io.github.shieldly-io/mcp
AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.
Open source Open in the app JSON README (API)
About
AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.
Details
- Kind
- MCP servers
- Topic
- Cloud & DevOps
- Publisher
- shieldly-io
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 1.0.1
- Last push
- 2026-07-18T08:35:08Z
- Repository state
- ativo
- Language
- JavaScript
- License
- MIT
- Added
- 2026-08-29 04:01:23
- Updated
- 2026-08-29 04:01:23
- Origin id
io.github.shieldly-io/mcp
README
# @shieldly/mcp
**AI-Powered Security Analysis for AWS — official MCP server.**
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor,
etc.) two tools to analyze AWS IAM policies and CloudFormation templates for
security risks — privilege escalation paths, wildcards, and other
over-permissive access. Powered by [Shieldly](https://www.shieldly.io).
## Setup
Add to your MCP client config (e.g. Claude Desktop's `claude_desktop_config.json`,
or Claude Code's `.mcp.json`):
```json
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"]
}
}
}
```
## Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set `SHIELDLY_API_KEY`:
```json
{
"mcpServers": {
"shieldly": {
"command": "npx",
"args": ["-y", "@shieldly/mcp"],
"env": { "SHIELDLY_API_KEY": "sk_live_..." }
}
}
}
```
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
## Tools
### `analyze_iam_policy`
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description |
| --- | --- | --- |
| `policy` | string | The IAM policy JSON as a string. |
| `policyType` | `identity` \| `cross_account` | Defaults to `identity`. |
### `analyze_cloudformation_template`
Analyzes a CloudFormation template — extracts IAM roles/policies and flags
over-permissive access.
| Argument | Type | Description |
| --- | --- | --- |
| `template` | string | The CloudFormation template JSON as a string. |
## Also available as
- [CLI](https://www.npmjs.com/package/@shieldly/cli)
- [VS Code extension](https://marketplace.visualstudio.com/items?itemName=shieldly.shieldly)
- [GitHub Action](https://github.com/shieldly-io/action)
- [CDK Guard](https://www.npmjs.com/package/@shieldly/cdk-guard)
- [Web app](https://www.shieldly.io)
## License
MIT