Cloudsword

Name: Cloudsword
Author: wgpsec

@wgpsec

リポジトリホームページ

Cloudsword について

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

#mcp #cybersecurity #cloudsecurity #alibaba-cloud #tencent-cloud #public-cloud #mcp-server

基本情報

カテゴリ

その他

ライセンス

Apache-2.0

ランタイム

トランスポート

stdio

公開者

wgpsec

設定

標準の設定はありません

このサーバーの README には解析可能な MCP 設定ブロックが含まれていません。インストール手順はリポジトリをご確認ください。

リポジトリ

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is CloudSword?

CloudSword is an open-source tool designed to help public cloud tenants quickly discover, test, and improve security in their cloud environments. Targeted at security practitioners, it supports multiple cloud providers including Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud.

How to use CloudSword?

Install via HomeBrew (brew tap wgpsec/tap; brew install wgpsec/tap/cloudsword) or download the binary from the releases page. Use ./cloudsword sse http://localhost:8080 to start the MCP server in SSE mode, or run in STDIO mode. The tool uses an MSF‑like command interface: list to see modules, use <ID> to select one, set to configure parameters, and run to execute.

Key features of CloudSword

Integrated modules for asset discovery, risk testing, and defense deployment.
Supports Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud.
Chinese‑language output with no language barrier.
Command completion and MSF‑like logic for low learning curve.
MCP protocol support (SSE and STDIO).
Credentials never stored locally to avoid secondary leaks.

Use cases of CloudSword

List all cloud assets (OSS/COS buckets, ECS/CVM instances, RAM/CAM users, domains).
Search for sensitive objects in storage buckets.
Enumerate users, roles, and access keys for privilege auditing.
Create honeytokens (e.g., fake credentials) for detection.
Deploy bucket policies to restrict uploads to images only.

FAQ from CloudSword

How do I set cloud credentials?

Set the environment variables CLOUD_SWORD_ACCESS_KEY_ID, CLOUD_SWORD_ACCESS_KEY_SECRET, and optionally CLOUD_SWORD_SECURITY_TOKEN. Inside the tool, use set to configure per module.