Skip to main content
Glama
awslabs

AWS SRA Verify MCP Server

Official
by awslabs

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
AWS_PROFILENoThe AWS CLI profile to use for credentials. Optional; if not set, uses the default credential chain.

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tools
{
  "listChanged": false
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
list_checks_by_account_typeA

Get all checks filtered by account type.

Args: account_type: Filter by account type ('application', 'audit', 'log-archive', 'management', 'all')

Returns: Dictionary mapping check IDs to check information

list_servicesA

Get all services supported by SRA Verify.

Returns: Dictionary containing the list of supported services.

list_checks_by_serviceA

Get all checks filtered by service.

Args: service: Filter by service name (e.g., 'GuardDuty', 'CloudTrail', 'IAM')

Returns: Dictionary mapping check IDs to check information for the specified service

describe_checkA

Get detailed information about a specific check.

Args: check_id: The check ID (e.g., 'SRA-GUARDDUTY-01')

Returns: Dictionary with check details including name, service, account_type, description, severity

run_checkA

Run a security check and return results.

Args: check_id: The check ID to run (e.g., 'SRA-GUARDDUTY-01') audit_accounts: List of AWS accounts used for Audit/Security Tooling (required for some checks) log_archive_accounts: List of AWS accounts used for Logging (required for some checks) role_arn: Optional IAM role ARN to assume for running the check region: Optional AWS region to target (if not specified, checks all regions)

Returns: Dict with findings and summary, or error if check fails.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/awslabs/sra-verify-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server