MCP Cloud Services Server

Instructions

Implementation Reference

• src/tools/security.ts:126-154 (handler)

  The core handler logic for the 'check_compliance' tool. It extracts the standard parameter, constructs a ComplianceCheck object with sample findings, and returns a formatted response using Formatters.formatComplianceCheck.

  case 'check_compliance': {
    const standard = (params.standard as string) || 'general';
  
    const complianceCheck: ComplianceCheck = {
      provider,
      standard,
      compliant: false,
      findings: [
        {
          rule: 'Encryption at rest enabled',
          status: 'fail',
          description: 'Some resources do not have encryption enabled',
        },
        {
          rule: 'Public access restricted',
          status: 'warning',
          description: 'Some resources may have public access',
        },
        {
          rule: 'MFA enabled',
          status: 'pass',
          description: 'Multi-factor authentication is configured',
        },
      ],
      score: 65,
    };
  
    return Formatters.formatComplianceCheck(complianceCheck);
  }

• src/tools/security.ts:25-45 (schema)

  The tool schema definition for 'check_compliance', including name, description, and inputSchema specifying required 'provider' and optional 'standard'.

  {
    name: 'check_compliance',
    description: 'Check compliance with security standards (CIS, SOC2, etc.)',
    inputSchema: {
      type: 'object',
      properties: {
        provider: {
          type: 'string',
          enum: ['aws', 'azure', 'gcp'],
          description: 'Cloud provider',
        },
        standard: {
          type: 'string',
          enum: ['cis', 'soc2', 'pci-dss', 'hipaa', 'general'],
          description: 'Compliance standard',
          default: 'general',
        },
      },
      required: ['provider'],
    },
  },

• src/server.ts:19-27 (registration)

  Registration of all MCP tools by combining arrays from various modules, including securityTools which contains the 'check_compliance' tool schema.

  const allTools = [
    ...awsTools,
    ...azureTools,
    ...gcpTools,
    ...resourceManagementTools,
    ...costAnalysisTools,
    ...monitoringTools,
    ...securityTools,
  ];

• src/server.ts:76-77 (registration)

  Tool call dispatching logic that routes requests for security tools (matching names in securityTools) to the handleSecurityTool function.

  } else if (securityTools.some((t) => t.name === name)) {
    result = await handleSecurityTool(name, args || {});