"author:kanchingyg" matching MCP servers:

Enables capturing real AWS SDK calls through Client-Side Monitoring (CSM UDP) and turning them into least-privilege IAM policies, emitted as JSON, Terraform, or AWS CDK over a JSON-RPC stdio interface. Policy writes are path-contained and dry-run by default, requiring an explicit opt-in flag.

An MCP server that lets coding agents and child processes run against format-preserving phantom tokens in process.env, while real secrets are injected only inside a local edge proxy when the outbound host matches an allowlist. It also exposes blocked exfiltration attempts for auditing.