Cloudsword MCP Server

What is CloudSword?

CloudSword is an open-source tool designed to help public cloud tenants quickly discover, test, and improve security in their cloud environments. Targeted at security practitioners, it supports multiple cloud providers including Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud.

How to use CloudSword?

Install via HomeBrew (brew tap wgpsec/tap; brew install wgpsec/tap/cloudsword) or download the binary from the releases page. Use ./cloudsword sse http://localhost:8080 to start the MCP server in SSE mode, or run in STDIO mode. The tool uses an MSF‑like command interface: list to see modules, use <ID> to select one, set to configure parameters, and run to execute.

Key features of CloudSword

• Integrated modules for asset discovery, risk testing, and defense deployment.
• Supports Alibaba Cloud, Tencent Cloud, Huawei Cloud, Baidu Cloud, and Qiniu Cloud.
• Chinese‑language output with no language barrier.
• Command completion and MSF‑like logic for low learning curve.
• MCP protocol support (SSE and STDIO).
• Credentials never stored locally to avoid secondary leaks.

Use cases of CloudSword

• List all cloud assets (OSS/COS buckets, ECS/CVM instances, RAM/CAM users, domains).
• Search for sensitive objects in storage buckets.
• Enumerate users, roles, and access keys for privilege auditing.
• Create honeytokens (e.g., fake credentials) for detection.
• Deploy bucket policies to restrict uploads to images only.