"Amazon S3" matching MCP servers:

Tamper-evident audit logging for AI decisions. Three tools (record_decision, verify_decision, list_decisions) write to a regulator-grade ledger built on AWS S3 Object Lock with 7-year retention. Designed for EU AI Act Article 12 and FCA SS1/23 evidence requirements. Try zero-config: npx audit-ledger-mcp boots in sandbox mode against a public hosted tenant.

MCP server that provides AI-native access to BeVigil's OSINT API, enabling mobile app security research and asset discovery through tools for hosts, subdomains, S3 buckets, URLs, wordlists, and multi-step investigations.

MCP server that lets agents order temporary phone numbers, receive SMS verification codes, and manage activations via nine simple tools.

Enables MCP-capable agents to create and invoke OpenServerless endpoints, manage secrets, and configure integrations such as S3, PostgreSQL, Redis, Milvus, and MongoDB.

Read-only AWS account audit: finds public S3 buckets, missing root and user MFA, unused access keys, world-open security groups, CloudTrail gaps, and forgotten EC2/EBS/RDS spend across every region. Only makes Describe/List/Get calls and runs locally with your own AWS credentials.

Manage AWS, Hetzner, OVH, and custom SSH servers from AI agents — commands, logs, CloudWatch/CloudTrail, IP banning, and S3, with guard tiers and a full audit trail.

Enables MCP-compatible clients to query and manage LenelS2 S2 NetBox physical access-control systems via the NBAPI, with read-only tools by default and opt-in write/destructive operations.

A local stdio MCP server that enables coding agents to discover credential handles and create scoped action requests with local approval and sanitized output.

Provides real-time access to AWS security best practices, incident response playbooks, and preventive security measures from the official AWS Customer Playbook Framework repository. Enables users to query AWS security guidance for services like S3, IAM, EC2, and RDS through natural language.

A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.

Enables assistants to inspect tamper-evident AI agent action journals through read-only verification, event querying, and policy-rule explanation.

Provides secure live database querying, schema inspection, AWS S3 security audits, and Cloudflare infrastructure control through MCP tools.

Enables management and analysis of AWS security groups, S3 buckets, and VPC connections via MCP.

Enables a simulated assistant to investigate synthetic incidents, request containment actions that require separate human reauthentication and approval, apply authorized effects, and verify durable signed receipts while rejecting tampering and replay.

Enables Amazon Quick users to access a third-party MCP/REST API through Bedrock AgentCore Gateway with per-user Entra ID 3LO authentication. A request interceptor mints and injects a per-user downstream bearer token so the model never sees it.

Enables approval-gated actions for Alexa+ by exposing MCP tools that plan changes, require explicit user approval, execute only after precondition checks, and verify results with SHA-256 evidence digests.

Enables governed, read-only investigations of Amazon Athena access logs by searching exact user, IP, or correlation indicators and summarizing activity by correlation ID, with parameterized queries, validation, and result limits.

An MCP server that enables autonomous cloud operations and auditing: routing prompts through Amazon Bedrock with approval gating, running read-only AWS probes, and recording every action in a SHA-256 audit ledger optionally persisted to DynamoDB. It speaks the 2025-11-25 protocol over Streamable HTTP at /mcp and ships Terraform for the audit table and least-privilege IAM.

Provides automated security incident remediation tools for AWS, enabling real-time threat response by quarantining malicious S3 objects, restricting IAM access, and updating security groups.

Enables AI clients to read and manage personal files held in a self-hosted, path-scoped storage service, keeping data on your own infrastructure. Access is authenticated via OAuth and files are addressed by path rather than by bucket-style S3 APIs.