Mmcp.market

Emfirge MCP server

by theanshsonkar·io.github.theanshsonkar/emfirge·v0.2.1
No reviews yet

Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.

A89/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A89/100

full report

Adoption
Growing

4 stars348 downloads/wk

Reviews

Write one

Nobody has reviewed Emfirge yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Emfirge tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • emfirge_attack_paths

    Get attack paths from the internet to internal resources. Shows pivot routes from

  • emfirge_check_compliance

    Get CIS AWS Foundations 1.5 or SOC 2 compliance status. Returns per-control pass/fail with the findings that triggered each failure.

  • emfirge_simulate_breach

    Walk a full kill chain end-to-end against the infrastructure graph. Given a

  • emfirge_verify_fix

    Simulate fixing a finding without applying changes. Clones the infra, applies the rule's

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan23 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Emfirge repository's README, as published. We do not edit it. Read it on GitHub

🛡️ Emfirge

Git branch for your cloud.

Give your AI a read-only map of AWS. Trace attack paths, model security changes on an isolated branch, and inspect the result before touching production.

[Get started][quickstart] · [Read the docs][docs] · [npm][npm]

MCP version: 0.2.3

Emfirge scans through a read-only role, builds an infrastructure graph, and computes security evidence from that snapshot. It can fork the graph, model a proposed change, and report a diff and advisory verdict. Branch changes never mutate AWS. Emfirge computes a security delta; it never guarantees a deployment is safe.

Install

npx @emfirge/mcp install

Then ask your assistant to scan using a read-only role and region. Example placeholder only:

Scan with arn:aws:iam::123456789012:role/EmfirgeReadOnly in us-east-1

The account ID above is intentionally non-existent example data. Use your own role when running a real scan.

The 15 MCP tools

Analyze

Branch

Setup

Privacy

The MCP supports strict (default), balanced, and off modes. In strict, recognized AWS identifiers are tokenized locally before results reach the LLM; the mapping stays on the local machine. The backend receives the data needed to perform the requested analysis. Credentials in presigned report URLs are scrubbed before URLs are returned. Review outputs under your own data-handling policy.

npx @emfirge/mcp privacy
npx @emfirge/mcp privacy strict|balanced|off

Typical flow

read-only scan → fork graph → apply modeled change → diff → re-run lenses → advisory verdict

A non-empty coverage_warnings field means the verdict is degraded and must not be described as complete coverage. A pass is not a guarantee of safety or application connectivity.

Manual MCP configuration

{
  "mcpServers": {
    "emfirge": {
      "command": "npx",
      "args": ["-y", "@emfirge/mcp"],
      "env": { "EMFIRGE_PRIVACY": "strict" }
    }
  }
}

See the [MCP README][mcp-readme] and [documentation][docs] for usage details.

License

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y @emfirge/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add emfirge -- npx -y @emfirge/mcp
Add to Cursor

Emfirge: common questions

Is Emfirge MCP server safe?
Yes, by our scan: it is graded A (89/100). Read the Emfirge safety report
How do I install Emfirge?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Emfirge need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is Emfirge maintained?
The last commit was 7 days ago (2026-09-19). The latest release is v0.2.1.
What can I use instead of Emfirge?
Servers from other publishers that do the same job: TerraVision MCP server, Cloud FinOps Skill & MCP server and Cloudeval AI MCP server. Compare all Emfirge alternatives.

Alternatives to Emfirge

Same job from other publishers: the closest match first, then the best rated.

All Emfirge alternatives →
  • TerraVision
    Cloud architecture diagrams with official AWS, Azure and GCP icons, from Terraform or a JSON graph.
    A
  • Cloud FinOps Skill & MCP
    Cloud cost + FinOps knowledge for AI agents: AWS/Azure/GCP optimisation, AI spend, waste playbooks.
    B
  • Cloudeval AI
    Cloud evaluations and reviews for Azure and static AWS CloudFormation (beta). Requires an account.
    B
  • Git
    Comprehensive Git MCP server enabling native git tools including clone, commit, worktree, & more.
    A
  • uploads.sh
    Host files from coding agents; stage on a branch and attach to GitHub PRs.
    A
Emfirge vs TerraVisionEmfirge vs Cloud FinOps Skill & MCPEmfirge vs Cloudeval AI

More from theanshsonkar →