AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server for AI agents.
Cloud MCP server exists for a simple reason — assistants are far more useful when they can act on Cloud directly instead of describing what you should do. AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server for AI agents.
Find AWS attack paths, IAM escalation routes, and the fixes that matter most.
Installation goes through your MCP client rather than a global install: point it at cloud-audit on PyPI and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Once Cloud is connected, these are the calls the assistant has available:
Root — cause fixes** // groups findings by shared cause and ranks them: "fix 4 things, break 22 chains," with a what-if simulate to preview impactrun — pip install cloud-audituses — github/codeql-action/upload-sarif@v3Among the cloud and infrastructure options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Cloud's toolset — Root, run, uses — is a fair guide to whether it matches your workflow. It is maintained by gebalamariusz; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| Root | cause fixes** // groups findings by shared cause and ranks them: "fix 4 things, break 22 chains," with a what-if simulate to preview impact. [docs](https://haitmg.pl/cloud-audit/features/simulate/) |
| run | pip install cloud-audit |
| uses | github/codeql-action/upload-sarif@v3 |
{
"mcpServers": {
"cloud-audit": {
"command": "uvx",
"args": ["cloud-audit"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.