Emfirge

Git branch for your cloud.

Connector by theanshsonkar · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 4

Chalk Labs

Need help deploying Emfirge?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/theanshsonkar-emfirge

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools: 15 read · 4 write · 3 delete · 3 not yet classified
Secrets: None asked for
Install scripts: None found
Runs as: Node.js package

Tools by what they do 25

Read from the source code; the running server may list different tools.

Read 15 · Look things up without changing anything.

emfirge_attack_paths
emfirge_branch_diff
emfirge_branch_handback
emfirge_branch_verdict
emfirge_check_compliance
emfirge_compare_branches
emfirge_get_branch
emfirge_get_findings
emfirge_in_use_evidence
emfirge_list_branches
emfirge_plan_verdict
emfirge_policy_checks

Show 3 more tools

emfirge_scan
emfirge_setup_help
emfirge_verify_fix

Write 4 · Create, change, send or run things.

emfirge_create_branch
emfirge_fork_branch
emfirge_login
emfirge_logout

Delete 3 · Delete, drop, revoke or wipe things.

emfirge_apply_change
emfirge_rollback_branch
emfirge_rollback_branch_to_count

Not yet classified 3 · We could not tell from the name and description.

emfirge_discard_branch
emfirge_link_project
emfirge_simulate_breach

Secrets and settings it asks for

Other settings (environment variables or headers).

EMFIRGE_BASE_URL
EMFIRGE_PRIVACY

Network hosts it talks to 18

api.github.com · found in code
attack.mitre.org · found in code
aws.amazon.com · found in code
claude.ai · found in code
console.aws.amazon.com · found in code
cursor.com · found in code
developers.openai.com · found in code
docs.aws.amazon.com · found in code
docs.claude.com · found in code
emfirge-reports.s3.ap-south-1.amazonaws.com · found in code
emfirge.cloud · found in code
emfirge.internal.acme.com · found in code
emfirge.vercel.app · found in code
github.com · found in code
kiro.dev · found in code
pricing.us-east-1.amazonaws.com · found in code
s3.amazonaws.com · found in code
sdzohfnoutehzcqfnmko.supabase.co · found in code

Files it touches

/opt/checkov-venv/bin/python
Your home directory (~)
~/.codex/config.toml
~/.emfirge/tokens.json

Tools (25)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

emfirge_apply_change
Apply an add, modify, or delete change to a resource in an isolated branch. This changes the branch model, not AWS.
emfirge_attack_paths
Get attack paths from the internet to internal resources. Shows pivot routes from public-facing resources to crown jewels. Also returns chokepoint and orphaned resources.
emfirge_branch_diff
Show the infrastructure diff for an isolated branch compared with its base analysis.
emfirge_branch_handback
Return the exact AWS API calls for an isolated branch and their hash binding; optionally verify the calls with the backend. Unmappable changes are returned as gaps and never as partial calls.
emfirge_branch_verdict
Evaluate the security verdict for an isolated branch, including the effect of its modeled changes.
emfirge_check_compliance
Get CIS AWS Foundations 1.5 or SOC 2 compliance status. Returns per-requirement status (pass, fail, partial, not_applicable, not_evaluated) using Prowler's published requirement ids, with the rules that triggered each failure and coverage of how many requirements Emfirge evaluates.
emfirge_compare_branches
Compare the verdicts of several branches of the same base analysis side by side. Input: branch_ids (ids from emfirge_list_branches).
emfirge_create_branch
Create an isolated infrastructure branch from a completed analysis. Use it to model changes safely before applying anything to AWS.
emfirge_discard_branch
Discard an isolated branch when it is no longer needed. This does not change AWS.
emfirge_fork_branch
Fork an open branch into a new independent branch with the same base and ordered modeled changes. Does not modify AWS or the parent branch.
emfirge_get_branch
Read branch metadata and its ordered normalized change log without returning the base infrastructure snapshot.
emfirge_get_findings
Get the full findings list for a previous scan, optionally filtered by severity (Critical/Moderate/Low). Each finding has rule_id, issue, recommendation, attack_path, blast_radius, MITRE mapping.
emfirge_in_use_evidence
Read-only: reads CloudTrail event history (free) and CloudWatch metrics (billed API requests beyond the free tier) only for resources the branch deletes; can only make a verdict stricter, never looser. role_arn is required only when accepting an estimate and must be the same role used by emfirge_scan. Never call with accept_estimate_id unless the user agreed to the shown estimate.
emfirge_link_project
Link your saved Supabase sign-in to an existing API-key project.
emfirge_list_branches
List isolated infrastructure branches, optionally filtered by their base analysis ID. Returns an object with a branches array and count.

