cloudsword

概述

云鉴是一款面向云租户的开源安全工具，用于发现和测试公有云环境中的安全风险。它支持阿里云、腾讯云、华为云、百度云和七牛云等多个中国云服务商。该工具提供了资产扫描、存储桶检查、计算实例管理、身份认证等多个功能模块。从v0.0.2版本开始，云鉴支持MCP协议，可通过SSE和STDIO两种方式与MCP客户端集成。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• list_cloud_assets

  List cloud assets from multiple cloud providers

  试试:List all cloud assets in my environment试试:Show me my cloud resources across providers
• oss_list_buckets

  List Alibaba Cloud OSS storage buckets

  试试:List my OSS buckets in Alibaba Cloud试试:Show all storage buckets in my Alibaba Cloud account
• oss_search_objects

  Search Alibaba Cloud OSS objects

  试试:Search for objects in my OSS buckets试试:Find files in my Alibaba Cloud storage
• ecs_list_instances

  List Alibaba Cloud ECS instances

  试试:Show my ECS instances in Alibaba Cloud试试:List all compute instances in my Alibaba Cloud account
• ram_list_users

  List Alibaba Cloud RAM users

  试试:List all RAM users in my Alibaba Cloud account试试:Show me the users in my Alibaba Cloud environment
• ram_list_roles

  List Alibaba Cloud RAM roles

  试试:Show RAM roles in my Alibaba Cloud account试试:List all roles in my Alibaba Cloud IAM
• ram_create_user

  Create an Alibaba Cloud RAM user

  试试:Create a new RAM user in Alibaba Cloud试试:Add a user to my Alibaba Cloud account
• ram_attach_policy_to_user

  Attach a policy to an Alibaba Cloud RAM user

  试试:Grant policy to RAM user in Alibaba Cloud试试:Attach permissions to a user in my Alibaba Cloud account
• cos_list_buckets

  List Tencent Cloud COS storage buckets

  试试:List my COS buckets in Tencent Cloud试试:Show all storage buckets in my Tencent Cloud account
• cvm_list_instances

  List Tencent Cloud CVM instances

  试试:Show my CVM instances in Tencent Cloud试试:List all compute instances in my Tencent Cloud account
• cam_list_users

  List Tencent Cloud CAM users

  试试:List all CAM users in my Tencent Cloud account试试:Show me the users in my Tencent Cloud environment
• create_honey_token

  Create a honey token in Tencent Cloud

  试试:Create a honey token in Tencent Cloud试试:Generate a fake credential for monitoring

可对比工具

安装

brew tap wgpsec/tap
brew install wgpsec/tap/cloudsword

./cloudsword sse http://localhost:8080

{
  "mcpServers": {
    "cloudsword": {
      "command": "http",
      "args": ["localhost", 8080]
    }
  }
}

FAQ

CloudSword支持哪些MCP模式？

从v0.0.2版本开始，CloudSword支持SSE(服务器发送事件)和STDIO两种MCP协议通信模式。

支持哪些云服务商？

目前支持阿里云、腾讯云、华为云、百度云和七牛云，提供存储、计算、身份管理等多种服务的检查模块。

cloudsword 对比