groovyBugify/aws-security-mcp

Inspect AWS security services and the resources they see

Before you install: no copy-paste command · no license recorded · link reachable

First step: git clone https://github.com/groovyBugify/aws-security-mcp.git

View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site

Install & config

Client config (built from the install command this repo gives)

{
  "mcpServers": {
    "groovybugify-aws-security-mcp": {
      "command": "uv",
      "args": ["tool", "install", "mcp-proxy"]
    }
  }
}

Parsed from the README we fetched on 2026-11-04; we have not executed it.

command/args come from the install command the repository states. When it is ambiguous, the project README wins.

VS Code (.vscode/mcp.json - the key is servers)

{
  "servers": {
    "groovybugify-aws-security-mcp": {
      "command": "uv",
      "args": ["tool", "install", "mcp-proxy"]
    }
  }
}

Same server, but VS Code keeps it under <code>servers</code>.

Claude Code (command line)

claude mcp add --transport stdio groovybugify-aws-security-mcp -- uv tool install mcp-proxy

Claude Code does not read a config file; add the server with this command.

Key names differ by client: Clients & CLI

Source: collected from the abordage/awesome-mcp list · type: MCP server
Harvest history: first seen 2026-11-05 · last seen 2026-11-14 · seen 10× · listed by 10 sources
Score: score 1,003 · 10 sources · mcp
Install: uv tool install mcp-proxy

FAQ (answers come from our records)

How do I install it?

The repository provides this install command: uv tool install mcp-proxy. It comes from the repository itself; we cannot guarantee it runs as-is in your client.

Who is it for?

We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.

Who maintains it?

first catalogued 2026-11-05；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.

# AWS Security MCP

以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →

A Model Context Protocol (MCP) server that enables AI assistants to perform comprehensive AWS security analysis through natural language queries.
## Overview
AWS Security MCP bridges AI assistants like Claude with AWS security services, enabling real-time infrastructure analysis through conversational queries. The system automatically discovers and analyzes resources across multiple AWS accounts, providing security insights without requiring deep AWS CLI knowledge.
### Key Capabilities
Cross-Account Discovery: Automatic detection and access to AWS Organization accounts
Natural Language Interface: Query AWS resources using plain English
Security Analysis: Integrated findings from GuardDuty, SecurityHub, and Access Analyzer
Infrastructure Mapping: Network topology, threat modelling, security review and blast radius analysis
Log Analytics: Athena-powered analysis of CloudTrail, VPC Flow Logs, and security events
## Prerequisites
Python: 3.11 or higher
Package Manager: uv
AWS Account: With appropriate IAM permissions
MCP Client: Claude Desktop, Cline, or compatible client
### AWS Requirements
MCP Server's AWS credentials must have the following permissions:
#### Core MCP Permissions
json
"Version": "2012-10-17",
"Statement": [
"Sid": "CrossAccountAccess",
"Effect": "Allow",
"Action": [
"sts:AssumeRole"
],
"Resource": "arn:aws:iam:::role/aws-security-mcp-cross-account-access"
},
"Sid": "OrganizationDiscovery",
"Effect": "Allow",
"Action": [
"organizations:ListAccounts"
],
"Resource": ""
#### Athena Integration Permissions
For advanced log analysis capabilities, additional permissions are required:
json
"Version": "2012-10-17",
"Statement": [
"Sid": "AthenaQueryExecution",
"Effect": "Allow",
"Action": [
"athena:BatchGetQueryExecution",
"athena:GetQueryExecution",
"athena:GetQueryResults",
"athena:GetWorkGroup",
"athena:GetTableMetadata",
"athena:ListQueryExecutions",
"athena:StartQueryExecution",
"athena:GetQueryResultsStream",
"athena:GetDataCatalog",
"athena:ListDataCatalogs",
"athena:ListDatabases",
"athena:ListTableMetadata"
],
"Resource": ""
},
"Sid": "GlueCatalogAccess",
"Effect": "Allow",
"Action": [
"glue:GetDatabase",
"glue:GetDatabases",
"glue:GetTable",
"glue:GetTables",
"glue:GetPartition",
"glue:GetPartitions",
"glue:BatchGetPartition"
],
"Resource": ""
},
"Sid": "S3LogDataAccess",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::your-cloudtrail-bucket/",
"arn:aws:s3:::your-cloudtrail-bucket",
"arn:aws:s3:::your-vpc-flow-logs-bucket/",
"arn:aws:s3:::your-vpc-flow-logs-bucket",
"arn:aws:s3:::your-security-logs-bucket/",
"arn:aws:s3:::your-security-logs-bucket"
},
"Sid": "AthenaResultsAccess",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket",
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::your-athena-results-bucket/",
"arn:aws:s3:::your-athena-results-bucket"
#### Required AWS Managed Policies
SecurityAudit Policy (Required)
Attach the AWS managed SecurityAudit policy to your MCP Server's IAM user or IAM role:
Policy ARN: arn:aws:iam::aws:policy/SecurityAudit
This policy provides comprehensive read-only access to AWS security services and is essential for AWS Security MCP functionality. It includes permissions for:

Listed badge (optional)

Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.

[![Listed on Anclum](https://anclum.com/badge/listed.svg)](https://anclum.com/en/s/groovybugify-aws-security-mcp/)

Source: awesome · https://github.com/groovyBugify/aws-security-mcp
Browse by field: MCP servers
Listed by: 10 independent sources
added: today

More like this

awslabs/mcpMCP server strowk/mcp-k8s-goMCP server bright8192/esxi-mcp-serverMCP server blackwhite084/playwright-plus-python-mcpMCP server

All 6,229 →

Filed under

MCP servers6,229 entries MCP server6,545 Curated list pick6,618

Every tag opens the full list for that filter. Counts are the live catalogue figures.

Browse all fields →

← Back to index