Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-gebalamariusz-cloud-audit": {
"args": [
"cloud-audit"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Open-source CLI scanner that helps you decide what to fix first —
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'cloud-audit' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked cloud-audit against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security / cloud
MCP Server for GCP environment for interacting with various Observability APIs.
⚡ A Simple / Speedy / Secure Link Shortener with Analytics, 100% run on Cloudflare.
An evil MCP server used for redteam testing
Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform. It provides a set of tools that interact with Yunxiao's API, allowing AI assistants to manage Codeup repository, Project, Pipeline, Packages etc.
MCP Security Weekly
Get CVE alerts and security updates for io.github.gebalamariusz/cloud-audit and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Find AWS attack paths, IAM escalation routes, and the fixes that matter most.
Open-source CLI scanner that helps you decide what to fix first -
not just what's wrong.
Find attack chains and IAM escalation paths - Simulate fixes before you apply them - Fix root causes, not individual findings
Documentation - Quick Start - Blast Radius - Live Visualizer - Attack Chains - IAM Escalation - Threat Feed - MCP Server
Drop a cloud-audit blast-radius JSON into the live visualizer at blast-audit.haitmg.pl - or click the screenshot to explore the Snowflake 2024 breach interactively.
pip install cloud-audit
cloud-audit scan
Uses your default AWS credentials and region. Try without an AWS account:
cloud-audit demo
Walk outward from any AWS resource and show exactly what an attacker reaches if THAT resource is compromised. The CLI runs offline against a saved scan (zero AWS API calls at blast-radius time); the matching open visualizer at blast-audit.haitmg.pl renders the same JSON as an interactive attack graph with break-point highlighting, MITRE AT