Cyntrisec CLI (Historical)

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/cyntrisec-cyntrisec

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

14 read · 1 write · 0 delete

Secrets

2 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Python package

Tools (15)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• check_access

  Test if a principal can access a resource. Args: principal: IAM role or user name (e.g., "ECforS") resource: Target resource (e.g., "s3://prod-bucket") Returns: Whether access is allowed and via which relationship.

• check_compliance

  Check compliance against CIS AWS or SOC 2 framework. Args: framework: "cis-aws" or "soc2" Returns: Compliance score and failing controls.

• compare_scans

  Compare latest scan to previous scan. Returns: Changes in assets, relationships, and attack paths.

• explain_finding

  Get detailed explanation of a security finding. Args: finding_id: The finding ID to explain snapshot_id: Optional snapshot ID (default: latest) Returns: Detailed explanation with context, impact, and remediation steps.

• explain_path

  Get detailed explanation of an attack path. Args: path_id: The attack path ID to explain snapshot_id: Optional snapshot ID (default: latest) Returns: Detailed breakdown of the attack path with each hop explained.

• get_assets

  Get assets from the scan with optional filtering. Args: asset_type: Filter by type (e.g., "iam:role", "ec2:instance", "s3:bucket") search: Search by name or ARN (case-insensitive) max_assets: Maximum number of assets to return (default: 50) snapshot_id: Optional snapshot ID (default: latest) Returns: List of assets with their properties.

• get_attack_paths

  Get discovered attack paths from the latest scan. Args: max_paths: Maximum number of paths to return (default: 10) min_risk: Minimum risk score filter (0.0-1.0, default: 0.0) snapshot_id: Optional snapshot ID (default: latest) Returns: List of attack paths with risk scores, confidence, and traversed assets.

• get_findings

  Get security findings from the scan. Args: severity: Filter by severity (CRITICAL, HIGH, MEDIUM, LOW) max_findings: Maximum number of findings to return (default: 20) snapshot_id: Optional snapshot ID (default: latest) Returns: List of security findings with severity and descriptions.

• get_relationships

  Get relationships between assets with optional filtering. Args: relationship_type: Filter by type (e.g., "CAN_ASSUME", "CAN_REACH", "MAY_ACCESS") source_name: Filter by source asset name target_name: Filter by target asset name max_relationships: Maximum number to return (default: 50) snapshot_id: Optional snapshot ID (default: latest) Returns: List of relationships with source, target, and type.

• get_remediations

  Find optimal remediations that block attack paths. Uses min-cut algorithm to find smallest set of changes that block all attack paths. Args: max_cuts: Maximum number of remediations (default: 5) Returns: List of remediations with coverage percentages.

• get_scan_summary

  Get summary of the latest AWS scan. Returns asset counts, finding counts, and attack path counts.

• get_terraform_snippet

  Get Terraform code snippet for a specific remediation. Args: source_name: Name of the source asset target_name: Name of the target asset relationship_type: Type of relationship (e.g., "CAN_ASSUME", "ALLOWS_TRAFFIC_TO") snapshot_id: Optional snapshot ID (default: latest) Returns: Terraform HCL code snippet for the remediation.

• get_unused_permissions

  Find unused IAM permissions (blast radius reduction opportunities). Args: days_threshold: Days of inactivity to consider unused Returns: Unused permissions grouped by role with reduction percentages.

• list_tools

  List all available Cyntrisec tools. Returns: List of tools with descriptions.

• set_session_snapshot

  Set or retrieve the active snapshot id used for subsequent calls. Args: snapshot_id: Optional scan id/directory name. If omitted, returns current/ latest.

Signals

Stars

4

Forks

3

Open issues

0

Weekly downloads

28

Last commit

May 6, 2026 (5 months ago)

Last release

May 6, 2026 (5 months ago)

Last package publish

May 6, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.cyntrisec/cyntrisec

Version

0.1.14

Auth

API key

Packages

pypi cyntrisec

License

Apache-2.0

Repository

github.com/cyntrisec/cyntrisec-cli

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql