Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

MCP server setup (coding agents)

The same engine is a hosted MCP server any MCP-capable agent (Claude Code, Cursor, and friends) can call before the PR exists. All you need is a free Client ID: 

claude mcp add --transport http audytx https://audytx.com/mcp \
  --header "X-Client-ID: YOUR_CLIENT_ID"

Clients and gateways that inject standard OAuth-style headers can send the same Client ID as Authorization: Bearer YOUR_CLIENT_ID instead; both carriers are accepted. Auth failures return HTTP 401 with a WWW-Authenticate header per the MCP authorization spec, with RFC 9728 metadata served at /.well-known/oauth-protected-resource. Setup guides for Cursor, VS Code, JetBrains, Claude Desktop, and any stdio-only client (via mcp-remote) live at audytx.com/mcp#setup.

The core tools:

  • scan_terraform — pass all your Terraform files (.tf, .tf.json, .tfvars, .tfvars.json), get findings with file:line evidence, severity, fix snippets, and the findings the context layer suppressed as false positives, each with its rationale. The response also carries a per-framework compliance-coverage summary. Pass the complete file set: cross-resource reasoning (IAM trust graphs, attack paths, DLQ identity) can't see files you omit.
  • autofix_terraform — audytx applies its sound fixes server-side (only precisely line-anchored replacements, held to the same bar as GitHub one-click suggestions), re-scans, and loops until nothing auto-fixable remains. Returns the fixed file contents plus the findings left for the agent to fix itself.
  • scan_cloudformation / autofix_cloudformation — the same scan and autofix for CloudFormation templates (JSON or YAML with short tags, SAM, and CDK-synthesized output), plus dry_run variants of both autofix tools. Findings carry the Terraform rule ids plus a few CloudFormation-only ones, the same file:line evidence, and the same context-aware suppression as the Terraform path.

Limits: 2,000 files / 50 MB per call. File contents are processed in memory and are not stored. The findings (rule, message, resource, file and line) are kept for 90 days; see the Privacy Policy. scan_terraform also accepts an optional plan argument (your terraform show -json output) for the plan enrichment. Handy when the agent has already run a plan.