Is Cloudsword safe to use?

Cloudsword has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Cloudsword?

Cloudsword can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Cloudsword?

Cloudsword is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is Cloudsword actively maintained?

Cloudsword is less actively maintained — last commit was 203 days ago. It has 620 GitHub stars.

Cloudsword

Name: Cloudsword
Author: wgpsec

by wgpsec

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

620 GitHub

No known CVEs

Apache-2.0 license

Stale

Last commit 203d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 5h ago

Edit this pageView history

Cloudsword is an MCP server that 一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 33/100 on MCPpedia's security, maintenance and efficiency rubric.

Security Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "cloudsword": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/cloudsword)](https://mcppedia.org/s/cloudsword)

Read me

What Cloudsword does

云鉴 CloudSword 是一款帮助公有云租户快速发现云上风险、测试云上风险、增强云上防护能力的综合性开源工具。

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

33/100across 5 weighted dimensions

How we score →

0255075100

−67

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Cloudsword safe to use?: Cloudsword has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Cloudsword?: Cloudsword can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Cloudsword?: Cloudsword is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Cloudsword actively maintained?: Cloudsword is less actively maintained — last commit was 203 days ago. It has 620 GitHub stars.

Similar servers

Others in security / cloud

View all →

Observability MCP94

MCP Server for GCP environment for interacting with various Observability APIs.

890 1

io.github.KryptosAI/mcp-observatory94

Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.

174 4

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

11.6k 3

MCP Security Weekly

Get CVE alerts and security updates for Cloudsword and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security Cloud

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "cloudsword": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/cloudsword)](https://mcppedia.org/s/cloudsword)

Read me

What Cloudsword does

云鉴 CloudSword 是一款帮助公有云租户快速发现云上风险、测试云上风险、增强云上防护能力的综合性开源工具。

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

云鉴，让您的公有云环境更安全

云鉴 CloudSword 是一款帮助公有云租户快速发现云上风险、测试云上风险、增强云上防护能力的综合性开源工具。

作为一款面向安全人员的工具，云鉴可以帮助租户快速了解当前公有云环境中的资源信息、快速发现当前环境中可能存在的弱点从而方便安全人员进行修补，云鉴还预设了一些防御方法，方便安全人员快速部署从而增强云上的防御能力。

全局中文输出，没有使用压力。
命令补全提示，方便易于使用。
MSF 使用逻辑，极低学习成本。
凭证不用落地，避免二次泄露。

开始使用

HomeBrew 安装

安装

brew tap wgpsec/tap
brew install wgpsec/tap/cloudsword

更新

brew update
brew upgrade cloudsword

下载二进制包

云鉴下载地址：github.com/wgpsec/cloudsword/releases

下载系统对应的压缩文件，解压后在命令行中运行即可。

使用手册

完整用法与介绍可以查看云鉴使用手册

MCP协议支持

cloudsword 从v0.0.2 版本开始支持MCP协议，支持SSE以及STDIO方式

使用命令 ./cloudsword sse http://localhost:8080 即可在本地监听8080端口

SSE模式

以Chrerry stdio为例填入 http://localhost:8080/sse 即可获得到工具信息

STDIO

使用示例

集成模块

以下是云鉴目前所支持使用的模块：

阿里云

综合

序号	ID	云提供商	推荐评级	模块名称	描述
1	1101	阿里云	★★★★	list_cloud_assets	列出 OSS、ECS、RAM、Domain 服务资产

存储桶

序号	ID	云提供商	推荐评级	模块名称	描述
1	1201	阿里云	★★	oss_list_buckets	列出阿里云 OSS 对象存储桶
2	1202	阿里云	★★★★	oss_search_objects	搜索阿里云 OSS 对象
3	1203	阿里云	★★★	oss_bucket_only_upload_images	使用云函数限制存储桶只允许上传图片

弹性计算

序号	ID	云提供商	推荐评级	模块名称	描述
1	1301	阿里云	★★	ecs_list_instances	列出阿里云 ECS 弹性计算实例

统一身份认证

序号	ID	云提供商	推荐评级	模块名称	描述
1	1401	阿里云	★★	ram_list_users	列出阿里云 RAM 用户
2	1402	阿里云	★	ram_list_roles	列出阿里云 RAM 角色
3	1403	阿里云	★	ram_create_user	创建阿里云 RAM 用户
4	1404	阿里云	★	ram_attach_policy_to_user	为阿里云 RAM 用户添加策略
5	1405	阿里云	★★★	ram_create_login_profile	创建阿里云 RAM 用户 Web 登录配置
6	1406	阿里云	★	ram_create_access_key	创建阿里云 RAM 用户访问凭证

域名

序号	ID	云提供商	推荐评级	模块名称	描述
1	1501	阿里云	★	domain_list_domains	列出阿里云 Domains 域名资产

腾讯云

综合

| 序

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

33/100across 5 weighted dimensions

How we score →

0255075100

−67

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Cloudsword safe to use?: Cloudsword has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Cloudsword?: Cloudsword can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Cloudsword?: Cloudsword is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Cloudsword actively maintained?: Cloudsword is less actively maintained — last commit was 203 days ago. It has 620 GitHub stars.