cloudsword

Overview

CloudSword (云鉴) is a comprehensive open-source security tool designed for cloud tenants to discover and test risks in cloud environments. It supports multiple Chinese cloud providers including Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud. The tool offers modules for scanning cloud assets, storage buckets, compute instances, identity management, and more. Since version 0.0.2, it has supported MCP protocol through both SSE and STDIO methods, making it accessible to MCP-enabled clients.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• list_cloud_assets

  List cloud assets from multiple cloud providers

  Try:List all cloud assets in my environmentTry:Show me my cloud resources across providers
• oss_list_buckets

  List Alibaba Cloud OSS storage buckets

  Try:List my OSS buckets in Alibaba CloudTry:Show all storage buckets in my Alibaba Cloud account
• oss_search_objects

  Search Alibaba Cloud OSS objects

  Try:Search for objects in my OSS bucketsTry:Find files in my Alibaba Cloud storage
• ecs_list_instances

  List Alibaba Cloud ECS instances

  Try:Show my ECS instances in Alibaba CloudTry:List all compute instances in my Alibaba Cloud account
• ram_list_users

  List Alibaba Cloud RAM users

  Try:List all RAM users in my Alibaba Cloud accountTry:Show me the users in my Alibaba Cloud environment
• ram_list_roles

  List Alibaba Cloud RAM roles

  Try:Show RAM roles in my Alibaba Cloud accountTry:List all roles in my Alibaba Cloud IAM
• ram_create_user

  Create an Alibaba Cloud RAM user

  Try:Create a new RAM user in Alibaba CloudTry:Add a user to my Alibaba Cloud account
• ram_attach_policy_to_user

  Attach a policy to an Alibaba Cloud RAM user

  Try:Grant policy to RAM user in Alibaba CloudTry:Attach permissions to a user in my Alibaba Cloud account
• cos_list_buckets

  List Tencent Cloud COS storage buckets

  Try:List my COS buckets in Tencent CloudTry:Show all storage buckets in my Tencent Cloud account
• cvm_list_instances

  List Tencent Cloud CVM instances

  Try:Show my CVM instances in Tencent CloudTry:List all compute instances in my Tencent Cloud account
• cam_list_users

  List Tencent Cloud CAM users

  Try:List all CAM users in my Tencent Cloud accountTry:Show me the users in my Tencent Cloud environment
• create_honey_token

  Create a honey token in Tencent Cloud

  Try:Create a honey token in Tencent CloudTry:Generate a fake credential for monitoring

Comparable tools

Installation

brew tap wgpsec/tap
brew install wgpsec/tap/cloudsword

./cloudsword sse http://localhost:8080

{
  "mcpServers": {
    "cloudsword": {
      "command": "http",
      "args": ["localhost", 8080]
    }
  }
}

FAQ

What MCP modes does CloudSword support?

CloudSword supports both SSE (Server-Sent Events) and STDIO modes for MCP protocol communication since v0.0.2.

Which cloud providers are supported?

Currently supports Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud with modules for various services like storage, compute, and identity management.

Compare cloudsword with