Integrate
MCP tool reference
The typed interface your agent uses to fork infrastructure, explore changes, and inspect their consequences across the documented lenses.
Using the tools
Emfirge runs as an MCP server that your agent invokes over the local stdio connection. Each tool below is a registered operation; select its linked page for the full parameter and response details.
Persist the analysis_id and branch_id returned by your own calls. Do not substitute IDs from screenshots or examples. A compatible engine is required for branch operations.
Setup
| Tool | What it does |
|---|---|
| emfirge_setup_help | Return the CloudFormation setup link and read-only role instructions. |
| emfirge_scan | Collect an AWS account and region and return an analysis_id. |
Scan and inspect
| Tool | What it does |
|---|---|
| emfirge_get_findings | Retrieve findings from a scan, optionally filtered by severity. |
| emfirge_attack_paths | Read modeled internet-to-internal paths, critical resources, orphans, and graph statistics. |
| emfirge_simulate_breach | Evaluate a graph-based scenario without executing a real exploit. |
Branch lifecycle
| Tool | What it does |
|---|---|
| emfirge_create_branch | Create an isolated branch from a completed analysis. |
| emfirge_apply_change | Append an add, modify, or delete mutation to the branch model. |
| emfirge_branch_diff | Compare a branch against its base: resources, relationships, findings, and reachability. |
| emfirge_list_branches | List branches, optionally filtered by their base analysis. |
| emfirge_rollback_branch | Remove the most recent change from a branch in the current backend. |
| emfirge_discard_branch | Mark a branch as discarded without changing AWS. |
Analysis and verdict
| Tool | What it does |
|---|---|
| emfirge_branch_verdict | Evaluate the branch with native findings, optional scanner results, and cost notes. |
| emfirge_verify_fix | Simulate one supported rule remediation against an analysis. Not every rule has a fix mutation. |
| emfirge_compare_branches | Compare modeled changes and outcomes for one or more branches. |
Compliance
| Tool | What it does |
|---|---|
| emfirge_check_compliance | Retrieve mapped CIS AWS Foundations 1.5 or SOC 2 control results. These checks do not constitute certification. |
Based on the Emfirge MCP and engine source.View source