Orca Security MCP MCP Server

About

## Orca Security MCP Server: Agentless Cloud Security Platform The **Orca Security MCP Server** integrates agentless cloud security into Google Antigravity, enabling comprehensive visibility into cloud workloads, vulnerabilities, and misconfigurations without deploying agents. ### Why Orca Security MCP? - **Agentless scanning** - Complete cloud visibility without installing agents - **Unified platform** - CWPP, CSPM, and CIEM in one solution - **Risk prioritization** - Context-aware risk scoring for remediation - **Multi-cloud support** - AWS, Azure, GCP, and Alibaba Cloud - **Attack path analysis** - Visualize potential attack vectors ### Key Features #### 1. Asset Discovery ```python # Get cloud asset inventory assets = await mcp.call("orca", "list_assets", { "cloud_provider": "aws", "asset_types": ["compute", "storage", "database"], "include_risk_score": True }) for asset in assets: print(f"{asset[\"type\"]}: {asset[\"name\"]}") print(f" Risk Score: {asset[\"risk_score\"]}/100") print(f" Region: {asset[\"region\"]}") ``` #### 2. Vulnerability Management ```python # Get vulnerabilities with context vulns = await mcp.call("orca", "get_vulnerabilities", { "severity": ["critical", "high"], "exploitable": True, "internet_facing": True }) for vuln in vulns: print(f"{vuln[\"cve_id\"]}: {vuln[\"package\"]}") print(f" Asset: {vuln[\"asset_name\"]}") print(f" Attack Path: {vuln[\"has_attack_path\"]}") print(f" Priority: {vuln[\"priority_score\"]}") ``` #### 3. Attack Path Analysis ```python # Get attack paths to crown jewels paths = await mcp.call("orca", "get_attack_paths", { "target_type": "database", "max_steps": 5 }) for path in paths: print(f"Attack Path: {path[\"name\"]}") for step in path["steps"]: print(f" -> {step[\"asset\"]}: {step[\"vulnerability\"]}") ``` #### 4. Compliance Assessment ```python # Run compliance check compliance = await mcp.call("orca", "compliance_report", { "frameworks": ["CIS", "SOC2", "PCI-DSS"], "scope": "all" }) for framework in compliance["results"]: print(f"{framework[\"name\"]}: {framework[\"score\"]}%") print(f" Passed: {framework[\"passed\"]}, Failed: {framework[\"failed\"]}") ``` ### Configuration ```json { "mcpServers": { "orca": { "command": "npx", "args": ["-y", "@anthropic/mcp-orca"], "env": { "ORCA_API_TOKEN": "your-api-token", "ORCA_API_URL": "https://api.orcasecurity.io" } } } } ``` ### Use Cases **Cloud Security Posture**: Get complete visibility without agent deployment overhead. **Risk-Based Remediation**: Focus on vulnerabilities with actual attack paths. **Compliance Monitoring**: Maintain continuous compliance across cloud environments. **Multi-Cloud Security**: Unified security view across all cloud providers. The Orca Security MCP Server enables comprehensive agentless cloud security.

Installation

{
  "mcpServers": {
    "orca": {}
  }
}

How to Use