Atlas / MCP servers / huaweiclouddeveloper / Huaweicloud

HuaweicloudSAFE

Name: Huaweicloud
Author: huaweiclouddeveloper

mcp/huaweiclouddeveloper/huaweicloud

MCP server by huaweiclouddeveloper · huaweicloud · iaas · mcp · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Provide different cloud products MCP Server tools to help developers manage cloud resources with AI-agent

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

8 7r · 1w · 0d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/manusa/kubernetes-mcp-server/blob/main/LICENSE) [](https://github.com/HuaweiCloudDeveloper/mcp-server/actions/workflows/ci.yaml) [](https://github.com/HuaweiCloudDeveloper/mcp-server/pulls) [](https://github.com/HuaweiCloudDeveloper/mcp-server/commits/main) [](https://github.com/HuaweiCloudDeveloper/mcp-server)

简体中文

Huawei MCP Server is a Model Context Protocol server built on Huawei Cloud services, providing secure and controlled cloud access capabilities for large AI models. Through standardized MCP specifications, it enables AI assistants to operate Huawei Cloud resources within conversational workflows, supporting core services including ECS, OBS, GaussDB, and other widely-used cloud products.

Mcp-server catalog

Practical documents
Demo
Running Guide
Tools list
Contributing

Practical documents

Using DAS MCP to implement database conversational operation and maintenance

Demo

Demo1

Cline uses Huawei Cloud EIP MCP Server to create and delete EIP instances.

Running Guide

1. Dependency Installation

Install the Python environment in advance. Since Python 3.4 and 2.7.9, pip has been installed with Python as a standard component.

Install uv (Recommended)
In

Read from source at commit 00c116ebf5f8OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add huaweicloud-mcp-server -- uvx huaweicloud-mcp-server

claude-desktop

{
  "mcpServers": {
    "huaweicloud-mcp-server": {
      "command": "uvx",
      "args": [
        "huaweicloud-mcp-server"
      ]
    }
  }
}

Exposed tools (8)

7 read · 1 write · 0 destructive.

Tool	Risk	Description
`execute_query`	write	execute a sql query
`get_activity`	read	get recent query activities in the system(from system catalog pgxc_stat_activity)
`get_comment`	read	Get comment for specified schema or table
`get_table_info`	read	Get table/view definition for the specified table/view
`list_databases`	read	List all databases.
`list_schemas`	read	List all schemas in the current database
`list_tables`	read	List all tables in the specified schema
`list_views`	read	List all views in the specified schema

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (8)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

huaweicloud_dws_mcp_inner/src/dws_mcp_server/server.py:15

filename="../../server-log.out"

LOWPrompt injection · prompt.credential_read · CWE-94, CWE-1427

huaweicloud_services_server/mcp_server_iotda/README_en.md:27

<td>An access code is an authentication credential used by the client to establish a connection with the platform using protocols such as AMQP. Only one record is retained; repeated calls will only re

Why it matters. asks the agent to read credentials

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

huaweicloud_services_server/mcp_server_meeting/README_en.md:827

<td>Entity administrators use this API to reset the passwords of enterprise members. When the server receives a password reset request, it sends the new password to the enterprise member's email or SM

Why it matters. an instruction to move sensitive data to an outside destination

Fix. remove; a skill never needs the user's secrets off the machine