Show 10 more tools

emfirge_login
Sign in to Emfirge with GitHub or Google in your browser.
emfirge_logout
Sign out of Emfirge on this device.
emfirge_plan_verdict
Check a proposed change on a branch before it is applied. Accepted shapes: aws-api {"format":"aws-api-calls/1","calls":[{"service":"ec2","operation":"AuthorizeSecurityGroupIngress","parameters":{...},"region":"optional"}]}; aws-cli a list of command strings or {"format":"aws-cli/1","commands":[...]}, e.g. "aws ec2 authorize-security-group-ingress --group-id SG_001 --protocol tcp --port 22 --cidr 0.0.0.0/0"; terraform JSON of `terraform show -json <plan>`; cloudformation describe-change-set JSON. Emfirge never runs the change. Returns the verdict and the hand-back bound to the exact input by ha…
emfirge_policy_checks
Opt-in: asks AWS IAM Access Analyzer (CheckNoPublicAccess, about $0.002 per policy, billed to your AWS account) whether changed S3 bucket policies and role trust policies are public. Only policies that differ from the base are sent. Without approval it returns the estimate and sends nothing. AWS evidence can only make a verdict stricter, never looser; role_arn must be the same role used by emfirge_scan. Never call with approve unless the user agreed to the shown estimate.
emfirge_rollback_branch
Rollback an isolated branch to its base state without changing AWS.
emfirge_rollback_branch_to_count
Truncate an open isolated branch's ordered change log to a specified existing count. Use branch_revision from emfirge_get_branch to reject stale state; this changes no AWS resources.
emfirge_scan
Scan an AWS account for security risks. Returns risk score (0-100), finding counts, and an analysis_id for the other tools. Resource IDs are tokenized by default.
emfirge_setup_help
Returns the AWS CloudFormation deploy URL for setting up the read-only IAM role. Call this when the user does not have a role ARN yet, or if emfirge_scan returns 403. CRITICAL: After calling this tool, paste the deploy URL verbatim in your reply to the user. Many MCP clients (Claude Code, Codex CLI, Kiro CLI) hide tool output by default, so saying 'click the link above' will leave the user with nothing to click.
emfirge_simulate_breach
Walk a full kill chain end-to-end against the infrastructure graph. Given a natural-language scenario or 'what if' query, returns verdict + severity + every stage of the attack (entry → pivot → impact) + blast radius + follow-up moves. Read-only — no AWS changes.
emfirge_verify_fix
Simulate fixing a finding without applying changes. Clones the infra, applies the rule's mutation, rebuilds the graph, re-runs all rules, returns score delta + which other findings get resolved.

Signals

Stars: 4
Forks: 1
Open issues: 0
Weekly downloads: 27
Last commit: Oct 24, 2026 (7 days ago)
Last release: Jul 16, 2026 (3 months ago)
Last package publish: Sep 18, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name: io.github.theanshsonkar/emfirge
Version: 0.2.1
Auth: No auth
Packages: npm @emfirge/mcp
License: Apache-2.0
Repository: github.com/theanshsonkar/emfirge
Website: emfirge.cloud
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get Emfirge running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying Emfirge?

Call Get help

Cite this page

Emfirge MCP server. Agent Mart. https://agentmart.dev/connectors/theanshsonkar-emfirge (last updated 2026-10-24)