Cyntrisec CLI (Historical)
This is a historical AWS security analysis tool that's no longer an active Cyntrisec product. It scans AWS infrastructure via AssumeRole to build a capability graph from IAM policies, EC2 instances, security groups, RDS databases, and S3 buckets, then discovers attack paths from the internet to sensitive targets. The MCP server exposes tools like get_scan_summary and get_attack_paths to query locally stored scan results. You'd reach for this if you want to analyze blast radius, identify unused permissions, or generate remediation plans with ROI prioritization based on security impact and cost savings. It's read only by default and outputs deterministic JSON with proof chains, but comes with no warranty or support.
- GitHub stars
- 3
- tools
- 15
- auth
- Secret needed
- transport
- STDIO
- env vars
- 4
- last updated
- May 6, 2026
Tools
15 toolsPublic tool metadata for what this MCP can expose to an agent.
list_toolsList all available tools
List all available tools
No parameter schema in public metadata yet.
set_session_snapshotSet active snapshot for session
Set active snapshot for session
No parameter schema in public metadata yet.
get_scan_summaryGet summary of latest AWS scan
Get summary of latest AWS scan
No parameter schema in public metadata yet.
get_assetsGet assets with type/name filtering
Get assets with type/name filtering
No parameter schema in public metadata yet.
get_relationshipsGet relationships between assets
Get relationships between assets
No parameter schema in public metadata yet.
get_findingsGet security findings with severity filtering
Get security findings with severity filtering
No parameter schema in public metadata yet.
get_attack_pathsGet attack paths with risk scores
Get attack paths with risk scores
No parameter schema in public metadata yet.
explain_pathDetailed hop-by-hop path breakdown
Detailed hop-by-hop path breakdown
No parameter schema in public metadata yet.
explain_findingDetailed finding explanation
Detailed finding explanation
No parameter schema in public metadata yet.
get_remediationsFind optimal fixes for attack paths
Find optimal fixes for attack paths
No parameter schema in public metadata yet.
get_terraform_snippetGenerate Terraform code for remediation
Generate Terraform code for remediation
No parameter schema in public metadata yet.
check_accessTest if principal can access resource
Test if principal can access resource
No parameter schema in public metadata yet.
get_unused_permissionsFind unused IAM permissions
Find unused IAM permissions
No parameter schema in public metadata yet.
check_complianceCheck CIS AWS or SOC 2 compliance
Check CIS AWS or SOC 2 compliance
No parameter schema in public metadata yet.
compare_scansCompare scan snapshots
Compare scan snapshots
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
AWS_PROFILEAWS profile name to use for authentication
AWS_DEFAULT_REGIONAWS region to use (defaults to profile/env settings)
AWS_ACCESS_KEY_IDsecretAWS access key ID (use AWS_PROFILE instead if possible)
AWS_SECRET_ACCESS_KEYsecretAWS secret access key (use AWS_PROFILE instead if possible)
Readme
Cyntrisec CLI
Historical pre-company project.
cyntrisec-cliwas created before Cyntrisec narrowed its company focus to EphemeralML and AIR v1. It is not a current Cyntrisec product, support surface, or commercial offering. The PyPI package namecyntrisec, CLI commandcyntrisec, and MCP server IDio.github.cyntrisec/cyntrisecare retained only to avoid breaking historical installs.
Details
- Repository
- github.com/cyntrisec/cyntrisec-cli
- Category
- Cloud & Infrastructure
- Package
cyntrisec- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related Cloud & Infrastructure MCP servers
View all
OCI Pricingjasonwilbur/oci-pricing-mcpOracle Cloud Infrastructure pricing data with cost calculators and comparisons3stars
Shortcut Mcpstayce/streamshortcut-cloudflareShortcut project management. Create, update, search stories and manage workflows.0stars
VMware AVIzw008/vmware-aviVMware AVI (NSX ALB) load balancer plus AKO Kubernetes ops — 29 MCP tools.2stars
K8scortex Mcpapatilgtn/k8scortex-mcpKubernetes MCP server: 75 tools for GKE, AKS, EKS, RBAC, audit logging, GitOps, multi-cluster.1stars
Deployment.iodeployment-io/cursor-pluginDeploy apps on your cloud. Create environments, configure infrastructure, and monitor jobs.0stars
Localstackgiovanemartins/localstack-mcp-serverMCP server for LocalStack AWS services, enabling AI agents to interact with local AWS infra.1stars