aws-security-mcp
Related Servers
Alternatives to aws-security-mcp
No user-submitted related servers found.
Related Servers
- AlicenseAqualityAmaintenanceOpen-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP server - Prowler and Wiz require paid SaaS.7165 PyPI72MIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server for automated AWS security scanning. It detects over-privileged IAM roles and S3 Public Access Block misconfigurations, enabling least-privilege enforcement through tools like list_iam_roles, analyze_iam_policy, and analyze_s3_security.MIT
- FlicenseNot gradedqualityCmaintenanceA read-only MCP server for inspecting AWS resources, detecting misconfigurations, and estimating costs across EC2, S3, and IAM, enabling agents to safely query and analyze cloud infrastructure.-
- AlicenseAqualityDmaintenanceMCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.2MIT
- AlicenseAqualityAmaintenanceagent-bom v0.105.0 is an open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. The default scan profile in MCP server mode exposes 8 MCP tools. Additional profiles provide inventory, findings, compliance, graph, and runtime workflows.8669 PyPI31Apache 2.0
- AlicenseNot gradedqualityAmaintenanceScans MCP servers and AI tools for security risks, providing 4-dimensional scoring and badges, with optional guardrail MCP for auto-protection.2MIT
TDQS
Scored across 36 tools
Each tool clearly targets a distinct operation: list modules/groups/accounts, run specific scanners per security domain, generate specific report types, or save/setup. Even the many scan_* tools are each named for a unique security check (e.g., scan_ssl_certificate vs scan_dns_dangling), and their descriptions explicitly state what they scan. The grouping tools (scan_all, scan_group, scan_and_report) are distinct in their purpose and input/output.
Tool names follow a consistent verb_noun pattern: list_* for listing, scan_* for scanning, generate_* for report generation, and get_* for retrieval. Exceptions like save_results and get_setup_template still follow the verb_noun structure. All names use snake_case consistently.
With 36 tools, this is on the heavier side, but the broad scope of AWS security scanning justifies the count. Each scanner represents a distinct security domain, and report generation tools cover different formats and compliance frameworks. However, the sheer number might overwhelm an agent, especially since many scan_* tools are repetitive in pattern.
The tool surface covers the full lifecycle: listing available modules/groups, discovering org accounts, running individual scans, running grouped scans, generating multiple report types (Markdown, HTML, MLPS, HW defense, maturity), and saving results. Minor gaps include lack of a get_results or delete_report tool, but for a security scanning server, the coverage is quite complete.