Which integrations are available for this server?

Provides automated security scanning for AWS accounts and services, including 19 security modules, risk scoring, and multi-account support.

How do I use aws-security-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@aws-security-mcp Scan my AWS account for security vulnerabilities" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

aws-security-mcp

by jowhee327

Overview Schema Related Servers Score Discussions

TypeScript

Hybrid

aws-security-mcp

MCP server for automated AWS security scanning — 19 modules, risk scoring, zero write operations.

License: MIT Node >= 18 MCP Protocol

Features

19 Security Scan Modules — Security Hub, GuardDuty, Inspector, Trusted Advisor, Config Rules, Access Analyzer, Patch Compliance, and more
Risk Scoring — every finding scored 0-10 with severity (CRITICAL/HIGH/MEDIUM/LOW) and priority (P0-P3)
100% Read-Only — uses only Describe/Get/List API calls; never modifies your AWS resources
Multi-Account Support — scan all accounts in an AWS Organization via org_mode with cross-account role assumption
Parallel Execution — all modules run concurrently via Promise.allSettled
Report Generation — Markdown, professional HTML, MLPS Level 3 compliance, and HW Defense reports
React Dashboard — local or S3-hosted dashboard with 30-day trend charts
MCP Resources — embedded security rules and risk scoring model documentation
MCP Prompts — pre-built workflows for full scans and finding analysis
China Region Support — full support for aws-cn partition
CloudFormation StackSet Template — one-click deployment of cross-account audit roles

Deployment Prerequisites

Before installing, make sure you have the following in place. The agent is intentionally lightweight — nothing needs to be installed on the AWS resources being scanned (no agent on EC2, no daemon in VPC, no changes to workloads).

#	Item	Purpose	Notes
1	A host to run the MCP server	Runs the Node.js process that performs the scans	Any of: a developer workstation (macOS / Linux / Windows), a small EC2 instance (t3.small is plenty), a bastion host, or a CI runner. Needs outbound HTTPS to AWS API endpoints.
2	Node.js ≥ 18	Runtime for the MCP server	`node --version` to verify
3	An MCP-capable AI client	Drives the scan via natural language and interprets the results	Any one of: Kiro CLI, Claude Code, Cursor, or any other MCP 1.12-compatible client
4	AWS credentials	Read-only access to the target account(s)	IAM user, IAM role (EC2 instance profile / ECS task role), AWS SSO session, or named CLI profile — anything the AWS SDK credential chain can resolve
5	An IAM identity with scan permissions	Attached to the credential in (4)	Use `SecurityAudit` managed policy, or the minimal custom policy in Recommended IAM Policy below
6	(optional) Cross-account audit role	Needed only for multi-account / organization-wide scans	Deploy the CloudFormation StackSet template via `get_setup_template` — creates `AWSSecurityMCPAudit` in every member account in one shot

What is NOT required:

❌ No agent / daemon on your EC2 instances, ECS tasks, or Lambda functions
❌ No changes to VPC, Security Groups, or networking on the scanned resources
❌ No AWS Marketplace subscription or commercial license
❌ No outbound connectivity from the scanner to anywhere other than AWS API endpoints (no telemetry, no phone-home)
❌ No AWS root user (the scanner refuses to run under root credentials)

Reference deployment topology

The most common customer deployment is a single small EC2 instance in the AWS account to be audited, reached over SSM Session Manager or SSH, with the MCP client (Kiro / Claude Code / Cursor) running on the operator's laptop and the MCP server running on the EC2:

┌──────────────────────────┐          ┌─────────────────────────────┐
│  Operator's laptop       │          │  Target AWS account         │
│                          │          │                             │
│  Kiro CLI / Claude Code  │  MCP /   │  EC2 (t3.small, IAM role)   │
│  / Cursor                │  stdio   │  └─ aws-security-mcp        │
│                          │ ◄──────► │      (Node.js MCP server)   │
│                          │   SSM    │                             │
│                          │          │      ▼ read-only API calls  │
│                          │          │  IAM · EC2 · S3 · RDS · ... │
└──────────────────────────┘          └─────────────────────────────┘

For single-account work, running the MCP server directly on the operator's laptop (steps 1–3 below) is just as valid — the architecture is the same, only the host changes.

