A concise, AI-powered MCP server for AWS security analysis. It enables any MCP-compatible AI assistant to inspect IAM policies and CloudFormation templates for risks such as privilege escalation paths and over-permissive access. Integrates with Shieldly for security insights.

🛠️ Key Features

Analyzes AWS IAM policies and CloudFormation templates
Detects privilege escalation paths and over-permissive access
AI-assisted security recommendations via MCP-compatible assistants
Official MCP server integration with Shieldly-powered analysis

🚀 Use Cases

Security review of IAM policies for least-privilege violations
CloudFormation template risk assessment before deployment
AI assistant workflows that require secure AWS configuration checks

⚡ Developer Benefits

Clear guidance for integrating AWS policy and template analysis into MCP clients
Lightweight server designed for compatibility with Claude and other MCP tools
Powered by Shieldly for trusted security insights

⚠️ Limitations

Based on readme excerpt; surface-level description without deeper implementation details
May require setup in MCP client config as shown in the excerpt to function
Specific command and argument behavior depends on deployment and environment

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Setup

Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json, or Claude Code's .mcp.json):

json

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"]
    }
  }
}

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLY_API_KEY:

json

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Get an API key (Builder plan or above): https://www.shieldly.io/app/api

Tools

`analyze_iam_policy`

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

Argument	Type	Description
`policy`	string	The IAM policy JSON as a string.
`policyType`	`identity` \| `cross_account`	Defaults to `identity`.

`analyze_cloudformation_template`

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

Argument	Type	Description
`template`	string	The CloudFormation template JSON as a string.

Also available as

License

MIT

io.github.shieldly-io/mcp