kloudle avatar

Kloudle Cloud Security Scanner

io.github.kloudle/cloud-security-scanner

If your AI agent needs to audit AWS security posture without wrestling with SDKs or containers, this server exposes seven static binary scanners covering S3, IAM, EC2, EKS, RDS, CloudTrail, and CloudWatch Logs. Each scanner is a self-contained ~2MB Rust binary with zero dependencies. The MCP interface provides search and get operations that let agents discover the right scanner, fetch download commands with SHA256 verification, and run checks that return structured JSON with severity levels and remediation hints. Exit codes are designed for branching logic. You get 50 free scans per day over streamable HTTP, no API key required. Reach for this when you want agents to find misconfigurations like public S3 buckets, missing MFA, or unencrypted RDS instances using read-only IAM permissions.

tools
2
transport
HTTP
last updated
Apr 24, 2026

Install

From registry metadata
$ npx add-mcp https://mcp.kloudle.dev/mcp --name cloud-security-scanner

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http cloud-security-scanner https://mcp.kloudle.dev/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 2 tools

Verified live against the running server on Nov 6, 2026.

searchFind Kloudle cloud security scanners by capability. Returns matching binaries with name, description, check count, and severity breakdown.1 params

Find Kloudle cloud security scanners by capability. Returns matching binaries with name, description, check count, and severity breakdown.

Parameters* required
query*string
Search query (e.g., 's3 encryption', 'iam', 'public access')
getGet full metadata, SHA256 hash, download URL, and ready-to-run shell command for a Kloudle scanner binary. Pass args to get a complete command; omit for a template with placeholders.2 params

Get full metadata, SHA256 hash, download URL, and ready-to-run shell command for a Kloudle scanner binary. Pass args to get a complete command; omit for a template with placeholders.

Parameters* required
argsobject
CLI args as key-value pairs (e.g., {'region': 'us-east-1'})
name*string
Binary name (e.g., 'k5e-aws-s3')

Sponsors

Details

Website
kloudle.com/agents
Categories
Cloud & Infrastructure, Security & Pentesting
Transport
HTTP
Registry
MCP registry, active
Tools verified
Nov 6, 2026

Related Cloud & Infrastructure MCP servers

View all
1s2tconsulting avatarAcceleratorss2tconsulting/accelerators-mcp36 tools for AWS infrastructure, security compliance, AI workflows, and ACI governance.0stars
2synlake-ai avatarSynlake — Cloud Infrastructure for AI Agentssynlake-ai/synlakeCompare, estimate, and deploy cloud infrastructure across AWS, GCP, and Azure for AI agents.0stars
3maryadawson-code avatarIntegrityPulse FinOpsmaryadawson-code/integritypulseVerified cloud cost forecasting for AI agents. AWS, GCP, Azure pricing matrix.0stars
4maryadawson-code avatarOpenClaw FinOpsmaryadawson-code/openclaw-finopsVerified cloud cost forecasting for AI agents. AWS, GCP, Azure pricing matrix.0stars
5tooloracle avatarCloudoracletooloracle/cloudoracleCloudOracle - 14-tool multi-cloud compliance MCP: AWS, Azure, GCP posture, IAM, configs.0stars
6googlecloudplatform avatarCloud Rungooglecloudplatform/cloud-run-mcpMCP server to deploy apps to Cloud Run608stars