CorvixMCP evaluates your multi-cloud IAM policies, Terraform plans, and CI/CD pipelines—giving AI agents the real-time reasoning needed to pinpoint and sever toxic privilege escalation chains in complete air-gapped isolation.
pip install corvixmcp
Purpose-built for zero-trust environments where your infrastructure topology can never leave your local machine.
Traces non-obvious permission chains from low-privilege contractors or service accounts to crown-jewel data stores and control planes.
Identifies cyclic mutual-trust delegations that create permanent, self-healing backdoor loops resistant to conventional single-account audits.
Zero cloud dependencies or external API calls. Compliant with sovereign defense networks, banking enclaves, and strict internal compliance protocols.
Correlates risks traversing Ansible playbooks, GitHub Actions workflows, Terraform state files, and Kubernetes RBAC in one graph.
Instantly provides Cursor, Claude Desktop, and autonomous agents with 10+ native tools for real-time security reasoning while writing code.
Cryptographically binds enterprise Pro features to local node fingerprints with offline validation guarantees for air-gapped workstations.
Why isolated static checks fail to prevent complex cloud breaches.
| Evaluation Vector | Traditional Static Linters | CorvixMCP Security Engine |
|---|---|---|
| Scope of Analysis | Single file or isolated resource in isolation. | Full cross-boundary multi-hop topology. |
| Attack Chain Detection | ❌ Blind to transitions across tools. | ✓ Evaluates reachability from identity to cloud target. |
| Circular Loop Persistence | ❌ Cannot detect recursive mutual-trust loops. | ✓ Pinpoints circular backdoor escalation rings. |
| Execution Latency | Moderate (multiple external subprocesses). | Sub-millisecond native in-memory traversal. |
| AI Assistant Integration | Manual CLI logs / parsing required. | Native FastMCP protocol tools for Cursor & Claude. |
| Data Privacy | Varies (often requires SaaS telemetry). | 100% Air-Gapped on-device execution. |
High-speed native ingestors for the modern cloud infrastructure stack.
Flags wildcard escalation policies, PassRole vectors, and cross-account AssumeRole bridges.
Detects IAM role escalation, service account impersonation, and project editor privilege abuse.
SupportedAudits Azure RBAC assignments, Service Principals, and subscription administration delegations.
SupportedUncovers high-privilege ClusterRoles, container escape routes, and cluster-admin namespace leaks.
SupportedParses tfplan.json plans to detect public 0.0.0.0/0 exposure and security group misconfigurations.
Flags GitHub Actions pull_request_target abuse and Ansible become: true root privilege escalation.
Start free with core single-resource checks, or unlock full multi-hop traversal power.
Essential security graph engine for individual engineers and local workflows.
Full spectrum attack path intelligence for DevSecOps teams and autonomous AI agents.
Bind your Lemon Squeezy license key to your local hardware seat via the CLI:
corvixmcp activate <YOUR_LICENSE_KEY>