Quick Start

1. Install

Install the published package from npm (recommended for end users):

npm install -g aws-security-mcp

Verify the binary is on your PATH:

aws-security-mcp --version
# 0.7.5

git clone https://github.com/jowhee327/aws-security-agent.git
cd aws-security-agent
npm install
npm run build
npm link   # makes `aws-security-mcp` resolvable on your PATH

2. Configure AWS Credentials

The server uses the standard AWS SDK credential chain. Any of the following will work:

# Environment variables
export AWS_ACCESS_KEY_ID=AKIA...
export AWS_SECRET_ACCESS_KEY=...
export AWS_REGION=ap-northeast-1

# Or use an AWS profile
export AWS_PROFILE=your-profile

# Or run on an EC2 instance / ECS task with an IAM role attached

See Recommended IAM Policy below for the minimum permissions required.

3. Configure Your AI Tool

Add the MCP server to your AI tool's configuration:

Kiro

.kiro/settings/mcp.json:

{
  "mcpServers": {
    "aws-security": {
      "command": "aws-security-mcp",
      "args": ["--region", "ap-northeast-1"]
    }
  }
}

Claude Code

.claude/settings.json:

{
  "mcpServers": {
    "aws-security": {
      "command": "aws-security-mcp",
      "args": ["--region", "ap-northeast-1"]
    }
  }
}

Cursor

Add in Cursor MCP settings:

{
  "mcpServers": {
    "aws-security": {
      "command": "aws-security-mcp",
      "args": ["--region", "ap-northeast-1"]
    }
  }
}

4. Use

Ask your AI tool to run a security scan. The recommended approach is scan_and_report, which runs all scanners and generates every report type in a single call — no large data transfer back to the AI tool:

"Use scan_and_report to run a full AWS security scan"

Or run individual steps for more control:

"Run a full AWS security scan and generate a report"

You can also use the built-in security-scan prompt for a guided workflow.

For multi-account scanning across an AWS Organization:

"Run a full scan across all org accounts using org_mode"

Available Tools

Tool	Description
`scan_all`	Run all 19 security scanners in parallel (supports org_mode)
`detect_services`	Detect enabled AWS security services and assess maturity
`scan_secret_exposure`	Check Lambda env vars and EC2 userData for exposed secrets
`scan_ssl_certificate`	Check ACM certificates for expiry and failed status
`scan_dns_dangling`	Detect dangling DNS records (subdomain takeover risk)
`scan_network_reachability`	Analyze true network reachability (SG + NACL rules)
`scan_iam_privilege_escalation`	Detect IAM privilege escalation paths
`scan_public_access_verify`	Verify actual public accessibility of resources
`scan_tag_compliance`	Check resources for required tags
`scan_idle_resources`	Find unused/idle resources
`scan_disaster_recovery`	Assess disaster recovery readiness
`scan_security_hub_findings`	Aggregate findings from AWS Security Hub
`scan_guardduty_findings`	Check if GuardDuty is enabled (findings via Security Hub)
`scan_inspector_findings`	Check if Inspector is enabled (findings via Security Hub)
`scan_trusted_advisor_findings`	Aggregate findings from AWS Trusted Advisor
`scan_config_rules_findings`	Check if Config is enabled (findings via Security Hub)
`scan_access_analyzer_findings`	Check if Access Analyzer is enabled (findings via Security Hub)
`scan_patch_compliance_findings`	Aggregate findings from SSM Patch Compliance
`scan_imdsv2_enforcement`	Check EC2 instances for IMDSv2 enforcement
`scan_waf_coverage`	Check internet-facing ALBs for WAF Web ACL protection
`scan_group`	Run a predefined group of scanners for a specific scenario
`list_groups`	List available scan groups
`list_modules`	List available scan modules with descriptions
`list_org_accounts`	List all accounts in AWS Organization
`generate_report`	Generate a Markdown report from scan results
`generate_html_report`	Generate a professional HTML report
`generate_mlps3_report`	Generate a MLPS Level 3 compliance report
`generate_mlps3_html_report`	Generate a MLPS Level 3 HTML compliance report
`generate_hw_defense_report`	Generate an HW Defense HTML report (SOP-organized, findings grouped by CVE/control-ID)
`generate_maturity_report`	Generate a security maturity assessment
`scan_and_report`	Run full scan + generate all reports in one step. Saves HTML/MLPS/HW/MD reports to `~/.aws-security/reports/`. Avoids large data transfer
`save_results`	Save scan results for the dashboard
`get_setup_template`	Get CloudFormation StackSet template for cross-account audit role

All tools accept an optional region parameter (defaults to the server's configured region).

