IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
Scored across 2 tools
The two tools have clearly distinct purposes: one analyzes a single IaC state for attack paths, while the other compares two states to detect changes in attack surface. There is no overlap.
Both tools follow a consistent verb_noun pattern (audit_attack_paths, diff_attack_paths) using snake_case, making the naming predictable and clear.
With only 2 tools, the server is slightly minimal but each tool provides essential functionality for the domain. It falls at the low end of the typical range but still earns its place.
The server covers the core workflows of static IaC attack-path analysis (single-state audit and differential comparison). Minor gaps exist, such as lack of support for other IaC providers or more granular query tools, but the main use cases are addressed.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
audit_iac_attack_pathsdiff_attack_pathsCloud cost, inventory and governance on AWS/Azure/GCP. Read-only by default, optional scoped writes
Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface
Unified API to query AWS, GCP, Azure and generate Terraform/CLI execution kits for AI agents.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Add one secure layer between your agents and this server.