AWS SRA Verify MCP Server
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AWS_PROFILE | No | The AWS CLI profile to use for credentials. Optional; if not set, uses the default credential chain. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_checks_by_account_typeA | Get all checks filtered by account type. Args: account_type: Filter by account type ('application', 'audit', 'log-archive', 'management', 'all') Returns: Dictionary mapping check IDs to check information |
| list_servicesA | Get all services supported by SRA Verify. Returns: Dictionary containing the list of supported services. |
| list_checks_by_serviceA | Get all checks filtered by service. Args: service: Filter by service name (e.g., 'GuardDuty', 'CloudTrail', 'IAM') Returns: Dictionary mapping check IDs to check information for the specified service |
| describe_checkA | Get detailed information about a specific check. Args: check_id: The check ID (e.g., 'SRA-GUARDDUTY-01') Returns: Dictionary with check details including name, service, account_type, description, severity |
| run_checkA | Run a security check and return results. Args: check_id: The check ID to run (e.g., 'SRA-GUARDDUTY-01') audit_accounts: List of AWS accounts used for Audit/Security Tooling (required for some checks) log_archive_accounts: List of AWS accounts used for Logging (required for some checks) role_arn: Optional IAM role ARN to assume for running the check region: Optional AWS region to target (if not specified, checks all regions) Returns: Dict with findings and summary, or error if check fails. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 5 tools
Each tool has a distinct purpose: describing a specific check, listing checks by account type, listing checks by service, listing all services, and running a check. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern using snake_case (e.g., describe_check, list_checks_by_account_type). No deviations.
Five tools is well-scoped for a security verification server, covering needs to list, describe, and run checks without excess or deficiency.
The set covers listing (by service and account type), describing, and running checks. A minor gap is the lack of a dedicated tool to retrieve historical results, but the core lifecycle is covered.