CloudNex MCP Server

Enterprise MCP server exposing CloudNex cloud security data to AI assistants via the Model Context Protocol.

Features

• 21 read-only tools for scans, findings, providers, compliance, overviews, users, roles, and resources
• Hub catalog tools for compliance frameworks and security check metadata (no auth)
• 2 MCP resources for quick scan and findings summaries
• stdio mode for Cursor / Claude Desktop
• HTTP mode with per-request API key override via headers
• JSON:API backend with Authorization: Api-Key {prefix.key} authentication

Quick Start

cd cloudnex_mcp
cp .env.example .env
# Edit .env with your CLOUDNEX_API_URL and CLOUDNEX_API_KEY

pip install -e ".[dev]"
python run_server.py          # stdio MCP
python run_http_server.py     # HTTP on port 8001

Docker

docker compose up --build
curl http://localhost:8001/health

Cursor Configuration

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "cloudnex": {
      "command": "mcp-cloudnex",
      "env": {
        "CLOUDNEX_API_URL": "https://your-instance.com/api/v1",
        "CLOUDNEX_API_KEY": "cn_your-prefix.your-key"
      }
    }
  }
}

Or using the run script:

{
  "mcpServers": {
    "cloudnex": {
      "command": "python",
      "args": ["/path/to/cloudnex_mcp/run_server.py"],
      "env": {
        "CLOUDNEX_API_URL": "https://your-instance.com/api/v1",
        "CLOUDNEX_API_KEY": "cn_your-prefix.your-key"
      }
    }
  }
}

Claude Desktop Configuration

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "cloudnex": {
      "command": "mcp-cloudnex",
      "env": {
        "CLOUDNEX_API_URL": "https://your-instance.com/api/v1",
        "CLOUDNEX_API_KEY": "cn_your-prefix.your-key",
        "CLOUDNEX_HUB_URL": "https://hub.cloudnex.com"
      }
    }
  }
}

HTTP API

Pass API key per request:

X-API-Key: cn_prefix.key
# or
Authorization: Api-Key cn_prefix.key

Environment Variables

Testing

pip install -e ".[dev]"
pytest tests/ -q

# Include integration tests (live backend):
pytest tests/ -m integration

Full end-to-end guide (API key, Cursor, Claude Desktop, NEXA chat): docs/TESTING.md

RBAC

All backend tools respect CloudNex tenant RBAC. API keys are tenant-scoped; data visibility depends on role permissions and provider group assignments. Use get_my_profile to verify the authenticated context.