@shieldly/mcp (io.github.shieldly-io/mcp)

This MCP server provides tools for AI-assisted AWS security analysis by scanning IAM policies and CloudFormation templates for security risks, including privilege escalation paths and other over-permissive access. It is an official MCP server powered by Shieldly for any MCP-compatible AI assistant.

🛠️ Key Features

Analyzes AWS IAM policies for security risks
Analyzes AWS CloudFormation templates for security risks
Detects privilege escalation paths
Flags wildcards and other over-permissive access

🚀 Use Cases

Review IAM policy documents for risky permissions
Assess CloudFormation templates for insecure resource configurations
Identify escalation opportunities in infrastructure-as-code

⚡ Developer Benefits

Exposes analysis via two MCP tools for MCP-compatible assistants
Supports use in tools used with MCP clients (e.g., Claude Code, Claude Desktop, Cursor)

⚠️ Limitations

Focused on AWS IAM policies and CloudFormation templates only
No additional tool types or capabilities are described in the provided source data

@shieldly/mcp

AI-Powered Security Analysis for AWS — official MCP server.

Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, etc.) two tools to analyze AWS IAM policies and CloudFormation templates for security risks — privilege escalation paths, wildcards, and other over-permissive access. Powered by Shieldly.

Try it free — no account needed

Both tools run in demo mode without an API key (rate-limited, no signup). For higher limits, set SHIELDLY_API_KEY:

json

{
  "mcpServers": {
    "shieldly": {
      "command": "npx",
      "args": ["-y", "@shieldly/mcp"],
      "env": { "SHIELDLY_API_KEY": "sk_live_..." }
    }
  }
}

Tools

analyze_iam_policy

Analyzes an IAM identity policy, or a cross-account trust+identity pair.

Argument

Type

Description

policy

string

The IAM policy JSON as a string.

policyType

identity | cross_account

Defaults to identity.

analyze_cloudformation_template

Analyzes a CloudFormation template — extracts IAM roles/policies and flags over-permissive access.

Argument

Type

Description

template

string

The CloudFormation template JSON as a string.

Install

Configuration

Environment variables

SHIELDLY_API_KEYsecret

Shieldly API key (optional — without it the server runs in rate-limited demo mode, no signup needed)

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shieldly/mcp@1.0.1"
      ],
      "env": {
        "SHIELDLY_API_KEY": "<YOUR_SHIELDLY_API_KEY>"
      }
    }
  }
}

io.github.shieldly-io/mcp

@shieldly/mcp (io.github.shieldly-io/mcp)

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

@shieldly/mcp

Setup

Try it free — no account needed

Tools

`analyze_iam_policy`

`analyze_cloudformation_template`

Also available as

License

Install

Configuration

Related servers