Recommended IAM Policy

Attach this policy to the IAM user or role running the scanner. All actions are read-only.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "SecurityScannerReadOnly",
      "Effect": "Allow",
      "Action": [
        "access-analyzer:ListAnalyzers",
        "access-analyzer:ListFindingsV2",

        "acm:DescribeCertificate",
        "acm:ListCertificates",

        "config:DescribeComplianceByConfigRule",
        "config:DescribeConfigurationRecorders",
        "config:GetComplianceDetailsByConfigRule",

        "elasticloadbalancing:DescribeLoadBalancers",

        "ec2:DescribeAddresses",
        "ec2:DescribeInstanceAttribute",
        "ec2:DescribeInstances",
        "ec2:DescribeNetworkAcls",
        "ec2:DescribeNetworkInterfaces",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeSnapshots",
        "ec2:DescribeSnapshotAttribute",
        "ec2:DescribeVolumes",
        "ec2:GetEbsEncryptionByDefault",

        "guardduty:GetDetector",
        "guardduty:ListDetectors",
        "guardduty:ListFindings",
        "guardduty:GetFindings",

        "iam:GetAccountSummary",
        "iam:ListUsers",
        "iam:ListRoles",
        "iam:ListAccessKeys",
        "iam:GetAccessKeyLastUsed",
        "iam:ListAttachedUserPolicies",
        "iam:ListAttachedRolePolicies",
        "iam:ListUserPolicies",
        "iam:ListRolePolicies",
        "iam:GetUserPolicy",
        "iam:GetRolePolicy",
        "iam:GetPolicy",
        "iam:GetPolicyVersion",

        "inspector2:ListFindings",

        "lambda:ListFunctions",
        "lambda:GetFunction",

        "organizations:ListAccounts",

        "rds:DescribeDBInstances",

        "route53:ListHostedZones",
        "route53:ListResourceRecordSets",

        "s3:GetBucketAcl",
        "s3:GetBucketLocation",
        "s3:GetBucketPolicyStatus",
        "s3:GetBucketPublicAccessBlock",
        "s3:GetBucketVersioning",
        "s3:GetBucketReplication",
        "s3:GetBucketTagging",
        "s3:ListAllMyBuckets",

        "securityhub:DescribeHub",
        "securityhub:GetFindings",

        "ssm:DescribeInstanceInformation",
        "ssm:DescribeInstancePatchStates",

        "sts:GetCallerIdentity",

        "support:DescribeTrustedAdvisorChecks",
        "support:DescribeTrustedAdvisorCheckResult",

        "wafv2:GetWebACL",
        "wafv2:GetWebACLForResource"
      ],
      "Resource": "*"
    }
  ]
}

Scan Modules

Module	What It Checks	Risk Score Range
Service Detection	Enabled security services (Security Hub, GuardDuty, Inspector, Config, CloudTrail) and maturity level	5.0 - 7.5
Secret Exposure	Lambda env vars and EC2 userData for exposed secrets (AWS keys, private keys, passwords)	7.0 - 9.5
SSL Certificate	ACM certificate expiry, failed status, upcoming renewals	5.5 - 9.0
Dangling DNS	Route53 CNAME records pointing to non-existent resources (subdomain takeover)	7.0 - 8.5
Network Reachability	True network reachability combining Security Group + NACL rules for public EC2 instances	5.5 - 9.5
IAM Privilege Escalation	Privilege escalation paths via policy manipulation, role creation, or service abuse	7.0 - 9.5
Public Access Verify	Actual public accessibility of resources marked as public (S3 HTTP, RDS DNS)	7.0 - 9.0
Tag Compliance	Required tags (Environment, Project, Owner) on EC2, RDS, S3 resources	3.0 - 5.0
Idle Resources	Unused resources (unattached EBS, unused EIPs, stopped instances, unused SGs)	3.0 - 5.0
Disaster Recovery	RDS Multi-AZ & backups, EBS snapshot coverage, S3 versioning & replication	4.0 - 7.5
Config Rules	AWS Config Rules compliance status	3.0 - 9.5
Access Analyzer	IAM Access Analyzer external access findings	3.0 - 9.5
Patch Compliance	SSM Patch Manager compliance status for managed instances	3.0 - 9.5
IMDSv2 Enforcement	EC2 instances not enforcing IMDSv2 (HttpTokens != required)	7.5
WAF Coverage	Internet-facing ALBs without WAF Web ACL protection	7.5
Security Hub Findings	AWS Security Hub (FSBP, CIS, PCI DSS)	3.0 - 9.5
GuardDuty Findings	Amazon GuardDuty threat detection	3.0 - 9.5
Inspector Findings	Amazon Inspector vulnerability scanning	3.0 - 9.5
Trusted Advisor Findings	AWS Trusted Advisor security checks (requires Business/Enterprise Support)	5.5 - 8.0

