AIbase
EN
Explore
Cloudsword
C

Cloudsword

CloudSword is an open-source tool that helps public cloud tenants discover and fix risks in the cloud environment, and supports multi-platform asset management and security protection.
SecurityCloud platform#Cloud security#Risk detection#Open-source tool#Multi-platform support.Go
0 points
488

What is CloudSword?

CloudSword is a tool designed for security personnel. It helps tenants quickly understand resource information in the public cloud environment, identify potential vulnerabilities, and provides defense methods. It supports multiple cloud service providers (such as Alibaba Cloud, Tencent Cloud, and Huawei Cloud) and offers a Chinese interface and easy-to-use command-line operations.

How to use CloudSword?

Through a simple command-line interface, users can install the tool, select modules, configure necessary credential parameters, and then perform scanning or defense operations. It supports installation via Homebrew or direct download of binary packages.

Applicable scenarios

It is suitable for scenarios such as cloud security auditing, penetration testing, and daily security operations and maintenance. It is especially suitable for security teams that need to quickly evaluate the security status of the cloud environment.

Main features

Multi-cloud supportSupports mainstream cloud service providers such as Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud
Risk detectionQuickly discover security risks of cloud resources such as storage buckets, computing instances, and identity authentication
Defense enhancementProvides pre-set defense methods, such as restricting storage buckets to only allow image uploads
MCP protocol supportSupports the MCP protocol starting from version v0.0.2, with support for SSE and STDIO methods

Advantages and limitations

Advantages
Global Chinese output, lowering the usage threshold
Command completion prompts, making operations simple and intuitive
MSF usage logic, with low learning cost
Credentials are not stored on disk, avoiding secondary leakage
Limitations
Currently mainly supports domestic cloud service providers
Some advanced functions require professional knowledge for configuration
Limited coverage of defense functions

How to use

Installation
Install via Homebrew or download binary packages
Select modules
Use the list command to view available modules or the search command to search for specific functions
Configure parameters
Use the set command to set necessary parameters such as access credentials
Execution
Use the run command to execute the selected module

Usage examples

List Alibaba Cloud OSS bucketsQuickly view all OSS buckets under the account
Create Tencent Cloud honey tokensCreate decoy access credentials for detecting abnormal access
Use the MCP protocolListen to the local port via the SSE method

Frequently Asked Questions

How to obtain access credentials from cloud service providers?
Is the tool secure? Will it leak my credentials?
How to contribute code or report issues?
What is the MCP protocol?

Related resources

GitHub repository
Project source code and latest version download
User manual
Complete usage documentation and technical details
Release page
Historical versions and update logs
WeChat official account of WGP Security Team
Get the latest security news and join the discussion group
Installation
Copy the following command to your Client for configuration
Note: Your key is sensitive information, do not share it with anyone.
M
MCP Scan
MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.
Python
624
5 points
A
Agentic Radar
Agentic Radar is a security scanning tool for analyzing and assessing agentic systems, helping developers, researchers, and security experts understand the workflows of agentic systems and identify potential vulnerabilities.
Python
562
5 points
K
Kubernetes
An MCP server based on Kubernetes for managing and operating Kubernetes clusters
TypeScript
553
5 points
E
Edgeone Pages MCP Server
EdgeOne Pages MCP is a service that quickly deploys HTML content to EdgeOne Pages via the MCP protocol and obtains a public URL
TypeScript
260
4.8 points
A
Awslabs Cost Analysis MCP Server
The AWS MCP Servers are a set of dedicated servers based on the Model Context Protocol, offering various AWS-related functions, including document retrieval, knowledge base query, CDK best practices, cost analysis, image generation, etc., aiming to enhance the integration of AI applications with AWS services through a standardized protocol.
Python
2.6K
5 points
M
MCP K8s Go
An MCP server based on Golang for connecting to Kubernetes clusters, providing resource query and operation functions.
Go
318
4 points
I
Ida Pro MCP
Certified
IDA Pro MCP is a server plugin for reverse engineering. It interacts with client tools through the MCP protocol, providing functions such as function analysis, comment modification, variable renaming, etc., and supports multiple MCP clients such as Cline, Roo Code, etc.
Python
1.7K
5 points
S
Solon
Solon is an efficient, open, and eco - friendly Java enterprise application development framework that supports all - scenario development. It features high performance, low memory consumption, fast startup, and small - volume packaging. It is compatible with Java 8 to Java 24 and the GraalVM native runtime.
Java
2.5K
5 points
Featured MCP Services
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
97
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
150
4.5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
838
4.3 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
573
5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.2K
4.7 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
761
4.8 points
AIbase
Zhiqi Future, Your AI Solution Think Tank
English简体中文繁體中文にほんご
© 2025AIbase