cirrusmapper

Introduction

An open-source map of your AWS account for the people and AI agents building on it.

CirrusMapper maps your AWS account into a Neo4j graph and serves it over MCP, so coding agents can check resources, relationships and permissions before they change anything. Everything runs in infrastructure you control.

What runs

  • Cartography scans the account with a read-only IAM role and writes what it finds to the graph.
  • Neo4j holds the graph: a container you run, or a Neo4j Aura instance you already have.
  • MCP server: the official Neo4j MCP server over HTTP. Agents get read-only Cypher tools.
  • Dashboard (optional): an infrastructure map and resource browser for the same graph.

Status

CirrusMapper is being rebuilt as a fully self-hosted, open-source tool.

What works today

The whole stack runs on one machine with Docker Compose. The CloudFormation template that deploys it into your AWS account is in progress; see Deploy to AWS.

On this page