Risk Scoring

Score	Severity	Priority
9.0 - 10.0	CRITICAL	P0
7.0 - 8.9	HIGH	P1
4.0 - 6.9	MEDIUM	P2
0.0 - 3.9	LOW	P3

Scan Groups

Pre-defined scanner groupings for common scenarios:

Group	Description	Modules
`mlps3_precheck`	GB/T 22239-2019 等保三级预检	17 modules
`hw_defense`	护网蓝队加固 — attacker-focused hardening	11 modules
`exposure`	公网暴露面评估	8 modules
`data_encryption`	数据加密审计	2 modules
`least_privilege`	最小权限审计	3 modules
`log_integrity`	日志完整性审计	2 modules
`disaster_recovery`	灾备评估	2 modules
`idle_resources`	闲置资源清理	2 modules
`tag_compliance`	资源标签合规	1 module
`new_account_baseline`	新账户基线检查	7 modules
`aggregation`	安全服务聚合	7 modules

Use list_groups to see all available groups with their module lists.

Multi-Account Support

For scanning across an AWS Organization:

Deploy the audit role — Use get_setup_template to retrieve the CloudFormation StackSet template, then deploy it from your Management Account to create the AWSSecurityMCPAudit role in all member accounts.
Run with org_mode — Pass org_mode: true to scan_all or scan_group. The scanner will discover accounts via organizations:ListAccounts and assume the audit role in each.
Optional filtering — Pass account_ids to scan specific accounts instead of the full organization.

The StackSet templates are available in the templates/ directory in both YAML and JSON formats.

Output Format

Scan Results (JSON)

Each scan tool returns structured JSON:

{
  "module": "network_reachability",
  "status": "success",
  "resourcesScanned": 12,
  "findingsCount": 3,
  "scanTimeMs": 1250,
  "findings": [
    {
      "severity": "CRITICAL",
      "title": "EC2 instance i-abc123 has SSH (22) reachable from 0.0.0.0/0",
      "resourceType": "AWS::EC2::Instance",
      "resourceId": "i-abc123",
      "resourceArn": "arn:aws:ec2:ap-northeast-1:123456789012:instance/i-abc123",
      "region": "ap-northeast-1",
      "description": "...",
      "impact": "...",
      "riskScore": 9.0,
      "remediationSteps": ["..."],
      "priority": "P0"
    }
  ]
}

Markdown Report

The generate_report tool produces a Markdown report with:

Executive Summary — account, region, duration, finding counts by severity
Findings by Severity — grouped and sorted by risk score
Scan Statistics — per-module resource counts and status
Recommendations — prioritized action items

HW Defense Report

The generate_hw_defense_report tool produces a dedicated HTML report for 护网 (HW) blue-team hardening exercises. Key features:

SOP checklist organization — findings are grouped by standard operating procedure categories rather than by scanner module
Grouped findings — duplicate and related findings are collapsed by CVE ID, control ID, or title, reducing noise
Attacker-focused perspective — the hw_defense scan group (11 modules) prioritizes checks that mirror real-world red-team attack chains: privilege escalation, network exposure, secret leakage, missing detection services, and patch gaps
Collapsible sections — categories default to collapsed for quick executive overview, expandable for detailed review

License

MIT

Install Server

license - permissive license

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Latest Blog Posts

Lightport: Open-Sourcing Glama's AI Gateway
By punkpeye on April 27, 2026.
open source
OpenAI
Tool Definition Quality Score (TDQS)
By punkpeye on April 3, 2026.
mcp
The Hackers Who Tracked My Sleep Cycle
By punkpeye on March 26, 2026.
security

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/jowhee327/aws-security-agent'

If you have feedback or need assistance with the MCP directory API, please join our Discord server