = z
+	.enum(['addition', 'removal', 'modification'])
+	.optional()
+	.describe('Filter by type of ASPA change.')
+
+export const AspaSortByParam = z
+	.enum(['customerAsn', 'providerAsn'])
+	.optional()
+	.describe('Sort ASPA results by specified field.')
+
+export const AspaDateParam = z
+	.string()
+	.optional()
+	.describe('Date for historical ASPA snapshot (ISO 8601 format, e.g. 2024-01-15).')
+
+export const AspaPageParam = z
+	.number()
+	.int()
+	.positive()
+	.optional()
+	.describe('Page number for paginated ASPA results.')
+
+export const AspaPerPageParam = z
+	.number()
+	.int()
+	.min(1)
+	.max(100)
+	.optional()
+	.describe('Number of results per page for ASPA queries (1-100).')