@shieldly/mcp
以下摘录自该仓库的 README(片段) · 在 GitHub 读完整 README →
**AI-Powered Security Analysis for AWS — official MCP server.**
Gives any MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor,
etc.) two tools to analyze AWS IAM policies and CloudFormation templates for
security risks — privilege escalation paths, wildcards, and other
over-permissive access. Powered by Shieldly.
Setup
Add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json,
or Claude Code's .mcp.json):
Try it free — no account needed
Both tools run in demo mode without an API key (rate-limited, no signup). For
higher limits, set SHIELDLY_API_KEY:
Get an API key (Builder plan or above): https://www.shieldly.io/app/api
Tools
analyze_iam_policy
Analyzes an IAM identity policy, or a cross-account trust+identity pair.
| Argument | Type | Description |
| --- | --- | --- |
| policy | string | The IAM policy JSON as a string. |
| policyType | identity \| cross_account | Defaults to identity. |
analyze_cloudformation_template
Analyzes a CloudFormation template — extracts IAM roles/policies and flags
over-permissive access.
| Argument | Type | Description |
| --- | --- | --- |
| template | string | The CloudFormation template JSON as a string. |
Also available as
- CLI
- VS Code extension
- GitHub Action
- CDK Guard
- Web app
License
MIT