back to home

mondoohq / mql

open source, cloud-native, graph-based query language

391 stars
34 forks
314 issues
GoMakefileTypeScript

AI Architecture Analysis

This repository is indexed by RepoMind. By analyzing mondoohq/mql in our AI interface, you can instantly generate complete architecture diagrams, visualize control flows, and perform automated security audits across the entire codebase.

Our Agentic Context Augmented Generation (Agentic CAG) engine loads full source files into context on-demand, avoiding the fragmentation of traditional RAG systems. Ask questions about the architecture, dependencies, or specific features to see it in action.

Source files are only loaded when you start an analysis to optimize performance.

Embed this Badge

Showcase RepoMind's analysis directly in your repository's README.

[![Analyzed by RepoMind](https://img.shields.io/badge/Analyzed%20by-RepoMind-4F46E5?style=for-the-badge)](https://repomind.in/repo/mondoohq/mql)
Preview:Analyzed by RepoMind

Repository Overview (README excerpt)

Crawler view

MQL **Open source, cloud-native asset inventory and discovery** MQL is a cloud-native tool for querying your entire infrastructure. Built upon Mondoo's security data fabric, it answers thousands of questions about your infrastructure and integrates with over 1,300 resources across cloud accounts, Kubernetes, containers, services, VMs, APIs, and more. Here are a few more examples: :books: To learn more, read the MQL docs. Installation Install with our installation script: **Linux and macOS** **Windows** If you prefer manual installation, you can find the packages in our GitHub releases. Interactive shell The easiest way to explore MQL is to use our interactive shell, which has auto-complete to guide you: Once inside the shell, you can enter MQL queries like this: To learn more, use the command. To exit, either press CTRL + D or type . You can run the shell against local and remote targets like , , , and many more. Run to see a full list of supported providers. Run simple queries To run standalone queries in your shell, use the command: For example, this runs a query against your local system: For automation, it is often helpful to convert the output to JSON. Use or : You can then pipe the output to jq or other applications. Explore your infrastructure in Mondoo Platform​ To more easily explore your infrastructure, sign up for a Mondoo Platform account. Mondoo's web-based console allows you to navigate, search, and arrange all of your assets. To get started, contact us. To learn about Mondoo Platform, read the Mondoo Platform docs or visit mondoo.com. Supported targets | Target | Provider | Example | | ----------------------------- | -------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | | AI/MCP servers | | | | Ansible playbooks | | | | Arista network devices | | | | Atlassian organizations | | | | AWS accounts | | | | AWS CloudFormation templates | | | | AWS EC2 EBS snapshot | | | | AWS EC2 EBS volume | | | | AWS EC2 Instance Connect | | | | AWS EC2 instances | | | | Cisco network devices | | | | Cisco Catalyst Center | | | | Cloudflare accounts | | | | Confluence users | | | | Container images | , | | | Container registries | | | | Dockerfiles | | | | DNS records | | | | F5 BIG-IP load balancers | | | | Fortinet FortiOS devices | | | | GitHub organizations | | | | GitHub repositories | | | | GitLab groups | | | | Google Cloud projects | | | | Google Workspace | | | | OPC UA IoT devices | | | | IP address information | | | | IPMI-enabled devices | | | | Jira projects | | | | Juniper Junos devices | | | | Kubernetes cluster nodes | , | | | Kubernetes clusters | | | | Kubernetes manifests | | | | Kubernetes workloads | | | | Linux hosts | , | or | | macOS hosts | , | or | | Microsoft 365 tenants | | | | Microsoft Azure instances | | | | Microsoft Azure subscriptions | | | | Network scanning | | | | Okta org | | | | Oracle Cloud Interface (OCI) | | | | Palo Alto Networks PAN-OS | | | | Running containers | | | | Shodan search engine | | | | Slack team | | | | Snowflake data warehouse | | | | SSL certificates on websites | | | | Tailscale network | | | | Terraform HCL | | | | Terraform plan | | | | Terraform state | | | | UniFi network controllers | | | | Vagrant virtual machines | | | | VMware Cloud Director | | | | VMware vSphere | | | | Windows hosts | , , | , or | | YARA rule scanning | | | What's next? There are so many things MQL can do! Gather information about your infrastructure, find tool-sprawl across systems, run incident response, and share data with auditors… MQL is nearly limitless in capabilities. Explore: • MQL docs • MQL introduction • MQL language reference • cnspec, our open source, cloud-native security scanner Join the community! Our goal is to become the API for your entire infrastructure. Join our community today and let's grow it together! Development See our development documentation for information on building and contributing to MQL. Legal • **Copyright:** 2018-2026, Mondoo, Inc. • **License:** BUSL 1.1 • **Authors:** Christoph Hartmann, Dominik Richter